last executing test programs: 11.021984576s ago: executing program 1 (id=2): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0) 10.991307173s ago: executing program 4 (id=5): mprotect(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffdf004fff, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000100)={0x8, 0x80000008b}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) 10.907455344s ago: executing program 4 (id=10): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100070000000000000006241a0000000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 10.894869464s ago: executing program 1 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 10.83790635s ago: executing program 1 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x8}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="c40000001900674c28bd70000000000000000000000000000000000000000000fe88000000000000000000000000010100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac0000000000000000000004000000fffffffffffffffffdff00000000000000000000000000000a00100001"], 0xc4}}, 0x4c050) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES64=r6, @ANYRES32=r4], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.722603732s ago: executing program 4 (id=19): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000000000000000660000000000000000005f00000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) 9.637685012s ago: executing program 4 (id=22): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)='0000:00:02.0', 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/lpc_ich/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF ', 0x24) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x1, 0x0) write(r1, &(0x7f0000000f00)='0000:00:03.0', 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @local}, {0x2, 0x20, @empty}, 0x142, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) 8.067593255s ago: executing program 4 (id=36): write$char_usb(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 6.806813813s ago: executing program 1 (id=52): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44) 5.93354545s ago: executing program 32 (id=52): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44) 2.767159677s ago: executing program 0 (id=78): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0x36, 0x0, &(0x7f0000000580)="e460334470b8d480eb20010086ddf80c39e7d34ed50ffb4def8474246fae5bd7fd7fc979c18b04cc038cf6825bc8379d1232f0bf7a53", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.637994799s ago: executing program 0 (id=79): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}]}, {0x4}]}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x818}, 0x4040400) 2.570312169s ago: executing program 0 (id=80): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc', 0xa) close(r0) r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0xf0140, 0x59385ab20729bdaa) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000340), 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(r0, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') 2.561816965s ago: executing program 0 (id=83): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 2.47362539s ago: executing program 0 (id=84): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc', 0xa) close(r0) r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0xf0140, 0x59385ab20729bdaa) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000340), 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(r0, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') 2.452498998s ago: executing program 0 (id=86): r0 = syz_usb_connect$uac2(0x0, 0xa8, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB='@\f$\x00\x00\x00A'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)={0x0, 0x3, 0xf, "00d60ed8c4b3b0f6a33d25a9a7df29"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 813.469563ms ago: executing program 2 (id=129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 807.81629ms ago: executing program 5 (id=130): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x17987}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4) 789.010871ms ago: executing program 2 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') 754.99651ms ago: executing program 2 (id=132): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc', 0xa) close(r0) r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0xf0140, 0x59385ab20729bdaa) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) write(r0, &(0x7f0000000340), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(r0, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') 725.574771ms ago: executing program 2 (id=133): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc', 0xa) close(r0) r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0xf0140, 0x59385ab20729bdaa) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) write(r0, &(0x7f0000000340), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(r0, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') 703.966455ms ago: executing program 2 (id=134): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)='0000:00:02.0', 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/lpc_ich/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF ', 0x24) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x1, 0x0) write(r1, &(0x7f0000000f00)='0000:00:03.0', 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @local}, {0x2, 0x20, @empty}, 0x142, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) 635.097134ms ago: executing program 5 (id=135): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x3dd88, 0x17e00}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x40}, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c) 585.671448ms ago: executing program 5 (id=136): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0x3ff}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 266.091454ms ago: executing program 3 (id=137): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc', 0xa) close(r0) r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0xf0140, 0x59385ab20729bdaa) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000340), 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(r0, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x90) write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc) close(r4) r5 = syz_open_dev$video(&(0x7f0000002200), 0xf, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000c40)={0x2, @vbi={0x8, 0xd3, 0xd, 0x30314752, [0x10, 0x40], [0x5], 0x1}}) 233.651765ms ago: executing program 3 (id=138): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x56b102, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x73) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x8a, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"}) r3 = syz_open_pts(r2, 0x141401) fcntl$setstatus(r3, 0x4, 0x2000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) close_range(r1, 0xffffffffffffffff, 0x0) 205.007764ms ago: executing program 3 (id=139): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0xa, [{0xe, 0x3}, {0xc, 0x3}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x5, 0x4797}]}]}, {0x0, [0x2e, 0x30, 0x0, 0x61, 0x4f]}}, &(0x7f0000000f40)=""/4089, 0x4f, 0xff9, 0x1}, 0x28) 175.040135ms ago: executing program 3 (id=140): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'pim6reg1\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000202140fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) 174.579673ms ago: executing program 2 (id=141): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0xc, &(0x7f0000000300), 0x2, 0x53a, &(0x7f00000011c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)=0x400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0xfffffeb1) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 71.631015ms ago: executing program 5 (id=142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 71.091197ms ago: executing program 5 (id=143): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc', 0xa) close(r0) r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0xf0140, 0x59385ab20729bdaa) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000340), 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(r0, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x90) write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc) close(r4) r5 = syz_open_dev$video(&(0x7f0000002200), 0xf, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000c40)={0x2, @vbi={0x8, 0xd3, 0xd, 0x30314752, [0x10, 0x40], [0x5], 0x1}}) 37.116001ms ago: executing program 3 (id=144): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc', 0xa) close(r0) r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0xf0140, 0x59385ab20729bdaa) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000340), 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(r0, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x90) write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc) close(r4) r5 = syz_open_dev$video(&(0x7f0000002200), 0xf, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000c40)={0x2, @vbi={0x8, 0xd3, 0xd, 0x30314752, [0x10, 0x40], [0x5], 0x1}}) 36.709597ms ago: executing program 3 (id=145): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc', 0xa) close(r0) r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0xf0140, 0x59385ab20729bdaa) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000340), 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(r0, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x90) write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc) close(r4) r5 = syz_open_dev$video(&(0x7f0000002200), 0xf, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000c40)={0x2, @vbi={0x8, 0xd3, 0xd, 0x30314752, [0x10, 0x40], [0x5], 0x1}}) 0s ago: executing program 5 (id=146): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x21090139, 0x1000, 0x0, 0x86, 0xdb, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) kernel console output (not intermixed with test programs): [ 8.071767][ T4410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 8.073772][ T4410] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 8.103134][ T13] gve 0000:00:00.0 enp0s0: Device link is up. OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.84' (ED25519) to the list of known hosts. syzkaller login: [ 27.864140][ T4709] cgroup: Unknown subsys name 'net' [ 28.004263][ T4709] cgroup: Unknown subsys name 'cpuset' [ 28.006373][ T4709] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.171830][ T4709] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 28.958468][ T4724] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 28.970323][ T4731] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 28.972569][ T4732] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 28.973097][ T4732] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 28.973214][ T4732] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 28.973744][ T4732] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 28.974100][ T4732] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 28.974519][ T4732] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 28.974658][ T4732] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 28.974846][ T4732] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 28.975175][ T4732] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 28.975386][ T4732] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 28.976018][ T4732] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 28.976183][ T4732] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 28.976316][ T4732] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 28.976500][ T4732] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 28.976821][ T4732] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 28.977030][ T4732] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 28.977908][ T4732] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 28.978266][ T4732] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 28.978462][ T4732] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 28.979121][ T4732] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 28.981131][ T4732] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 28.983539][ T4732] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 28.983683][ T4732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.303924][ T4726] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.305458][ T4726] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.307073][ T4726] bridge_slave_0: entered allmulticast mode [ 29.308714][ T4726] bridge_slave_0: entered promiscuous mode [ 29.314219][ T4726] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.315626][ T4726] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.317103][ T4726] bridge_slave_1: entered allmulticast mode [ 29.318947][ T4726] bridge_slave_1: entered promiscuous mode [ 29.391551][ T4726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.392590][ T4726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.414545][ T4726] team0: Port device team_slave_0 added [ 29.414620][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.417134][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.418666][ T4721] bridge_slave_0: entered allmulticast mode [ 29.420341][ T4721] bridge_slave_0: entered promiscuous mode [ 29.432107][ T4726] team0: Port device team_slave_1 added [ 29.435262][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.436631][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.438140][ T4721] bridge_slave_1: entered allmulticast mode [ 29.439814][ T4721] bridge_slave_1: entered promiscuous mode [ 29.456406][ T4729] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.456482][ T4729] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.456578][ T4729] bridge_slave_0: entered allmulticast mode [ 29.457014][ T4729] bridge_slave_0: entered promiscuous mode [ 29.457819][ T4729] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.457837][ T4729] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.457892][ T4729] bridge_slave_1: entered allmulticast mode [ 29.458629][ T4729] bridge_slave_1: entered promiscuous mode [ 29.467099][ T4726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.467121][ T4726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.467149][ T4726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.467958][ T4726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.467965][ T4726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.467977][ T4726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.479584][ T4726] hsr_slave_0: entered promiscuous mode [ 29.479935][ T4726] hsr_slave_1: entered promiscuous mode [ 29.493987][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.494048][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.494105][ T4720] bridge_slave_0: entered allmulticast mode [ 29.494517][ T4720] bridge_slave_0: entered promiscuous mode [ 29.496048][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.496078][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.496135][ T4720] bridge_slave_1: entered allmulticast mode [ 29.496590][ T4720] bridge_slave_1: entered promiscuous mode [ 29.503397][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.504791][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.514028][ T4721] team0: Port device team_slave_0 added [ 29.524261][ T4729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.525222][ T4729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.529298][ T4721] team0: Port device team_slave_1 added [ 29.539969][ T4733] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.541357][ T4733] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.542701][ T4733] bridge_slave_0: entered allmulticast mode [ 29.544469][ T4733] bridge_slave_0: entered promiscuous mode [ 29.552089][ T4729] team0: Port device team_slave_0 added [ 29.553319][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.554507][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.561974][ T4733] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.563110][ T4733] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.563166][ T4733] bridge_slave_1: entered allmulticast mode [ 29.563577][ T4733] bridge_slave_1: entered promiscuous mode [ 29.572705][ T4729] team0: Port device team_slave_1 added [ 29.573831][ T4720] team0: Port device team_slave_0 added [ 29.574575][ T4720] team0: Port device team_slave_1 added [ 29.577514][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.578687][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.583072][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.583663][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.583671][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.583683][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.595052][ T4733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.595978][ T4733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.602629][ T4721] hsr_slave_0: entered promiscuous mode [ 29.603692][ T4721] hsr_slave_1: entered promiscuous mode [ 29.604217][ T4721] debugfs: 'hsr0' already exists in 'hsr' [ 29.604249][ T4721] Cannot create hsr debugfs directory [ 29.617675][ T4729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.617700][ T4729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.617711][ T4729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.618404][ T4729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.618411][ T4729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.618422][ T4729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.628557][ T4729] hsr_slave_0: entered promiscuous mode [ 29.628823][ T4729] hsr_slave_1: entered promiscuous mode [ 29.628995][ T4729] debugfs: 'hsr0' already exists in 'hsr' [ 29.629004][ T4729] Cannot create hsr debugfs directory [ 29.638699][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.639910][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.643013][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.643813][ T4733] team0: Port device team_slave_0 added [ 29.644959][ T4733] team0: Port device team_slave_1 added [ 29.657363][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.658625][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.662942][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.668705][ T4733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.670078][ T4733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.673071][ T4733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.673645][ T4733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.673652][ T4733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.673664][ T4733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.683310][ T4733] hsr_slave_0: entered promiscuous mode [ 29.684097][ T4733] hsr_slave_1: entered promiscuous mode [ 29.684304][ T4733] debugfs: 'hsr0' already exists in 'hsr' [ 29.684314][ T4733] Cannot create hsr debugfs directory [ 29.737857][ T4720] hsr_slave_0: entered promiscuous mode [ 29.738204][ T4720] hsr_slave_1: entered promiscuous mode [ 29.738427][ T4720] debugfs: 'hsr0' already exists in 'hsr' [ 29.738436][ T4720] Cannot create hsr debugfs directory [ 29.776604][ T4726] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.779812][ T4726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.789566][ T4726] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.791812][ T4726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.801512][ T4726] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.804464][ T4726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.804770][ T4726] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.806749][ T4726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.832149][ T4726] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.832203][ T4726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.832352][ T4726] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.832390][ T4726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.837415][ T4721] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.838753][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.839057][ T4721] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.841057][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.842282][ T4721] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.844658][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.844985][ T4721] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.846713][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.862027][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.862067][ T4721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.862149][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.862182][ T4721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.873901][ T4729] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.876351][ T4729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.877976][ T4729] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.880188][ T4729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.884213][ T4729] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.887330][ T4729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.887635][ T4729] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.889464][ T4729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.910111][ T4726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.911003][ T4729] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.911038][ T4729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.911126][ T4729] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.911162][ T4729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.928490][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.930001][ T4720] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.932333][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.932778][ T4720] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.934894][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.938463][ T3090] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.939901][ T3090] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.942767][ T3090] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.944297][ T3090] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.945647][ T3090] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.947089][ T3090] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.961505][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.963613][ T4720] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.964804][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.965096][ T4720] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.966093][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.975709][ T3090] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.975757][ T3090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.980747][ T4726] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.983014][ T3090] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.983056][ T3090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.991243][ T3090] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.991286][ T3090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.991921][ T4733] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.995334][ T4733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.004024][ T4729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.005402][ T4733] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.007579][ T4733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.008295][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.008314][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.009031][ T4733] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.010914][ T4733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.018758][ T4733] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.020843][ T4733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.043647][ T4721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.043677][ T4721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.055081][ T4729] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.075931][ T3090] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.075985][ T3090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.087040][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.098915][ T4720] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.105694][ T3090] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.105744][ T3090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.106137][ T3090] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.106156][ T3090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.110647][ T3090] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.110671][ T3090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.129063][ T4720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.129098][ T4720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.158449][ T4733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.161183][ T4729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.193643][ T4733] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.207692][ T3659] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.207740][ T3659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.208141][ T3659] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.208160][ T3659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.291812][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.312838][ T4721] veth0_vlan: entered promiscuous mode [ 30.324214][ T4721] veth1_vlan: entered promiscuous mode [ 30.331970][ T4721] veth0_macvtap: entered promiscuous mode [ 30.334545][ T4721] veth1_macvtap: entered promiscuous mode [ 30.340142][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.350463][ T4726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.357835][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.361464][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.397507][ T4729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.407805][ T4726] veth0_vlan: entered promiscuous mode [ 30.420791][ T4726] veth1_vlan: entered promiscuous mode [ 30.430420][ T4720] veth0_vlan: entered promiscuous mode [ 30.447709][ T4733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.449468][ T4720] veth1_vlan: entered promiscuous mode [ 30.463025][ T3659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.463053][ T3659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.472540][ T4720] veth0_macvtap: entered promiscuous mode [ 30.475624][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.475635][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.482521][ T4729] veth0_vlan: entered promiscuous mode [ 30.487185][ T4720] veth1_macvtap: entered promiscuous mode [ 30.496695][ T4729] veth1_vlan: entered promiscuous mode [ 30.510415][ T4726] veth0_macvtap: entered promiscuous mode [ 30.513040][ T4726] veth1_macvtap: entered promiscuous mode [ 30.516989][ T3294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.517111][ T3294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.519038][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.520142][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.524096][ T3659] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.524423][ T3659] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.524447][ T3659] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.524467][ T3659] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.537574][ T4721] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.562203][ T4729] veth0_macvtap: entered promiscuous mode [ 30.570689][ T4726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.571805][ T4726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.575120][ T4729] veth1_macvtap: entered promiscuous mode [ 30.592491][ T3659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.594595][ T3659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.602386][ T4729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.609548][ T4729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.612543][ T2985] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.612638][ T2985] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.612695][ T2985] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.612836][ T2985] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.626760][ T4733] veth0_vlan: entered promiscuous mode [ 30.638411][ T3294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.638444][ T3294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.659087][ T4733] veth1_vlan: entered promiscuous mode [ 30.664286][ T3659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.664309][ T3659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.664613][ T3294] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.665350][ T3294] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.665496][ T3294] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.665642][ T3294] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.665747][ T3294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.665862][ T3294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.676784][ T4904] loop0: detected capacity change from 0 to 512 [ 30.690696][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.690722][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.696199][ T4733] veth0_macvtap: entered promiscuous mode [ 30.698477][ T4733] veth1_macvtap: entered promiscuous mode [ 30.709871][ T4733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.712356][ T4733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.742451][ T4907] loop3: detected capacity change from 0 to 1024 [ 30.744796][ T4907] ======================================================= [ 30.744796][ T4907] WARNING: The mand mount option has been deprecated and [ 30.744796][ T4907] and is ignored by this kernel. Remove the mand [ 30.744796][ T4907] option from the mount to silence this warning. [ 30.744796][ T4907] ======================================================= [ 30.758633][ T4907] EXT4-fs: Ignoring removed nomblk_io_submit option [ 30.796072][ T4907] EXT4-fs (loop3): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 30.804294][ T3294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.805976][ T3294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.062395][ T4723] Bluetooth: hci2: command tx timeout [ 31.062587][ T4723] Bluetooth: hci3: command tx timeout [ 31.063215][ T4731] Bluetooth: hci1: command tx timeout [ 31.063483][ T4731] Bluetooth: hci0: command tx timeout [ 31.063550][ T4731] Bluetooth: hci4: command tx timeout [ 31.068981][ T4914] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4: bg 0: block 112: padding at end of block bitmap is not set [ 31.073953][ T4914] EXT4-fs (loop3): Remounting filesystem read-only [ 31.076095][ T3294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.076122][ T3294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.090382][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.090407][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.098713][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0100-0006-0000-000000000000. [ 31.104588][ T3294] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.104765][ T3090] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.104793][ T3090] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.104823][ T3090] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.120677][ T3294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.120705][ T3294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.162347][ T4920] loop3: detected capacity change from 0 to 512 [ 31.176845][ T4920] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.7: iget: bad extra_isize 90 (inode size 256) [ 31.176908][ T4920] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 31.177566][ T4920] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.7: error while reading EA inode 11 err=-117 [ 31.177604][ T4920] loop3: lost filesystem error report for type 5 error -117 [ 31.177768][ T4920] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.177839][ T4920] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.7: iget: bad extra_isize 90 (inode size 256) [ 31.177862][ T4920] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 31.178259][ T4920] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.7: error while reading EA inode 11 err=-117 [ 31.178273][ T4920] loop3: lost filesystem error report for type 5 error -117 [ 31.178751][ T4920] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.7: iget: bad extra_isize 90 (inode size 256) [ 31.178772][ T4920] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 31.179486][ T4920] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.7: error while reading EA inode 18 err=-117 [ 31.179501][ T4920] loop3: lost filesystem error report for type 5 error -117 [ 31.179790][ T4920] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.7: iget: bad extra_isize 90 (inode size 256) [ 31.179808][ T4920] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 31.179961][ T4920] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.7: error while reading EA inode 18 err=-117 [ 31.179973][ T4920] loop3: lost filesystem error report for type 5 error -117 [ 31.180597][ T4920] EXT4-fs (loop3): 1 orphan inode deleted [ 31.181054][ T4920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.215322][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.290778][ T4930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.295092][ T4930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.303673][ T4932] loop3: detected capacity change from 0 to 256 [ 31.351500][ T4936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.356352][ T4936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.382276][ T4938] loop3: detected capacity change from 0 to 512 [ 31.387559][ T4938] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.15: corrupted in-inode xattr: invalid ea_ino [ 31.389495][ T4938] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 31.389801][ T4938] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.15: couldn't read orphan inode 15 (err -117) [ 31.389821][ T4938] loop3: lost filesystem error report for type 5 error -117 [ 31.390538][ T4938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.425167][ T4938] overlayfs: workdir and upperdir must reside under the same mount [ 31.436119][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.502055][ T4949] tipc: Started in network mode [ 32.502081][ T4949] tipc: Node identity , cluster identity 4711 [ 32.502102][ T4949] tipc: Failed to set node id, please configure manually [ 32.502122][ T4949] tipc: Enabling of bearer rejected, failed to enable media [ 32.592701][ T4957] Config c/1 of g1 needs at least one function. [ 32.594356][ T4957] udc usbip-vudc.0: failed to start g1: -22 [ 32.595628][ T4957] configfs-gadget.g1 gadget.1: probe with driver configfs-gadget.g1 failed with error -22 [ 32.598410][ T4957] UDC core: g1: couldn't find an available UDC or it's busy [ 32.741684][ T4971] binder: 4970:4971 tried to acquire reference to desc 0, got 1 instead [ 32.742021][ T4971] binder: 4970:4971 got transaction with invalid parent offset or type [ 32.742043][ T4971] binder: 4971:4970 failed to fixup parent [ 32.742096][ T4971] binder: 4970:4971 transaction call to 4970:0 failed 5/29201/-22, code 0 size 88-24 line 3717 [ 32.742588][ T4808] binder: undelivered TRANSACTION_ERROR: 29201 [ 33.047044][ T4974] binder: 4973:4974 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 33.049739][ T4974] binder: 4974 RLIMIT_NICE not set [ 33.055453][ T4977] loop3: detected capacity change from 0 to 512 [ 33.060630][ T4977] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.31: corrupted in-inode xattr: invalid ea_ino [ 33.060667][ T4977] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 33.061048][ T4977] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.31: couldn't read orphan inode 15 (err -117) [ 33.061067][ T4977] loop3: lost filesystem error report for type 5 error -117 [ 33.061583][ T4977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.092446][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.143271][ T4731] Bluetooth: hci0: command tx timeout [ 33.144115][ T4731] Bluetooth: hci1: command tx timeout [ 33.144605][ T4731] Bluetooth: hci2: command tx timeout [ 33.145513][ T4723] Bluetooth: hci4: command tx timeout [ 34.146854][ T4989] Config c/1 of g1 needs at least one function. [ 34.146929][ T4989] udc usbip-vudc.0: failed to start g1: -22 [ 34.146955][ T4989] configfs-gadget.g1 gadget.1: probe with driver configfs-gadget.g1 failed with error -22 [ 34.147246][ T4989] UDC core: g1: couldn't find an available UDC or it's busy [ 34.302891][ T4999] loop0: detected capacity change from 0 to 512 [ 34.310133][ T4999] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 34.310146][ T4999] EXT4-fs (loop0): group descriptors corrupted! [ 34.496756][ T5013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.499401][ T5013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.773718][ T5013] loop2: detected capacity change from 0 to 1024 [ 34.798625][ T5013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.225268][ T4732] Bluetooth: hci4: command tx timeout [ 35.226516][ T4732] Bluetooth: hci2: command tx timeout [ 35.226557][ T4732] Bluetooth: hci1: command tx timeout [ 35.226578][ T4732] Bluetooth: hci0: command tx timeout [ 35.385126][ T5025] Config c/1 of g1 needs at least one function. [ 35.385194][ T5025] udc usbip-vudc.0: failed to start g1: -22 [ 35.385218][ T5025] configfs-gadget.g1 gadget.1: probe with driver configfs-gadget.g1 failed with error -22 [ 35.385595][ T5025] UDC core: g1: couldn't find an available UDC or it's busy [ 35.385644][ T4726] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.282537][ T5035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.282734][ T5035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.330486][ T4732] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.336400][ T4732] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.338465][ T4732] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.352514][ T4732] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.354473][ T4732] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.389024][ T3090] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.438052][ T30] audit: type=1326 audit(36.410:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5048 comm="syz.3.60" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93779228 code=0x7ffc0000 [ 36.438822][ T30] audit: type=1326 audit(36.410:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5048 comm="syz.3.60" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=202 compat=0 ip=0xffff93779228 code=0x7ffc0000 [ 36.438899][ T30] audit: type=1326 audit(36.410:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5048 comm="syz.3.60" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93779228 code=0x7ffc0000 [ 36.438971][ T30] audit: type=1326 audit(36.410:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5048 comm="syz.3.60" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93779228 code=0x7ffc0000 [ 36.481245][ T4912] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 36.481283][ T4912] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 36.481295][ T4912] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 36.481304][ T4912] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 36.481313][ T4912] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 36.481321][ T4912] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 36.481329][ T4912] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 36.481336][ T4912] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 36.498934][ T4912] hid-generic 0000:0000:0001.0001: hidraw0: HID v0.10 Device [syz0] on syz1 [ 36.530810][ T5056] fido_id[5056]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 36.637107][ T5036] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.638824][ T5036] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.640518][ T5036] bridge_slave_0: entered allmulticast mode [ 36.642314][ T5036] bridge_slave_0: entered promiscuous mode [ 36.644567][ T5036] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.646092][ T5036] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.652003][ T5036] bridge_slave_1: entered allmulticast mode [ 36.665853][ T5036] bridge_slave_1: entered promiscuous mode [ 36.969480][ T5036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.974495][ T5036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.991939][ T5036] team0: Port device team_slave_0 added [ 36.992806][ T5036] team0: Port device team_slave_1 added [ 36.999592][ T5036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.999856][ T5036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.000038][ T5036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.000869][ T5036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.001112][ T5036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.001279][ T5036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.048264][ T5036] hsr_slave_0: entered promiscuous mode [ 37.048672][ T5036] hsr_slave_1: entered promiscuous mode [ 37.048867][ T5036] debugfs: 'hsr0' already exists in 'hsr' [ 37.048878][ T5036] Cannot create hsr debugfs directory [ 37.196743][ T5075] loop2: detected capacity change from 0 to 1024 [ 37.292442][ T5075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.318136][ T4732] Bluetooth: hci0: command tx timeout [ 37.318275][ T4732] Bluetooth: hci1: command tx timeout [ 37.318390][ T4732] Bluetooth: hci2: command tx timeout [ 37.318547][ T4732] Bluetooth: hci4: command tx timeout [ 38.178031][ T5036] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 38.187311][ T5036] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.188093][ T5036] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 38.230970][ T5036] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.231456][ T5036] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 38.240629][ T5036] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.241225][ T5036] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 38.246794][ T5036] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.260338][ T4726] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.366802][ T5036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.375768][ T5036] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.378192][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.378238][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.389467][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.389501][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.420289][ T4723] Bluetooth: hci3: command tx timeout [ 39.226372][ T5107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'. [ 39.551575][ T5036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.687187][ T5036] veth0_vlan: entered promiscuous mode [ 39.698477][ T5036] veth1_vlan: entered promiscuous mode [ 39.724798][ T5036] veth0_macvtap: entered promiscuous mode [ 39.725987][ T5036] veth1_macvtap: entered promiscuous mode [ 39.740816][ T5036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.741860][ T5036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.823161][ T1248] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.823339][ T1248] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.823370][ T1248] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.823384][ T1248] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.848896][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.848924][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.877044][ T1248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.877076][ T1248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.975660][ T5160] Injecting memory failure for pfn 0x219070 at process virtual address 0x20ffd000 [ 39.983310][ T4822] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 39.987093][ T5160] Memory failure: 0x219070: unhandlable page. [ 39.987129][ T5160] Memory failure: 0x219070: recovery action for get hwpoison page: Ignored [ 40.001731][ T3090] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.083934][ T3090] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.149842][ T4822] usb 1-1: unable to get BOS descriptor or descriptor too short [ 40.149941][ T4822] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 40.151075][ T4822] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 40.152588][ T4822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.152598][ T4822] usb 1-1: Product: syz [ 40.152606][ T4822] usb 1-1: Manufacturer: syz [ 40.152614][ T4822] usb 1-1: SerialNumber: syz [ 40.179544][ T3090] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.380142][ T3090] bridge_slave_1: left allmulticast mode [ 40.380183][ T3090] bridge_slave_1: left promiscuous mode [ 40.380541][ T3090] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.388007][ T3090] bridge_slave_0: left allmulticast mode [ 40.388043][ T3090] bridge_slave_0: left promiscuous mode [ 40.388124][ T3090] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.493067][ T4723] Bluetooth: hci3: command tx timeout [ 40.508400][ T3090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.534675][ T3090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.545673][ T3090] bond0 (unregistering): Released all slaves [ 40.559053][ T5190] veth0_to_bond: entered promiscuous mode [ 40.559422][ T5190] macsec1: entered promiscuous mode [ 40.559498][ T5190] macsec1: entered allmulticast mode [ 40.559511][ T5190] veth0_to_bond: entered allmulticast mode [ 40.636273][ T5195] loop5: detected capacity change from 0 to 512 [ 40.649170][ T5195] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 40.812644][ T4410] 8021q: adding VLAN 0 to HW filter on device eth0 [ 40.915959][ T3090] hsr_slave_0: left promiscuous mode [ 40.917173][ T3090] hsr_slave_1: left promiscuous mode [ 40.917488][ T3090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.917513][ T3090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.923074][ T3090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.923154][ T3090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.937937][ T3090] veth1_macvtap: left promiscuous mode [ 40.937985][ T3090] veth0_macvtap: left promiscuous mode [ 40.938033][ T3090] veth1_vlan: left promiscuous mode [ 40.938073][ T3090] veth0_vlan: left promiscuous mode [ 41.199492][ T3090] team0 (unregistering): Port device team_slave_1 removed [ 41.209282][ T3090] team0 (unregistering): Port device team_slave_0 removed [ 41.234170][ T5261] binder: 5260:5261 tried to acquire reference to desc 0, got 1 instead [ 41.236168][ T5261] binder: 5260:5261 got transaction with invalid offsets ptr [ 41.237995][ T5261] binder: 5260:5261 transaction call to 5260:0 failed 14/29201/-22, code 0 size 4216-24 line 3753 [ 41.240626][ T867] binder: undelivered TRANSACTION_ERROR: 29201 [ 41.335825][ T5271] loop5: detected capacity change from 0 to 128 [ 41.337779][ T5271] FAT-fs (loop5): data area starts beyond volume (33 > 0) [ 41.337796][ T5271] FAT-fs (loop5): Can't find a valid FAT filesystem [ 41.437581][ T4410] 8021q: adding VLAN 0 to HW filter on device eth1 [ 41.446087][ T5276] erspan0: entered promiscuous mode [ 41.446142][ T5276] macsec1: entered promiscuous mode [ 41.462368][ T5276] erspan0: left promiscuous mode [ 41.532444][ T5287] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 41.562438][ T5290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.562639][ T5290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.668431][ T4410] 8021q: adding VLAN 0 to HW filter on device eth2 [ 41.835525][ T4410] 8021q: adding VLAN 0 to HW filter on device eth3 [ 41.934494][ T5322] Config c/1 of g1 needs at least one function. [ 41.934565][ T5322] udc usbip-vudc.0: failed to start g1: -22 [ 41.934578][ T5322] configfs-gadget.g1 gadget.1: probe with driver configfs-gadget.g1 failed with error -22 [ 41.934839][ T5322] UDC core: g1: couldn't find an available UDC or it's busy [ 42.027047][ T5329] xt_hashlimit: size too large, truncated to 1048576 [ 42.034873][ T5330] loop2: detected capacity change from 0 to 512 [ 42.063663][ T5330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.130234][ T5339] Config c/1 of g1 needs at least one function. [ 42.130302][ T5339] udc usbip-vudc.0: failed to start g1: -22 [ 42.130324][ T5339] configfs-gadget.g1 gadget.1: probe with driver configfs-gadget.g1 failed with error -22 [ 42.130873][ T5339] UDC core: g1: couldn't find an available UDC or it's busy [ 42.154833][ T5340] Config c/1 of g1 needs at least one function. [ 42.154894][ T5340] udc usbip-vudc.0: failed to start g1: -22 [ 42.154918][ T5340] configfs-gadget.g1 gadget.1: probe with driver configfs-gadget.g1 failed with error -22 [ 42.155336][ T5340] UDC core: g1: couldn't find an available UDC or it's busy [ 42.157500][ T5342] Config c/1 of g1 needs at least one function. [ 42.157551][ T5342] udc usbip-vudc.0: failed to start g1: -22 [ 42.157568][ T5342] configfs-gadget.g1 gadget.1: probe with driver configfs-gadget.g1 failed with error -22 [ 42.157768][ T5342] UDC core: g1: couldn't find an available UDC or it's busy [ 42.185557][ T5330] [ 42.186003][ T5330] ====================================================== [ 42.187246][ T5330] WARNING: possible circular locking dependency detected [ 42.188489][ T5330] syzkaller #0 Not tainted [ 42.189239][ T5330] ------------------------------------------------------ [ 42.190492][ T5330] syz.2.141/5330 is trying to acquire lock: [ 42.191539][ T5330] ffff0000f14767e0 (&ei->xattr_sem){++++}-{4:4}, at: ext4_xattr_set_handle+0x134/0xde4 [ 42.193201][ T5330] [ 42.193201][ T5330] but task is already holding lock: [ 42.194455][ T5330] ffff0000cda38c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x280/0xc54 [ 42.196305][ T5330] [ 42.196305][ T5330] which lock already depends on the new lock. [ 42.196305][ T5330] [ 42.198214][ T5330] [ 42.198214][ T5330] the existing dependency chain (in reverse order) is: [ 42.199839][ T5330] [ 42.199839][ T5330] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 42.201385][ T5330] percpu_down_read_internal+0x5c/0x294 [ 42.202512][ T5330] ext4_writepages+0x170/0x2dc [ 42.203417][ T5330] do_writepages+0x284/0x47c [ 42.204327][ T5330] __writeback_single_inode+0x140/0x1880 [ 42.205350][ T5330] writeback_single_inode+0x400/0xb20 [ 42.206327][ T5330] write_inode_now+0x170/0x208 [ 42.207185][ T5330] iput+0x7cc/0xc2c [ 42.207907][ T5330] ext4_xattr_block_set+0x1460/0x21e8 [ 42.208893][ T5330] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 42.209982][ T5330] __ext4_expand_extra_isize+0x2a4/0x378 [ 42.211028][ T5330] __ext4_mark_inode_dirty+0x394/0x828 [ 42.212106][ T5330] ext4_evict_inode+0x798/0xfb8 [ 42.213079][ T5330] evict+0x4c0/0x74c [ 42.213798][ T5330] iput+0x8f0/0xc2c [ 42.214567][ T5330] ext4_process_orphan+0x24c/0x2c0 [ 42.215479][ T5330] ext4_orphan_cleanup+0x7d4/0xd20 [ 42.216446][ T5330] ext4_fill_super+0x4628/0x4e14 [ 42.217450][ T5330] get_tree_bdev_flags+0x388/0x43c [ 42.218450][ T5330] get_tree_bdev+0x2c/0x3c [ 42.219342][ T5330] ext4_get_tree+0x28/0x38 [ 42.220225][ T5330] vfs_get_tree+0x90/0x28c [ 42.221056][ T5330] fc_mount+0x24/0xac [ 42.221808][ T5330] do_new_mount+0x2a4/0x538 [ 42.222692][ T5330] path_mount+0x5f0/0xa88 [ 42.223549][ T5330] do_mount+0xe8/0x148 [ 42.224314][ T5330] __arm64_sys_mount+0x33c/0x388 [ 42.225215][ T5330] invoke_syscall+0x98/0x244 [ 42.226070][ T5330] el0_svc_common+0xec/0x23c [ 42.226982][ T5330] do_el0_svc+0x4c/0x5c [ 42.227770][ T5330] el0_svc+0x64/0x260 [ 42.228497][ T5330] el0t_64_sync_handler+0x44/0x104 [ 42.229435][ T5330] el0t_64_sync+0x198/0x19c [ 42.230212][ T5330] [ 42.230212][ T5330] -> #0 (&ei->xattr_sem){++++}-{4:4}: [ 42.231456][ T5330] __lock_acquire+0x17c0/0x2ebc [ 42.232346][ T5330] lock_acquire+0x140/0x364 [ 42.233168][ T5330] down_write+0x50/0xc0 [ 42.233974][ T5330] ext4_xattr_set_handle+0x134/0xde4 [ 42.234999][ T5330] ext4_initxattrs+0xa8/0x11c [ 42.235881][ T5330] security_inode_init_security+0x244/0x370 [ 42.236975][ T5330] ext4_init_security+0x44/0x58 [ 42.237918][ T5330] __ext4_new_inode+0x286c/0x3308 [ 42.238853][ T5330] ext4_ext_migrate+0x564/0xc54 [ 42.239787][ T5330] ext4_ioctl+0x1e14/0x4430 [ 42.240600][ T5330] __arm64_sys_ioctl+0x154/0x1cc [ 42.241494][ T5330] invoke_syscall+0x98/0x244 [ 42.242363][ T5330] el0_svc_common+0xec/0x23c [ 42.243218][ T5330] do_el0_svc+0x4c/0x5c [ 42.244053][ T5330] el0_svc+0x64/0x260 [ 42.244813][ T5330] el0t_64_sync_handler+0x44/0x104 [ 42.245750][ T5330] el0t_64_sync+0x198/0x19c [ 42.246626][ T5330] [ 42.246626][ T5330] other info that might help us debug this: [ 42.246626][ T5330] [ 42.248411][ T5330] Possible unsafe locking scenario: [ 42.248411][ T5330] [ 42.249712][ T5330] CPU0 CPU1 [ 42.250651][ T5330] ---- ---- [ 42.251544][ T5330] lock(&sbi->s_writepages_rwsem); [ 42.252445][ T5330] lock(&ei->xattr_sem); [ 42.253605][ T5330] lock(&sbi->s_writepages_rwsem); [ 42.254954][ T5330] lock(&ei->xattr_sem); [ 42.255695][ T5330] [ 42.255695][ T5330] *** DEADLOCK *** [ 42.255695][ T5330] [ 42.257110][ T5330] 3 locks held by syz.2.141/5330: [ 42.257994][ T5330] #0: ffff0000cda3a450 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write_file+0x64/0xdc [ 42.259712][ T5330] #1: ffff0000f170f400 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: ext4_ioctl+0x1e0c/0x4430 [ 42.261591][ T5330] #2: ffff0000cda38c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x280/0xc54 [ 42.263519][ T5330] [ 42.263519][ T5330] stack backtrace: [ 42.264573][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.2.141 Not tainted syzkaller #0 PREEMPT [ 42.266129][ T5330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 42.267941][ T5330] Call trace: [ 42.268527][ T5330] show_stack+0x2c/0x3c (C) [ 42.269350][ T5330] __dump_stack+0x30/0x40 [ 42.270125][ T5330] dump_stack_lvl+0xd8/0x12c [ 42.270963][ T5330] dump_stack+0x1c/0x28 [ 42.271670][ T5330] print_circular_bug+0x328/0x330 [ 42.272528][ T5330] check_noncircular+0x158/0x174 [ 42.273382][ T5330] __lock_acquire+0x17c0/0x2ebc [ 42.274206][ T5330] lock_acquire+0x140/0x364 [ 42.274984][ T5330] down_write+0x50/0xc0 [ 42.275689][ T5330] ext4_xattr_set_handle+0x134/0xde4 [ 42.276570][ T5330] ext4_initxattrs+0xa8/0x11c [ 42.277360][ T5330] security_inode_init_security+0x244/0x370 [ 42.278305][ T5330] ext4_init_security+0x44/0x58 [ 42.279109][ T5330] __ext4_new_inode+0x286c/0x3308 [ 42.279975][ T5330] ext4_ext_migrate+0x564/0xc54 [ 42.280801][ T5330] ext4_ioctl+0x1e14/0x4430 [ 42.281576][ T5330] __arm64_sys_ioctl+0x154/0x1cc [ 42.282442][ T5330] invoke_syscall+0x98/0x244 [ 42.283240][ T5330] el0_svc_common+0xec/0x23c [ 42.284016][ T5330] do_el0_svc+0x4c/0x5c [ 42.284723][ T5330] el0_svc+0x64/0x260 [ 42.285412][ T5330] el0t_64_sync_handler+0x44/0x104 [ 42.286275][ T5330] el0t_64_sync+0x198/0x19c [ 42.330520][ T4726] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.572978][ T4723] Bluetooth: hci3: command tx timeout [ 42.749303][ T867] usb 1-1: USB disconnect, device number 2 [ 44.423008][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 44.654515][ T4723] Bluetooth: hci3: command tx timeout