last executing test programs: 24.360893576s ago: executing program 1 (id=125): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000020c0)={0xaa, 0xbd}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) socket(0x11, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 23.441602728s ago: executing program 1 (id=131): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) 23.091234927s ago: executing program 1 (id=133): setuid(0xee01) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c362023eb3d259266ec9c37865c6c1a4640ce1b1d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a294ce72c5e341c7535c9a0d39225720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4020000006a97444800", "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"}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000000)=ANY=[], 0x48) 22.940689821s ago: executing program 1 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x38b1012, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) 22.793924144s ago: executing program 1 (id=138): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b702"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) capset(0x0, &(0x7f0000000200)={0x0, 0x7fff, 0x3ff, 0xfffffff8, 0x3f, 0x7ff}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 22.231792467s ago: executing program 1 (id=145): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz0\x00', 0x4b}) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x35) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 22.015255262s ago: executing program 32 (id=145): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz0\x00', 0x4b}) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x35) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.583124004s ago: executing program 0 (id=329): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000500)={0xa4, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000280)=@arm64={0x27, 0x4, 0xb, '\x00', 0x4e}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000340)) 3.467127687s ago: executing program 0 (id=330): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 3.372698259s ago: executing program 0 (id=331): pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0xfffffffffffffc01, 0x0) tee(r0, r2, 0x60000000000, 0x0) close_range(r0, r2, 0x0) 3.250871252s ago: executing program 0 (id=332): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x1, 0x3a0, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) 3.120170965s ago: executing program 0 (id=334): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100), 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 1.635273471s ago: executing program 2 (id=355): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2, &(0x7f0000000140)={[{@bsdgroups}, {@usrquota}, {@noinit_itable}, {@resuid}, {@errors_remount}, {@bh}]}, 0x1, 0x567, &(0x7f0000002080)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 1.542450753s ago: executing program 2 (id=357): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000060000000800000005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000004a0850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.440607415s ago: executing program 2 (id=359): semop(0x0, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x1, 0x800, 0x1800}, {0x1, 0xe65b}], 0x3) io_setup(0x2, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d1e000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x2d}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x348}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.23926024s ago: executing program 2 (id=363): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e1f, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, 0x3}}, 0x0, 0x0, 0x20, 0x0, "3f9c4c40090000000000000005000000c376c2fa00005088ebe5facc1a8517e6a5e4128f79dd1a59cca90ce3e1b85253f099e56bc82c2c0e2ad233a22fde7700420e56a79695134f51a32b379cd200"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x7, @loopback, 0xc88}}, 0x0, 0x0, 0xa, 0x0, "25c633e7eb9cc056ed394ba71b6e5d7bf4d988ea7c340885973233ddc0946fbd53f014e2854b661b3f9f55a7e67ba35c3537ea83c3817a08930cf99a34dfc5e167b887734921da2397b9cc8b1e235b95"}, 0xd8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x3f, 0x0, "a30b3b68af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000e00000033035551502f07b4001a00"}, 0xd8) 1.008300475s ago: executing program 2 (id=366): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) fcntl$notify(r0, 0x402, 0x8000002d) exit(0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) 914.502448ms ago: executing program 0 (id=368): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x40033, 0xffffffffffffffff, 0x1000000) read(r0, &(0x7f0000000380)=""/153, 0x99) 862.430189ms ago: executing program 3 (id=369): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e0001"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a08"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket(0x10, 0x803, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 644.386524ms ago: executing program 3 (id=370): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0x4000200a}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0xa0000013}) epoll_pwait(r2, &(0x7f0000004080)=[{}, {}], 0x2, 0xe, 0x0, 0x0) 637.078675ms ago: executing program 4 (id=371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000002280)="2e1221b23bb601c493d3df163e75963d000d606712e9000d2f8db0049d90", 0x1e}, {&(0x7f00000022c0)="8bcc", 0x2}], 0x2) 511.444438ms ago: executing program 3 (id=372): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 380.496801ms ago: executing program 4 (id=373): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @remote}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000180)) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "fff500000000"}}}}}}}, 0x0) 347.286161ms ago: executing program 4 (id=374): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00 '], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000340), 0x8) 333.321362ms ago: executing program 3 (id=375): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x38, r3, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}]}, 0x38}}, 0x0) 236.916694ms ago: executing program 4 (id=376): r0 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000900)={{&(0x7f00001eb000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00005a7000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x1}) 209.451235ms ago: executing program 3 (id=377): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)="03", 0x1}], 0x1}}], 0x1, 0x4) 195.772785ms ago: executing program 4 (id=378): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000300), 0x1, 0x56d, &(0x7f0000000540)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r0, 0x0, 0x1, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6, 0x72b7, 0x8}) lseek(r0, 0x3ff, 0x4) socket$nl_route(0x10, 0x3, 0x0) 24.617229ms ago: executing program 2 (id=379): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/pch_udc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0000:00:03.0', 0xc) 22.544629ms ago: executing program 3 (id=380): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/21, 0x15}, 0x5}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 0s ago: executing program 4 (id=381): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000240)={[{@test_dummy_encryption}, {@errors_continue}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@noinit_itable}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xc, 0x5d8, &(0x7f0000000c00)="$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") r0 = open(&(0x7f00000004c0)='./file0\x00', 0x10000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x1a4, 0x85c, 0x5}) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, &(0x7f0000000040)={0x1, 0x6, 0x40004, 0xc, 0x1, 0xa0000000000000, 0x100000001, 0x80040001, 0x8006}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.0' (ED25519) to the list of known hosts. syzkaller login: [ 73.892573][ T5756] cgroup: Unknown subsys name 'net' [ 74.028497][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.392744][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.386543][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.389292][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.403054][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.410423][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.419105][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.425937][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.427690][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.436099][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.442738][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.448537][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.456124][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.462196][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.469629][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.492625][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.494578][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.508493][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.516855][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.524725][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.531770][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.551509][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.558973][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.566780][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.574458][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.583042][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.984896][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 78.057671][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 78.077590][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 78.154709][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.162648][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.169977][ T5769] bridge_slave_0: entered allmulticast mode [ 78.177093][ T5769] bridge_slave_0: entered promiscuous mode [ 78.186133][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 78.213897][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.221149][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.228723][ T5769] bridge_slave_1: entered allmulticast mode [ 78.236056][ T5769] bridge_slave_1: entered promiscuous mode [ 78.286784][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.329806][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.373052][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.380267][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.387877][ T5770] bridge_slave_0: entered allmulticast mode [ 78.394902][ T5770] bridge_slave_0: entered promiscuous mode [ 78.403358][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.410580][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.417869][ T5770] bridge_slave_1: entered allmulticast mode [ 78.425721][ T5770] bridge_slave_1: entered promiscuous mode [ 78.436808][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.444014][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.451261][ T5773] bridge_slave_0: entered allmulticast mode [ 78.458256][ T5773] bridge_slave_0: entered promiscuous mode [ 78.477589][ T5769] team0: Port device team_slave_0 added [ 78.486808][ T5769] team0: Port device team_slave_1 added [ 78.513694][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.521452][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.528810][ T5773] bridge_slave_1: entered allmulticast mode [ 78.536021][ T5773] bridge_slave_1: entered promiscuous mode [ 78.597543][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.609518][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.621299][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.628554][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.636073][ T5771] bridge_slave_0: entered allmulticast mode [ 78.643030][ T5771] bridge_slave_0: entered promiscuous mode [ 78.650541][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.657870][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.665347][ T5771] bridge_slave_1: entered allmulticast mode [ 78.672216][ T5771] bridge_slave_1: entered promiscuous mode [ 78.680632][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.693326][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.703292][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.710257][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.736854][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.797748][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.804923][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.831250][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.845244][ T5770] team0: Port device team_slave_0 added [ 78.880305][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.892925][ T5770] team0: Port device team_slave_1 added [ 78.909931][ T5773] team0: Port device team_slave_0 added [ 78.918421][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.938992][ T5769] hsr_slave_0: entered promiscuous mode [ 78.946425][ T5769] hsr_slave_1: entered promiscuous mode [ 78.954939][ T5773] team0: Port device team_slave_1 added [ 79.017258][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.026478][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.053347][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.066980][ T5771] team0: Port device team_slave_0 added [ 79.075851][ T5771] team0: Port device team_slave_1 added [ 79.102747][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.109726][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.136953][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.163813][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.170790][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.197294][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.236614][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.244419][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.271524][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.298345][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.305422][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.331418][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.344198][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.351160][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.377186][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.447550][ T5770] hsr_slave_0: entered promiscuous mode [ 79.453943][ T5770] hsr_slave_1: entered promiscuous mode [ 79.460004][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.468671][ T5770] Cannot create hsr debugfs directory [ 79.509389][ T5773] hsr_slave_0: entered promiscuous mode [ 79.515844][ T5773] hsr_slave_1: entered promiscuous mode [ 79.521839][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.529564][ T5773] Cannot create hsr debugfs directory [ 79.593072][ T5778] Bluetooth: hci1: command tx timeout [ 79.593825][ T5787] Bluetooth: hci2: command tx timeout [ 79.610380][ T5771] hsr_slave_0: entered promiscuous mode [ 79.616793][ T5771] hsr_slave_1: entered promiscuous mode [ 79.623327][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.630914][ T5771] Cannot create hsr debugfs directory [ 79.672518][ T5787] Bluetooth: hci0: command tx timeout [ 79.673954][ T5778] Bluetooth: hci3: command tx timeout [ 79.802737][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.815101][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.829501][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.844353][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.011794][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.041224][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.053057][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.081549][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.144022][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.154587][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.192255][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.233280][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.341052][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.366320][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.381074][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.391796][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.404816][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.431688][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.455686][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.469427][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.477487][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.536100][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.543319][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.562892][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.576148][ T3417] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.583343][ T3417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.616017][ T3417] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.623379][ T3417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.756768][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.798132][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.828641][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.860837][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.884095][ T3417] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.891230][ T3417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.929704][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.936887][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.993071][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.000247][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.046154][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.053358][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.148176][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.241433][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.320718][ T5769] veth0_vlan: entered promiscuous mode [ 81.348563][ T5769] veth1_vlan: entered promiscuous mode [ 81.428891][ T5770] veth0_vlan: entered promiscuous mode [ 81.487190][ T5770] veth1_vlan: entered promiscuous mode [ 81.506990][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.559250][ T5769] veth0_macvtap: entered promiscuous mode [ 81.585886][ T5770] veth0_macvtap: entered promiscuous mode [ 81.596551][ T5769] veth1_macvtap: entered promiscuous mode [ 81.626680][ T5770] veth1_macvtap: entered promiscuous mode [ 81.639713][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.660167][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.673186][ T5778] Bluetooth: hci1: command tx timeout [ 81.673398][ T5787] Bluetooth: hci2: command tx timeout [ 81.700952][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.716520][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.726165][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.735910][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.745575][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.754535][ T5787] Bluetooth: hci3: command tx timeout [ 81.762520][ T5787] Bluetooth: hci0: command tx timeout [ 81.778144][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.789184][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.801100][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.834046][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.844970][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.857500][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.876773][ T5771] veth0_vlan: entered promiscuous mode [ 81.885994][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.894930][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.904426][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.921980][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.945156][ T5773] veth0_vlan: entered promiscuous mode [ 81.997508][ T5771] veth1_vlan: entered promiscuous mode [ 82.036255][ T5773] veth1_vlan: entered promiscuous mode [ 82.198038][ T5773] veth0_macvtap: entered promiscuous mode [ 82.245993][ T5773] veth1_macvtap: entered promiscuous mode [ 82.259915][ T3417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.279631][ T3417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.309612][ T5771] veth0_macvtap: entered promiscuous mode [ 82.356130][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.369827][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.381910][ T5771] veth1_macvtap: entered promiscuous mode [ 82.415970][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.431038][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.442909][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.459559][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.479876][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.495484][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.508582][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.530490][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.541236][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.551428][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.567727][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.579112][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.596700][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.605626][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.614547][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.623709][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.636866][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.649451][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.659495][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.670799][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.681060][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.691546][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.704394][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.716512][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.727277][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.738561][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.749076][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.759008][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.770123][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.781662][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.790252][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.798942][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.831721][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.846142][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.855118][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.863972][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.057696][ T3417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.070838][ T3417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.129572][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.142842][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.273893][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.283334][ T3417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.291224][ T3417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.315042][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.752257][ T5787] Bluetooth: hci1: command tx timeout [ 83.753108][ T5778] Bluetooth: hci2: command tx timeout [ 83.776131][ T5859] process 'syz.0.10' launched './file1' with NULL argv: empty string added [ 83.833190][ T5778] Bluetooth: hci0: command tx timeout [ 83.834306][ T5787] Bluetooth: hci3: command tx timeout [ 83.987246][ T5865] Bluetooth: MGMT ver 1.22 [ 84.056962][ T5867] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12'. [ 84.110423][ T5867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 84.174617][ T5869] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.595489][ T5881] syz_tun: entered allmulticast mode [ 84.623141][ T5881] lo: entered allmulticast mode [ 84.643160][ T5881] lo: left allmulticast mode [ 84.664769][ T5880] syz_tun: left allmulticast mode [ 84.672766][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 84.702301][ T5884] netlink: 'syz.0.19': attribute type 26 has an invalid length. [ 84.761987][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 84.778600][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 84.816253][ T5884] netlink: 'syz.0.19': attribute type 26 has an invalid length. [ 84.825258][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 85.389458][ T5902] syz.2.28[5902]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.449436][ T5902] loop2: detected capacity change from 0 to 1024 [ 85.530191][ T5902] hfsplus: invalid length 32517 has been corrected to 255 [ 85.680006][ T5902] hfsplus: b-tree write err: -5, ino 20 [ 85.806050][ T1026] hfsplus: b-tree write err: -5, ino 20 [ 85.832384][ T5787] Bluetooth: hci1: command tx timeout [ 85.832432][ T5778] Bluetooth: hci2: command tx timeout [ 85.912180][ T5778] Bluetooth: hci3: command tx timeout [ 85.912187][ T5787] Bluetooth: hci0: command tx timeout [ 86.208792][ T5930] Zero length message leads to an empty skb [ 86.682337][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.882146][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 86.906040][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 86.936897][ T9] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 86.967557][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 86.978065][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 86.996964][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.040784][ T28] audit: type=1326 audit(1786652312.745:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.2.51" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d46d9e0d9 code=0x7ffc0000 [ 87.054054][ T970] cfg80211: failed to load regulatory.db [ 87.102179][ T9] usb 1-1: config 0 descriptor?? [ 87.120549][ T28] audit: type=1326 audit(1786652312.745:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.2.51" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d46d9e0d9 code=0x7ffc0000 [ 87.176648][ T5957] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.194039][ T28] audit: type=1326 audit(1786652312.775:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.2.51" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d46d9e0d9 code=0x7ffc0000 [ 87.240500][ T28] audit: type=1326 audit(1786652312.775:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.2.51" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d46d9e0d9 code=0x7ffc0000 [ 87.355707][ T28] audit: type=1326 audit(1786652312.775:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.2.51" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d46d9e0d9 code=0x7ffc0000 [ 87.436726][ T28] audit: type=1326 audit(1786652312.785:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.2.51" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f8d46d9e0d9 code=0x7ffc0000 [ 87.530051][ T28] audit: type=1326 audit(1786652312.785:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.2.51" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d46d9e0d9 code=0x7ffc0000 [ 87.622568][ T28] audit: type=1326 audit(1786652312.785:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.2.51" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f8d46d9e0d9 code=0x7ffc0000 [ 87.741834][ T28] audit: type=1326 audit(1786652312.785:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.2.51" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d46d9e0d9 code=0x7ffc0000 [ 87.799215][ T28] audit: type=1326 audit(1786652312.795:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.2.51" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f8d46d9e0d9 code=0x7ffc0000 [ 88.042982][ T5976] Mass Storage Function, version: 2009/09/11 [ 88.082137][ T5976] LUN: removable file: (no medium) [ 88.422395][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.617739][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 88.633442][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 88.634567][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 88.640467][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 88.680563][ T9] usb 1-1: USB disconnect, device number 2 [ 88.682081][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.729965][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.741205][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 88.751705][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 88.771970][ T23] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 88.791399][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.805604][ T23] usb 4-1: config 0 descriptor?? [ 88.851927][ T5787] Bluetooth: hci4: urb ffff88802582b200 submission failed (90) [ 89.090612][ T9] usb 4-1: USB disconnect, device number 2 [ 89.707410][ T6047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.79'. [ 90.147594][ T6061] gadgetfs: bound to dummy_udc driver [ 90.615477][ T6073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.92'. [ 91.448054][ T6102] Illegal XDP return value 4294967274 on prog (id 13) dev syz_tun, expect packet loss! [ 93.902017][ T5758] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.095725][ T5758] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.106337][ T5758] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 94.116151][ T5758] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.149663][ T5758] as10x_usb: device has been detected [ 94.164337][ T5758] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 94.209904][ T5758] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 94.313165][ T5758] as10x_usb: error during firmware upload part1 [ 94.341287][ T5758] Registered device Abilis Systems DVB-Titan [ 94.509877][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.134'. [ 94.549478][ T6187] ======================================================= [ 94.549478][ T6187] WARNING: The mand mount option has been deprecated and [ 94.549478][ T6187] and is ignored by this kernel. Remove the mand [ 94.549478][ T6187] option from the mount to silence this warning. [ 94.549478][ T6187] ======================================================= [ 94.762167][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 94.762180][ T28] audit: type=1326 audit(1786652320.475:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.139" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16bb9e0d9 code=0x7ffc0000 [ 94.821765][ T28] audit: type=1326 audit(1786652320.475:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.139" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16bb9e0d9 code=0x7ffc0000 [ 94.881537][ T28] audit: type=1326 audit(1786652320.515:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.139" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16bb9e0d9 code=0x7ffc0000 [ 94.914513][ T28] audit: type=1326 audit(1786652320.515:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.139" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe16bb9e0d9 code=0x7ffc0000 [ 94.940115][ T28] audit: type=1326 audit(1786652320.515:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.139" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16bb9e0d9 code=0x7ffc0000 [ 94.966821][ T28] audit: type=1326 audit(1786652320.515:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.139" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16bb9e0d9 code=0x7ffc0000 [ 95.000245][ T28] audit: type=1326 audit(1786652320.515:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.139" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16bb9e0d9 code=0x7ffc0000 [ 95.026860][ T28] audit: type=1326 audit(1786652320.515:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.139" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16bb9e0d9 code=0x7ffc0000 [ 95.056997][ T28] audit: type=1326 audit(1786652320.515:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.139" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe16bb9e0d9 code=0x7ffc0000 [ 95.081277][ T28] audit: type=1326 audit(1786652320.515:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.139" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16bb9e0d9 code=0x7ffc0000 [ 95.118336][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:1) [ 95.168482][ T6038] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.254798][ T6038] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.338370][ T6038] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.449851][ T6038] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.000936][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.015616][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.027141][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.048326][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.058189][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 96.074542][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.099514][ T23] usb 1-1: USB disconnect, device number 3 [ 96.207618][ T23] Unregistered device Abilis Systems DVB-Titan [ 96.222809][ T23] as10x_usb: device has been disconnected [ 96.851044][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.157'. [ 96.892557][ T6226] chnl_net:caif_netlink_parms(): no params data found [ 97.560208][ T6226] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.594130][ T6226] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.601389][ T6226] bridge_slave_0: entered allmulticast mode [ 97.628738][ T6226] bridge_slave_0: entered promiscuous mode [ 97.645278][ T6226] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.654645][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.668516][ T6226] bridge_slave_1: entered allmulticast mode [ 97.676252][ T6226] bridge_slave_1: entered promiscuous mode [ 97.685162][ T6297] overlayfs: failed to clone upperpath [ 97.825131][ T6226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.864917][ T6038] hsr_slave_0: left promiscuous mode [ 97.887182][ T6038] hsr_slave_1: left promiscuous mode [ 97.896180][ T6038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.903886][ T6038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.917440][ T6038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.926276][ T6038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.934699][ T6038] bridge_slave_1: left allmulticast mode [ 97.940938][ T6038] bridge_slave_1: left promiscuous mode [ 97.949166][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.964860][ T6038] bridge_slave_0: left allmulticast mode [ 97.970698][ T6038] bridge_slave_0: left promiscuous mode [ 97.979046][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.985014][ T6307] gadgetfs: bound to dummy_udc driver [ 98.016401][ T6038] veth1_macvtap: left promiscuous mode [ 98.022838][ T6038] veth0_macvtap: left promiscuous mode [ 98.030043][ T6038] veth1_vlan: left promiscuous mode [ 98.036091][ T6038] veth0_vlan: left promiscuous mode [ 98.152669][ T5787] Bluetooth: hci2: command tx timeout [ 98.910260][ T6038] team0 (unregistering): Port device team_slave_1 removed [ 98.950569][ T6038] team0 (unregistering): Port device team_slave_0 removed [ 98.988876][ T6038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.029927][ T6038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.309570][ T6038] bond0 (unregistering): Released all slaves [ 99.410560][ T6226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.584220][ T6226] team0: Port device team_slave_0 added [ 99.620986][ T6226] team0: Port device team_slave_1 added [ 99.692433][ T6226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.709701][ T6226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.767339][ T6226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.797453][ T6226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.826664][ T6226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.922007][ T6226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.085139][ T6226] hsr_slave_0: entered promiscuous mode [ 100.110886][ T6226] hsr_slave_1: entered promiscuous mode [ 100.139707][ T6226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.166182][ T6226] Cannot create hsr debugfs directory [ 100.232618][ T5787] Bluetooth: hci2: command tx timeout [ 100.548501][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 100.728754][ T6226] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.755577][ T6226] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.777227][ T6226] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.844113][ T6226] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.044300][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'. [ 101.768716][ T6226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.862779][ T6226] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.923740][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.930979][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.958896][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.966096][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.322987][ T5787] Bluetooth: hci2: command tx timeout [ 102.547050][ T6413] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 102.556511][ T6413] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 102.565717][ T6413] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 102.574923][ T6413] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 102.584123][ T6413] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 102.586475][ T6226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.593292][ T6413] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 102.593368][ T6413] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 102.618436][ T6413] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 102.627763][ T6413] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 102.636975][ T6413] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 103.367396][ T6226] veth0_vlan: entered promiscuous mode [ 103.404746][ T6226] veth1_vlan: entered promiscuous mode [ 103.476582][ T6226] veth0_macvtap: entered promiscuous mode [ 103.489022][ T6226] veth1_macvtap: entered promiscuous mode [ 103.548060][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.574409][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.605931][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.632043][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.683035][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.709951][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.734838][ T6226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.774036][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.798309][ T6453] loop0: detected capacity change from 0 to 2048 [ 103.809346][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.849286][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.863140][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.878289][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.890851][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.906563][ T6453] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.944668][ T6226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.005149][ T6226] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.035865][ T6226] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.057332][ T6226] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.071455][ T6226] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.392637][ T5787] Bluetooth: hci2: command tx timeout [ 104.479745][ T1026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.525197][ T1026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.605507][ T6022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.658332][ T6022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.238640][ T6486] loop4: detected capacity change from 0 to 256 [ 105.694337][ T6503] input: syz0 as /devices/virtual/input/input5 [ 106.403812][ T6526] jffs2: notice: (6526) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 106.444967][ T6533] loop0: detected capacity change from 0 to 256 [ 106.498899][ T6536] overlayfs: failed to clone upperpath [ 106.578724][ T6533] syz.0.231: attempt to access beyond end of device [ 106.578724][ T6533] loop0: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 106.883596][ T6550] syz.0.236 uses obsolete (PF_INET,SOCK_PACKET) [ 106.922484][ T6552] 9pnet_fd: Insufficient options for proto=fd [ 106.971751][ T6555] fuse: Bad value for 'fd' [ 107.283488][ T6568] loop0: detected capacity change from 0 to 64 [ 107.835214][ T6588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.249'. [ 107.867553][ T6588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.249'. [ 107.921055][ T6588] gretap0: entered promiscuous mode [ 107.958896][ T6588] gretap0: left promiscuous mode [ 107.995547][ T6592] netlink: 48 bytes leftover after parsing attributes in process `syz.4.250'. [ 108.042263][ T6593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.249'. [ 108.067429][ T6593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.249'. [ 108.107353][ T6593] gretap0: entered promiscuous mode [ 108.126833][ T6593] gretap0: left promiscuous mode [ 108.339784][ T6603] capability: warning: `syz.2.252' uses 32-bit capabilities (legacy support in use) [ 108.628061][ T6618] fuse: Bad value for 'fd' [ 108.774001][ T6623] loop0: detected capacity change from 0 to 16 [ 108.840113][ T6623] erofs: (device loop0): mounted with root inode @ nid 36. [ 109.240153][ T6608] loop4: detected capacity change from 0 to 32768 [ 109.305951][ T6608] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 109.319861][ T6608] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.609134][ T6608] XFS (loop4): Ending clean mount [ 109.664185][ T6608] XFS (loop4): Quotacheck needed: Please wait. [ 109.790683][ T6608] XFS (loop4): Quotacheck: Done. [ 110.068239][ T6226] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 110.492778][ T6680] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.991462][ T6699] warning: `syz.2.284' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.379873][ T6715] fuse: Bad value for 'fd' [ 112.128966][ T6706] syz.2.288 (6706): drop_caches: 2 [ 112.146582][ T6738] overlayfs: failed to clone upperpath [ 112.241248][ T6740] netlink: 276 bytes leftover after parsing attributes in process `syz.4.301'. [ 112.392504][ T5787] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 113.160805][ T6781] netlink: 'syz.3.318': attribute type 1 has an invalid length. [ 113.191981][ T6781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.199866][ T6781] IPv6: NLM_F_CREATE should be set when creating new route [ 113.207228][ T6781] IPv6: NLM_F_CREATE should be set when creating new route [ 113.244494][ T6782] netlink: 'syz.3.318': attribute type 1 has an invalid length. [ 113.281011][ T6782] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.288351][ T6782] IPv6: NLM_F_CREATE should be set when creating new route [ 116.399673][ T5778] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 116.529908][ T6911] loop4: detected capacity change from 0 to 512 [ 116.598686][ T6911] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.367: corrupted in-inode xattr: e_value size too large [ 116.600936][ T6917] netlink: 'syz.3.369': attribute type 1 has an invalid length. [ 116.620279][ T6911] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.367: couldn't read orphan inode 15 (err -117) [ 116.642274][ T6917] netlink: 88 bytes leftover after parsing attributes in process `syz.3.369'. [ 116.644356][ T6911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.685551][ T6911] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.367: Unrecognised inode hash code 4 [ 116.697431][ T6911] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.367: Corrupt directory, running e2fsck is recommended [ 116.711053][ T6911] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.367: Unrecognised inode hash code 4 [ 116.723091][ T6911] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.367: Corrupt directory, running e2fsck is recommended [ 116.786493][ T6226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.270397][ T6940] loop4: detected capacity change from 0 to 1024 [ 117.301455][ T6940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.440132][ T6226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.447861][ T6944] [ 117.451448][ T6944] ====================================================== [ 117.458476][ T6944] WARNING: possible circular locking dependency detected [ 117.465512][ T6944] syzkaller #0 Not tainted [ 117.469939][ T6944] ------------------------------------------------------ [ 117.476964][ T6944] syz.2.379/6944 is trying to acquire lock: [ 117.482869][ T6944] ffff88802ca0c0e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_lock+0x189/0x390 [ 117.492317][ T6944] [ 117.492317][ T6944] but task is already holding lock: [ 117.499770][ T6944] ffff888020098108 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 117.509336][ T6944] [ 117.509336][ T6944] which lock already depends on the new lock. [ 117.509336][ T6944] [ 117.519740][ T6944] [ 117.519740][ T6944] the existing dependency chain (in reverse order) is: [ 117.528751][ T6944] [ 117.528751][ T6944] -> #4 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 117.536914][ T6944] __mutex_lock+0x135/0xc80 [ 117.541948][ T6944] bd_finish_claiming+0x229/0x3f0 [ 117.547499][ T6944] blkdev_get_by_dev+0x469/0x610 [ 117.552947][ T6944] bdev_open_by_dev+0x77/0x100 [ 117.558226][ T6944] setup_bdev_super+0x59/0x660 [ 117.563499][ T6944] mount_bdev+0x1ce/0x2c0 [ 117.568336][ T6944] legacy_get_tree+0xea/0x180 [ 117.573523][ T6944] vfs_get_tree+0x8c/0x280 [ 117.578446][ T6944] do_new_mount+0x24a/0xa40 [ 117.583464][ T6944] init_mount+0xde/0x130 [ 117.588215][ T6944] do_mount_root+0x97/0x230 [ 117.593236][ T6944] mount_root_generic+0x1a6/0x3e0 [ 117.598776][ T6944] prepare_namespace+0xc2/0x100 [ 117.604141][ T6944] kernel_init_freeable+0x41a/0x560 [ 117.609943][ T6944] kernel_init+0x1d/0x1c0 [ 117.614813][ T6944] ret_from_fork+0x48/0x80 [ 117.619760][ T6944] ret_from_fork_asm+0x11/0x20 [ 117.625078][ T6944] [ 117.625078][ T6944] -> #3 (bdev_lock){+.+.}-{3:3}: [ 117.632223][ T6944] __mutex_lock+0x135/0xc80 [ 117.637248][ T6944] bd_prepare_to_claim+0x1d9/0x4a0 [ 117.642881][ T6944] truncate_bdev_range+0x4e/0x260 [ 117.648443][ T6944] blkdev_fallocate+0x428/0x6a0 [ 117.653820][ T6944] vfs_fallocate+0x585/0x6f0 [ 117.658962][ T6944] do_madvise+0x166b/0x3790 [ 117.663984][ T6944] __x64_sys_madvise+0xa6/0xc0 [ 117.669264][ T6944] do_syscall_64+0x55/0xb0 [ 117.674196][ T6944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.680600][ T6944] [ 117.680600][ T6944] -> #2 (mapping.invalidate_lock){++++}-{3:3}: [ 117.688949][ T6944] down_write+0x97/0x200 [ 117.693712][ T6944] set_blocksize+0x247/0x4b0 [ 117.698817][ T6944] sb_min_blocksize+0xbe/0x190 [ 117.704092][ T6944] ext4_fill_super+0x6e7/0x6870 [ 117.709490][ T6944] get_tree_bdev+0x3e5/0x520 [ 117.714592][ T6944] vfs_get_tree+0x8c/0x280 [ 117.719517][ T6944] do_new_mount+0x24a/0xa40 [ 117.724532][ T6944] init_mount+0xde/0x130 [ 117.729281][ T6944] do_mount_root+0x97/0x230 [ 117.734297][ T6944] mount_root_generic+0x1a6/0x3e0 [ 117.739844][ T6944] prepare_namespace+0xc2/0x100 [ 117.745208][ T6944] kernel_init_freeable+0x41a/0x560 [ 117.751005][ T6944] kernel_init+0x1d/0x1c0 [ 117.755851][ T6944] ret_from_fork+0x48/0x80 [ 117.760784][ T6944] ret_from_fork_asm+0x11/0x20 [ 117.766070][ T6944] [ 117.766070][ T6944] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 117.774670][ T6944] down_write+0x97/0x200 [ 117.779447][ T6944] set_blocksize+0x1ff/0x4b0 [ 117.784546][ T6944] sb_min_blocksize+0xbe/0x190 [ 117.789827][ T6944] ext4_fill_super+0x6e7/0x6870 [ 117.795198][ T6944] get_tree_bdev+0x3e5/0x520 [ 117.800304][ T6944] vfs_get_tree+0x8c/0x280 [ 117.805267][ T6944] do_new_mount+0x24a/0xa40 [ 117.810281][ T6944] init_mount+0xde/0x130 [ 117.815035][ T6944] do_mount_root+0x97/0x230 [ 117.820089][ T6944] mount_root_generic+0x1a6/0x3e0 [ 117.825634][ T6944] prepare_namespace+0xc2/0x100 [ 117.831002][ T6944] kernel_init_freeable+0x41a/0x560 [ 117.836716][ T6944] kernel_init+0x1d/0x1c0 [ 117.841587][ T6944] ret_from_fork+0x48/0x80 [ 117.846515][ T6944] ret_from_fork_asm+0x11/0x20 [ 117.851914][ T6944] [ 117.851914][ T6944] -> #0 (&type->s_umount_key#31){++++}-{3:3}: [ 117.860679][ T6944] __lock_acquire+0x37ef/0x7d80 [ 117.866044][ T6944] lock_acquire+0x19e/0x420 [ 117.871058][ T6944] down_read+0x46/0x2e0 [ 117.875754][ T6944] super_lock+0x189/0x390 [ 117.880595][ T6944] fs_bdev_mark_dead+0xad/0x1f0 [ 117.885957][ T6944] bdev_mark_dead+0x83/0x1a0 [ 117.891061][ T6944] blk_report_disk_dead+0x21c/0x3e0 [ 117.896781][ T6944] del_gendisk+0x2cb/0x8f0 [ 117.901717][ T6944] sd_remove+0x8d/0x100 [ 117.906383][ T6944] device_release_driver_internal+0x458/0x6f0 [ 117.912993][ T6944] bus_remove_device+0x43b/0x520 [ 117.918445][ T6944] device_del+0x51f/0x910 [ 117.923285][ T6944] __scsi_remove_device+0x1a2/0x390 [ 117.928998][ T6944] scsi_forget_host+0xd0/0x110 [ 117.934293][ T6944] scsi_remove_host+0x1b3/0x730 [ 117.939654][ T6944] virtscsi_remove+0x130/0x1a0 [ 117.944948][ T6944] virtio_dev_remove+0x96/0x1a0 [ 117.950314][ T6944] device_release_driver_internal+0x408/0x6f0 [ 117.956911][ T6944] bus_remove_device+0x43b/0x520 [ 117.962364][ T6944] device_del+0x51f/0x910 [ 117.967223][ T6944] device_unregister+0x20/0xc0 [ 117.972496][ T6944] unregister_virtio_device+0x37/0x60 [ 117.978475][ T6944] virtio_pci_remove+0x7f/0xf0 [ 117.983754][ T6944] pci_device_remove+0x97/0x230 [ 117.989126][ T6944] device_release_driver_internal+0x408/0x6f0 [ 117.995713][ T6944] unbind_store+0x1a1/0x1d0 [ 118.000736][ T6944] kernfs_fop_write_iter+0x3a4/0x520 [ 118.006538][ T6944] vfs_write+0x474/0x9a0 [ 118.011296][ T6944] ksys_write+0x151/0x260 [ 118.016144][ T6944] do_syscall_64+0x55/0xb0 [ 118.021069][ T6944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.027481][ T6944] [ 118.027481][ T6944] other info that might help us debug this: [ 118.027481][ T6944] [ 118.037693][ T6944] Chain exists of: [ 118.037693][ T6944] &type->s_umount_key#31 --> bdev_lock --> &bdev->bd_holder_lock [ 118.037693][ T6944] [ 118.051331][ T6944] Possible unsafe locking scenario: [ 118.051331][ T6944] [ 118.058765][ T6944] CPU0 CPU1 [ 118.064115][ T6944] ---- ---- [ 118.069462][ T6944] lock(&bdev->bd_holder_lock); [ 118.074390][ T6944] lock(bdev_lock); [ 118.080791][ T6944] lock(&bdev->bd_holder_lock); [ 118.088234][ T6944] rlock(&type->s_umount_key#31); [ 118.093338][ T6944] [ 118.093338][ T6944] *** DEADLOCK *** [ 118.093338][ T6944] [ 118.101485][ T6944] 8 locks held by syz.2.379/6944: [ 118.106536][ T6944] #0: ffff8880312619c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 118.115773][ T6944] #1: ffff888078092418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 118.124649][ T6944] #2: ffff88801df00488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 118.134404][ T6944] #3: ffff88823bdf81f0 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 118.144934][ T6944] #4: ffff888018f971b8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 118.155479][ T6944] #5: ffff8881417080e0 (&shost->scan_mutex){+.+.}-{3:3}, at: scsi_remove_host+0x32/0x730 [ 118.165407][ T6944] #6: ffff888022d983b8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 118.175930][ T6944] #7: ffff888020098108 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 118.185945][ T6944] [ 118.185945][ T6944] stack backtrace: [ 118.191835][ T6944] CPU: 1 PID: 6944 Comm: syz.2.379 Not tainted syzkaller #0 [ 118.199118][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.209180][ T6944] Call Trace: [ 118.212455][ T6944] [ 118.215380][ T6944] dump_stack_lvl+0x18c/0x250 [ 118.220075][ T6944] ? load_image+0x420/0x420 [ 118.224676][ T6944] ? show_regs_print_info+0x20/0x20 [ 118.229893][ T6944] ? print_circular_bug+0x12b/0x1a0 [ 118.235097][ T6944] check_noncircular+0x2fc/0x400 [ 118.240039][ T6944] ? print_deadlock_bug+0x5d0/0x5d0 [ 118.245235][ T6944] ? lockdep_lock+0xf5/0x230 [ 118.249849][ T6944] ? _find_first_zero_bit+0xd6/0x100 [ 118.255141][ T6944] __lock_acquire+0x37ef/0x7d80 [ 118.260001][ T6944] ? __lock_acquire+0x1262/0x7d80 [ 118.265015][ T6944] ? verify_lock_unused+0x140/0x140 [ 118.270219][ T6944] ? verify_lock_unused+0x140/0x140 [ 118.275437][ T6944] ? find_lock_entries+0x120/0x1020 [ 118.280630][ T6944] lock_acquire+0x19e/0x420 [ 118.285129][ T6944] ? super_lock+0x189/0x390 [ 118.289623][ T6944] ? __might_sleep+0xe0/0xe0 [ 118.294206][ T6944] ? read_lock_is_recursive+0x20/0x20 [ 118.299571][ T6944] ? __mutex_trylock_common+0x160/0x270 [ 118.305117][ T6944] ? trace_raw_output_contention_end+0xd0/0xd0 [ 118.311264][ T6944] ? mapping_try_invalidate+0x4bf/0x570 [ 118.316814][ T6944] down_read+0x46/0x2e0 [ 118.320969][ T6944] ? super_lock+0x189/0x390 [ 118.325493][ T6944] super_lock+0x189/0x390 [ 118.329818][ T6944] ? xa_find_after+0xaf/0x430 [ 118.334580][ T6944] ? user_get_super+0x180/0x180 [ 118.339420][ T6944] ? mutex_lock_nested+0x20/0x20 [ 118.344360][ T6944] fs_bdev_mark_dead+0xad/0x1f0 [ 118.349212][ T6944] ? super_s_dev_set+0xa0/0xa0 [ 118.353965][ T6944] bdev_mark_dead+0x83/0x1a0 [ 118.358543][ T6944] ? blk_report_disk_dead+0x88/0x3e0 [ 118.363839][ T6944] blk_report_disk_dead+0x21c/0x3e0 [ 118.369065][ T6944] ? __blk_mark_disk_dead+0x120/0x120 [ 118.374452][ T6944] ? xa_find_after+0xaf/0x430 [ 118.379127][ T6944] del_gendisk+0x2cb/0x8f0 [ 118.383545][ T6944] ? blk_report_disk_dead+0x3e0/0x3e0 [ 118.388941][ T6944] ? __pm_runtime_resume+0x129/0x170 [ 118.394242][ T6944] sd_remove+0x8d/0x100 [ 118.398401][ T6944] ? sd_probe+0x11c0/0x11c0 [ 118.402900][ T6944] device_release_driver_internal+0x458/0x6f0 [ 118.408974][ T6944] bus_remove_device+0x43b/0x520 [ 118.413914][ T6944] ? bus_probe_device+0x260/0x260 [ 118.418937][ T6944] ? up_write+0x1be/0x410 [ 118.423263][ T6944] ? kernfs_remove_by_name_ns+0x117/0x150 [ 118.429002][ T6944] device_del+0x51f/0x910 [ 118.433350][ T6944] ? kill_device+0x160/0x160 [ 118.437938][ T6944] ? kobject_put+0x421/0x450 [ 118.442532][ T6944] __scsi_remove_device+0x1a2/0x390 [ 118.447737][ T6944] scsi_forget_host+0xd0/0x110 [ 118.452591][ T6944] scsi_remove_host+0x1b3/0x730 [ 118.457453][ T6944] virtscsi_remove+0x130/0x1a0 [ 118.462215][ T6944] virtio_dev_remove+0x96/0x1a0 [ 118.467060][ T6944] ? virtio_dev_probe+0xae0/0xae0 [ 118.472076][ T6944] device_release_driver_internal+0x408/0x6f0 [ 118.478162][ T6944] bus_remove_device+0x43b/0x520 [ 118.483118][ T6944] ? bus_probe_device+0x260/0x260 [ 118.488218][ T6944] ? up_write+0x1be/0x410 [ 118.492550][ T6944] ? kernfs_remove_by_name_ns+0x117/0x150 [ 118.498268][ T6944] device_del+0x51f/0x910 [ 118.502595][ T6944] ? kill_device+0x160/0x160 [ 118.507177][ T6944] ? pci_device_is_present+0x175/0x240 [ 118.512633][ T6944] ? pci_real_dma_dev+0x20/0x20 [ 118.517476][ T6944] ? _raw_spin_lock_irq+0xbb/0xf0 [ 118.522529][ T6944] device_unregister+0x20/0xc0 [ 118.527288][ T6944] unregister_virtio_device+0x37/0x60 [ 118.532668][ T6944] virtio_pci_remove+0x7f/0xf0 [ 118.537436][ T6944] pci_device_remove+0x97/0x230 [ 118.542308][ T6944] ? pci_device_probe+0x8d0/0x8d0 [ 118.547326][ T6944] device_release_driver_internal+0x408/0x6f0 [ 118.553394][ T6944] unbind_store+0x1a1/0x1d0 [ 118.557896][ T6944] ? sysfs_kf_read+0x360/0x360 [ 118.562735][ T6944] kernfs_fop_write_iter+0x3a4/0x520 [ 118.568018][ T6944] vfs_write+0x474/0x9a0 [ 118.572257][ T6944] ? file_end_write+0x250/0x250 [ 118.577105][ T6944] ? __fget_files+0x3fc/0x460 [ 118.581803][ T6944] ? __fdget_pos+0x2a3/0x330 [ 118.586388][ T6944] ? ksys_write+0x74/0x260 [ 118.590806][ T6944] ksys_write+0x151/0x260 [ 118.595130][ T6944] ? __ia32_sys_read+0x90/0x90 [ 118.599889][ T6944] ? lockdep_hardirqs_on+0x98/0x150 [ 118.605091][ T6944] do_syscall_64+0x55/0xb0 [ 118.609500][ T6944] ? clear_bhb_loop+0x40/0x90 [ 118.614182][ T6944] ? clear_bhb_loop+0x40/0x90 [ 118.618860][ T6944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.624789][ T6944] RIP: 0033:0x7f8d46d9e0d9 [ 118.629199][ T6944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.648977][ T6944] RSP: 002b:00007f8d47ce2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.657471][ T6944] RAX: ffffffffffffffda RBX: 00007f8d47025fa0 RCX: 00007f8d46d9e0d9 [ 118.665526][ T6944] RDX: 000000000000000c RSI: 0000200000000140 RDI: 0000000000000003 [ 118.673490][ T6944] RBP: 00007f8d46e35024 R08: 0000000000000000 R09: 0000000000000000 [ 118.681451][ T6944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.689416][ T6944] R13: 00007f8d47026038 R14: 00007f8d47025fa0 R15: 00007ffda4bb2ef8 [ 118.697383][ T6944] [ 118.721083][ T5101] device offline error, dev sda, sector 1050478 op 0x1:(WRITE) flags 0x9800 phys_seg 3 prio class 2 [ 118.744922][ T10] device offline error, dev sda, sector 803126 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 118.756002][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2035 starting block 100390) [ 118.762001][ T5101] Aborting journal on device sda1-8. [ 118.774876][ T10] Buffer I/O error on device sda1, logical block 100352 [ 118.781931][ T10] device offline error, dev sda, sector 811310 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 118.792392][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2035 starting block 101413) [ 118.807644][ T10] Buffer I/O error on device sda1, logical block 101375 [ 118.815395][ T10] device offline error, dev sda, sector 753974 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 118.826088][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 94246) [ 118.837618][ T10] Buffer I/O error on device sda1, logical block 94208 [ 118.844562][ T10] device offline error, dev sda, sector 762158 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 118.856084][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 95269) [ 118.867656][ T10] Buffer I/O error on device sda1, logical block 95231 [ 118.874705][ T10] device offline error, dev sda, sector 770358 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 118.885245][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2032 starting block 96294) [ 118.888041][ T6952] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.4.381: Detected aborted journal [ 118.896745][ T10] Buffer I/O error on device sda1, logical block 96256 [ 118.896806][ T10] device offline error, dev sda, sector 737590 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 118.896829][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2028 starting block 92198) [ 118.896851][ T10] Buffer I/O error on device sda1, logical block 92160 [ 118.896882][ T10] device offline error, dev sda, sector 745774 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 118.955410][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2028 starting block 93221) [ 118.968197][ T10] Buffer I/O error on device sda1, logical block 93183 [ 118.975147][ T10] device offline error, dev sda, sector 721206 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 118.985619][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2027 starting block 90150) [ 118.997168][ T10] Buffer I/O error on device sda1, logical block 90112 [ 119.004201][ T10] device offline error, dev sda, sector 778542 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 119.014649][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2032 starting block 97317) [ 119.026703][ T10] Buffer I/O error on device sda1, logical block 97279 [ 119.033992][ T10] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 119.042682][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88106) [ 119.044640][ T5101] JBD2: I/O error when updating journal superblock for sda1-8. [ 119.054164][ T10] Buffer I/O error on device sda1, logical block 88068 [ 119.070870][ T95] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 119.080202][ T6952] EXT4-fs (sda1): I/O error while writing superblock [ 119.088278][ T6952] EXT4-fs (sda1): Remounting filesystem read-only [ 119.114752][ T6953] loop4: detected capacity change from 0 to 1024 [ 119.127431][ T6944] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 119.134746][ T6953] EXT4-fs (loop4): Test dummy encryption mode enabled [ 119.175590][ T6953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.234379][ T6953] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 119.244456][ T6953] EXT4-fs (loop4): shut down requested (0) Aug 13 20:19:04 syzkaller kern.alert kernel: [ 119.244456][ T6953] EXT4-fs (loop4): shut down requested (0) [ 119.284594][ T6226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.294242][ T6037] __quota_error: 18 callbacks suppressed [ 119.294254][ T6037] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!