last executing test programs: 1m23.842785686s ago: executing program 3 (id=12): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc000) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) getgroups(0xffffffffffffff0a, 0x0) r2 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x80000000, 0x0) ptrace(0x10, r2) r3 = syz_pidfd_open(r2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) waitid$P_PIDFD(0x3, r3, 0x0, 0xa000000c, 0x0) 1m19.280091108s ago: executing program 3 (id=14): socket(0x10, 0x803, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000063b000/0x400000)=nil) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x7) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000002c0)=""/82, 0x0, 0xeeeb5000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) 1m18.900544517s ago: executing program 3 (id=17): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x2b, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m17.679538454s ago: executing program 3 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='.\x02\x00', 0x2000840, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0], 0x25, 0x311, &(0x7f00000000c0)="$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") getdents(r0, 0x0, 0x54) 1m17.262185024s ago: executing program 3 (id=20): ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000080)={0x0, 0x6, 0x1002, 0x1}) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000180)="08f7", 0x0, 0x6}, 0x50) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000b40)=0xe4) sendmsg$nl_xfrm(r1, &(0x7f0000001340)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001300)={&(0x7f0000000fc0)=@getsa={0x2f0, 0x12, 0x504, 0x70bd28, 0x25dfdbff, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0xa, 0x6c}, [@extra_flags={0x8, 0x18, 0x2}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e20, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}}, @policy={0xac, 0x7, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x1ff, 0x4e21, 0x7ff, 0x2, 0x0, 0x100, 0x2f, 0x0, r2}, {0x1, 0xfffffffffffffff7, 0x100000001, 0xd, 0x5, 0x4}, {0x200, 0x5, 0x4, 0xfff}, 0x6, 0x6e6bbd, 0x2, 0x0, 0x1}}, @mark={0xc, 0x15, {0x35075b, 0xe8}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @sec_ctx={0xa9, 0x8, {0xa5, 0x8, 0x1, 0x6, 0x9d, "79fba2a896f138075ff379b11640c7eb87d4c0a9f9e829407e90ea77227838b18b939179ee12b164a2ddf6a2922479e09a710376a0ab666fede0f2f8edd254e956ec9e87c09f36f83e45e39825196b30d605d626a2811fc6461d8edbdc1e6c9bf2a100f97cf01a6fc4914237c3a0a5e67c178ea545bdd76b9da8428bf4c4e50adee11d7dad3deb004c85ac87ac05c3c6e3004175401f045f96971ef322"}}, @algo_auth_trunc={0xfd, 0x14, {{'crc32\x00'}, 0x588, 0x100, "79c11750935166240564e37fc0f62c433aa62edb1a5c2ff1a5265dbd98266bd2edd52c2924b23b312a797d9c1d06b2c71f68a75ab1d036afe729d4105934628add2a06a8aff2d5c3dcc7ed3edaf3d5cf5971453b0268196751b9b7dbb2c1324af3995c5ad6e9026821bc051f49466613635ead2f2f459547085b29c86827b2b724f8e8995fcc7b8000f3df0bdd3af6bd4f56c66cdbe9813f71d08ddd8567e84728e5f7fbd311e1838c6c134bbb2ee5cf49"}}, @coaddr={0x14, 0xe, @in=@multicast1}, @lifetime_val={0x24, 0x9, {0x5, 0x9, 0x5, 0x9}}]}, 0x2f0}}, 0x800) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x90, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc71"}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000e00)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x3dc, &(0x7f0000000380)={[{0xbc, 0x4e00, "4f5bc044deb7902fd6a2892d0b8c1c2c02f5b78a97ce0322fca6ca2af532040de0851464b6ddfc919ee58c9e5fcd6aa7334512d148acddc4a4af9a61a38d8fabe19c6f8146c96e3451ef18c2890d3b1313b7d9a8e3c7bf5508a77865d26d91254b60aaafa7c59533992e20c0d1eae9c48e4fd92c33cd8f1d79f34e2bc610f3f692e283252b4dd8bf2ef32f8146d43bf53f965f51ae24c8023200e3c2ce75cb6fa3b5ac2646c2edfba843fa55698e7503901cee968a0751d2ae69abfa"}, {0x60, 0x4e00, "7709b8d606b48aa54b0e53970a11b596a49d19f2a4672bbf117097a69bf47f85d7bb5be607d429262b2e411a590dff253717ee76367e26d2be0e3a68b48dc5820bf5f6213bd44ff31fb7fd629f16b7de3bc77e33efc7116064a9277816d8b6c9"}, {0xfb, 0x4e00, "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"}, {0xb3, 0x4e00, "da642a816f9a1fcc569a6534f1231fd73a1cd4675f7e9934753c19acf0bf9bf42c774196082b05dc7f739765838a421f4dcd12b2922b104c3c9233b19b26c9e44060ba7ec2c73e006d4aa29a9de874cdb43a860e8772a106db817e94f4b65bc13f1c891a0f88390d7016721831b4fc37b90a1f976a2a410197c68c2febaab3a8a539e02def9399b680483c2403239f4c152847529923a61856697e7af227305cee3c234b725d25fbc9ab7cb82b7e353a221c37"}, {0x1, 0x4e00, 'H'}, {0xf0, 0x4e00, "d1e1a1ab94550acb478a39e1b61164a59cc1220216ec7759cc6c528f2bdc18dbd8ee7bae34b48cf8deccfe9d8ae5d4d59af68800a9f6bc7c9d770af6dd04146dde357c98f272814b3b0372669bbcdf0f3b6ad90a8758fd0757777e1c25d6c5deddc6320ccfe6a2a4aef678ba6e33a8bf60a37d3405febfc02c4466b7cc8752d79a8eae001a1150c52b43c334ed667b046bf4909551b1dda71f08dfed6e8ad99f6517721bb1759e3dc9afa73fad908c3db276b6c8b144be0ddb7cb1ed5ab392ef3ca5d72c361027336512c48218550ff14fcb12eb65f1135612c83b638d3971b582785cf88d44bbaed02ef82f5dd1fb05"}, {}]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000f80), 0xffffffffffffffff) syz_usb_control_io$lan78xx(r0, &(0x7f0000000ac0)={0xc, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x412}}}, &(0x7f0000000cc0)={0x1c, &(0x7f0000000b00)={0x40, 0x30}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x3}, 0x0, &(0x7f0000000c00)={0xc0, 0xa1, 0x4, 0x6c3}, &(0x7f0000000c40)={0x40, 0xa0, 0x4, 0x9}, &(0x7f0000000c80)={0xc0, 0xa2, 0x2f, "91c4a7e13ee5e54243df34a56a41d57f94bb58997a3597532fd430b65871e369d70569ce3932c8945789735cbff3f3"}}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040)) 1m16.763481505s ago: executing program 3 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000340)='./file7\x00') lsetxattr$security_ima(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 1m16.179025598s ago: executing program 32 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000340)='./file7\x00') lsetxattr$security_ima(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 6.746910169s ago: executing program 0 (id=156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000480)={0x1, 0x0, [{0xc001102a, 0x0, 0x401}]}) 6.147531392s ago: executing program 0 (id=158): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file2/../file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200008010000000000000040000008500000027000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socket$inet(0x2, 0x2, 0x0) 3.259894587s ago: executing program 4 (id=162): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') fstat(0xffffffffffffffff, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010027bd700402", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 2.895571746s ago: executing program 0 (id=166): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000001c00010029bd7000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000620a0a000200aaaaaaaaaa1c0000060005"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 2.742761469s ago: executing program 0 (id=167): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400, &(0x7f0000000400)={[{@grpquota}, {@quota}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@block_validity}, {@jqfmt_vfsold}]}, 0xf7, 0x505, &(0x7f0000000ac0)="$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") 2.613777872s ago: executing program 1 (id=168): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x7, 0x80000000}, {0x6, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @mcast1}}}}}}, 0x0) 2.531450013s ago: executing program 2 (id=169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) 2.531234523s ago: executing program 0 (id=170): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000000)=0x3cdd06aa, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/91}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 2.435768596s ago: executing program 4 (id=171): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100001002dbd7000fedbdf250000", @ANYRES32=0x0, @ANYBLOB="4822040000000000140009000008000009000000140035007665746830"], 0x48}}, 0x20044080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0xd4}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8010) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x4000080) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000001400)={'multiq3\x00', [0x100, 0xf, 0x2, 0x2, 0x1, 0xff, 0xe, 0x20000000, 0x6, 0xfffffffb, 0x0, 0x7, 0x5, 0x0, 0x10001, 0x7, 0x0, 0x8, 0xeec, 0x401, 0x7, 0x4, 0x8000, 0x9, 0x3, 0x3, 0x3, 0x0, 0x7, 0x7, 0x8]}) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x310}], 0x1, 0x6) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r2, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf2501000000140002007767310000000000000000000000000024000300a006a84f6c9c8e3853e2fd7a70ae0fb20fa15260"], 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000b00), 0x40, 0x0) ioctl(r6, 0x8, 0x0) 2.387064937s ago: executing program 1 (id=172): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x410d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.24762348s ago: executing program 2 (id=173): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000008f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)=[@rights={{0x10}}], 0x10, 0x4}}], 0x1, 0x0) 2.206890231s ago: executing program 0 (id=174): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) unshare(0x42040400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 2.150961042s ago: executing program 4 (id=175): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0x9}, 0x1c, 0x0}, 0xc4) 2.063511074s ago: executing program 2 (id=176): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x200080c5) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f000004d000/0x2000)=nil, 0x2000, 0xb) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) 2.031708885s ago: executing program 1 (id=177): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1e8f9971abeb27be}, 0x6) 1.950871467s ago: executing program 4 (id=178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000100)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x16, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x1, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x8, 0x2, @empty, @loopback}}}}, 0x3e) 1.783549771s ago: executing program 1 (id=179): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000600)="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", 0x2c8}], 0x1}, 0x80) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) copy_file_range(r1, &(0x7f00000008c0)=0x4, r0, 0x0, 0x8, 0x0) 1.644616094s ago: executing program 1 (id=180): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000001c0)) 481.223929ms ago: executing program 2 (id=181): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) 351.459723ms ago: executing program 2 (id=182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x2, 0xfa, 0xb, 0x0, 0x7, 0xbb, 0x6, 0x4, 0x1d, 0x2, 0x81, 0x3, 0x0, 0x18, 0x0, 0x3, 0xe, 0x8, 0x0, '\x00', 0xc7, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 334.135053ms ago: executing program 4 (id=183): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100001002dbd7000fedbdf250000", @ANYRES32=0x0, @ANYBLOB="4822040000000000140009000008000009000000140035007665746830"], 0x48}}, 0x20044080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0xd4}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8010) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x4000080) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000001400)={'multiq3\x00', [0x100, 0xf, 0x2, 0x2, 0x1, 0xff, 0xe, 0x20000000, 0x6, 0xfffffffb, 0x0, 0x7, 0x5, 0x0, 0x10001, 0x7, 0x0, 0x8, 0xeec, 0x401, 0x7, 0x4, 0x8000, 0x9, 0x3, 0x3, 0x3, 0x0, 0x7, 0x7, 0x8]}) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x310}], 0x1, 0x6) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r2, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf2501000000140002007767310000000000000000000000000024000300a006a84f6c9c8e3853e2fd7a70ae0fb20fa15260"], 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000b00), 0x40, 0x0) ioctl(r6, 0x8, 0x0) 220.967466ms ago: executing program 1 (id=184): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1f, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x13000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 79.391129ms ago: executing program 4 (id=185): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 0s ago: executing program 2 (id=186): mount$overlay(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.115' (ED25519) to the list of known hosts. [ 76.390792][ T5761] cgroup: Unknown subsys name 'net' [ 76.529256][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.234645][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.236156][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.278139][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.287102][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.289995][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.297029][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.309834][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.310630][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.324337][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.324985][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.339246][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.340889][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.346469][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.354689][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.361392][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.369005][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.375992][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.382579][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.390152][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.396315][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.403630][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.417688][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.418382][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.425187][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.432781][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.913514][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 81.036854][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 81.058640][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 81.105284][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 81.135311][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.142635][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.149930][ T5776] bridge_slave_0: entered allmulticast mode [ 81.158955][ T5776] bridge_slave_0: entered promiscuous mode [ 81.205061][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.212408][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.220017][ T5776] bridge_slave_1: entered allmulticast mode [ 81.227218][ T5776] bridge_slave_1: entered promiscuous mode [ 81.291239][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.298795][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.306383][ T5773] bridge_slave_0: entered allmulticast mode [ 81.313425][ T5773] bridge_slave_0: entered promiscuous mode [ 81.356481][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.363774][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.370923][ T5773] bridge_slave_1: entered allmulticast mode [ 81.378104][ T5773] bridge_slave_1: entered promiscuous mode [ 81.395323][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.408396][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.417976][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.427697][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.435964][ T5774] bridge_slave_0: entered allmulticast mode [ 81.443782][ T5774] bridge_slave_0: entered promiscuous mode [ 81.487124][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.494377][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.501509][ T5774] bridge_slave_1: entered allmulticast mode [ 81.508621][ T5774] bridge_slave_1: entered promiscuous mode [ 81.524556][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.537402][ T5776] team0: Port device team_slave_0 added [ 81.568237][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.579076][ T5776] team0: Port device team_slave_1 added [ 81.608350][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.660499][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.670045][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.677438][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.685038][ T5775] bridge_slave_0: entered allmulticast mode [ 81.692875][ T5775] bridge_slave_0: entered promiscuous mode [ 81.701053][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.708971][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.738140][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.753764][ T5773] team0: Port device team_slave_0 added [ 81.773297][ T5773] team0: Port device team_slave_1 added [ 81.787110][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.797050][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.805038][ T5775] bridge_slave_1: entered allmulticast mode [ 81.814559][ T5775] bridge_slave_1: entered promiscuous mode [ 81.821817][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.828788][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.855195][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.910125][ T5774] team0: Port device team_slave_0 added [ 81.918657][ T5774] team0: Port device team_slave_1 added [ 81.926054][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.933090][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.959811][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.981970][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.988958][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.014953][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.054790][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.098259][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.123482][ T5776] hsr_slave_0: entered promiscuous mode [ 82.130497][ T5776] hsr_slave_1: entered promiscuous mode [ 82.139557][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.146768][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.173012][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.228450][ T5773] hsr_slave_0: entered promiscuous mode [ 82.236830][ T5773] hsr_slave_1: entered promiscuous mode [ 82.243604][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.251458][ T5773] Cannot create hsr debugfs directory [ 82.271240][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.281208][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.307742][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.372279][ T5775] team0: Port device team_slave_0 added [ 82.414994][ T5775] team0: Port device team_slave_1 added [ 82.506858][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.514073][ T5789] Bluetooth: hci1: command tx timeout [ 82.514090][ T5083] Bluetooth: hci2: command tx timeout [ 82.519733][ T5789] Bluetooth: hci3: command tx timeout [ 82.525419][ T5083] Bluetooth: hci0: command tx timeout [ 82.525658][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.562409][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.576017][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.583444][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.609817][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.656230][ T5774] hsr_slave_0: entered promiscuous mode [ 82.663935][ T5774] hsr_slave_1: entered promiscuous mode [ 82.670044][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.677975][ T5774] Cannot create hsr debugfs directory [ 82.815042][ T5775] hsr_slave_0: entered promiscuous mode [ 82.821360][ T5775] hsr_slave_1: entered promiscuous mode [ 82.827712][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.835465][ T5775] Cannot create hsr debugfs directory [ 82.983669][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.012554][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.024922][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.051173][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.136481][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.146507][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.176217][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.185747][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.288607][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.323702][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.336493][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.347951][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.444085][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.455173][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.469099][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.490830][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.499213][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.570396][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.615610][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.622966][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.634896][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.642052][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.684935][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.779520][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.800286][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.825251][ T1762] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.832424][ T1762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.846258][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.868051][ T1762] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.875242][ T1762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.903748][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.918990][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.944271][ T2918] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.951438][ T2918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.973592][ T2918] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.980796][ T2918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.055537][ T2918] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.062768][ T2918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.077336][ T2918] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.084490][ T2918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.242413][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.406229][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.537275][ T5773] veth0_vlan: entered promiscuous mode [ 84.569203][ T5773] veth1_vlan: entered promiscuous mode [ 84.599162][ T5789] Bluetooth: hci0: command tx timeout [ 84.605376][ T5778] Bluetooth: hci2: command tx timeout [ 84.605399][ T5083] Bluetooth: hci1: command tx timeout [ 84.610789][ T5778] Bluetooth: hci3: command tx timeout [ 84.690022][ T5773] veth0_macvtap: entered promiscuous mode [ 84.727063][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.746441][ T5773] veth1_macvtap: entered promiscuous mode [ 84.787522][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.824195][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.837697][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.867335][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.879224][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.890032][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.899714][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.909697][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.985959][ T5775] veth0_vlan: entered promiscuous mode [ 85.031647][ T5774] veth0_vlan: entered promiscuous mode [ 85.085273][ T5775] veth1_vlan: entered promiscuous mode [ 85.104477][ T5774] veth1_vlan: entered promiscuous mode [ 85.112459][ T5776] veth0_vlan: entered promiscuous mode [ 85.175553][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.191007][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.208505][ T5776] veth1_vlan: entered promiscuous mode [ 85.266811][ T5774] veth0_macvtap: entered promiscuous mode [ 85.278232][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.288712][ T5774] veth1_macvtap: entered promiscuous mode [ 85.295323][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.314711][ T5775] veth0_macvtap: entered promiscuous mode [ 85.336568][ T5775] veth1_macvtap: entered promiscuous mode [ 85.358945][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.385210][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.408168][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.467226][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.491966][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.523133][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.556407][ T5776] veth0_macvtap: entered promiscuous mode [ 85.584421][ T5776] veth1_macvtap: entered promiscuous mode [ 85.598203][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.607655][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.616998][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.626620][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.652740][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.669288][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.680376][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.691437][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.704380][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.754821][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.772910][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.782931][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.795187][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.807143][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.820016][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.833489][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.843431][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.854012][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.864118][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.877650][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.889347][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.951512][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.972881][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.985624][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.997253][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.018274][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.019270][ T1762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.029003][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.029035][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.029051][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.029064][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.029078][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.030501][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.101818][ T1762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.178336][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.207950][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.211067][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.223331][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.243851][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.252861][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.413821][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.435984][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.540538][ T1762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.563968][ T5850] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.586830][ T1762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.681696][ T5789] Bluetooth: hci0: command tx timeout [ 86.687384][ T5083] Bluetooth: hci1: command tx timeout [ 86.693126][ T5779] Bluetooth: hci2: command tx timeout [ 86.699312][ T5778] Bluetooth: hci3: command tx timeout [ 86.732740][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.740719][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.005341][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.077494][ T5854] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.094047][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.261898][ T5857] syz.1.2[5857]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.294157][ T5857] loop1: detected capacity change from 0 to 256 [ 87.322860][ T5857] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.404582][ T5857] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.989274][ T5862] loop1: detected capacity change from 0 to 128 [ 88.113972][ T5862] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.148901][ T5864] loop3: detected capacity change from 0 to 512 [ 88.184038][ T5864] ======================================================= [ 88.184038][ T5864] WARNING: The mand mount option has been deprecated and [ 88.184038][ T5864] and is ignored by this kernel. Remove the mand [ 88.184038][ T5864] option from the mount to silence this warning. [ 88.184038][ T5864] ======================================================= [ 88.243362][ T5862] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.271454][ T5864] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.8: inode has both inline data and extents flags [ 88.359929][ T5864] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.8: couldn't read orphan inode 15 (err -117) [ 88.444192][ T5864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.620505][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.758789][ T5778] Bluetooth: hci3: command tx timeout [ 88.765885][ T5778] Bluetooth: hci0: command tx timeout [ 88.771338][ T5778] Bluetooth: hci1: command tx timeout [ 88.772753][ T5789] Bluetooth: hci2: command tx timeout [ 88.789027][ T5864] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7951 vs 220 free clusters [ 88.940682][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.291018][ T1205] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.297170][ T5874] loop0: detected capacity change from 0 to 512 [ 89.333271][ T5874] EXT4-fs: Ignoring removed orlov option [ 89.370041][ T5874] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.423794][ T5874] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 89.650967][ T1205] usb 2-1: unable to get BOS descriptor or descriptor too short [ 89.749208][ T5874] EXT4-fs error (device loop0): ext4_ext_check_inode:530: inode #16: comm syz.0.11: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 89.859018][ T1205] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.159112][ T5874] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.11: couldn't read orphan inode 16 (err -117) [ 90.179862][ T1205] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.194238][ T5874] EXT4-fs (loop0): 1 orphan inode deleted [ 90.214512][ T5874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.310406][ T1205] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 90.322790][ T1205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.330844][ T1205] usb 2-1: Product: syz [ 90.335135][ T1205] usb 2-1: Manufacturer: syz [ 90.339857][ T1205] usb 2-1: SerialNumber: syz [ 90.360302][ T1205] usb 2-1: selecting invalid altsetting 1 [ 90.368958][ T1205] usb 2-1: unit 6 not found! [ 90.467256][ T5874] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 90.503804][ T5874] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 90.511211][ T5874] overlayfs: failed to verify upper root origin [ 90.611038][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.365359][ T5885] loop0: detected capacity change from 0 to 512 [ 92.601531][ C0] sched: RT throttling activated [ 93.596037][ T10] cfg80211: failed to load regulatory.db [ 94.616106][ T5885] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 94.616449][ T5885] EXT4-fs: failed to create workqueue [ 94.631505][ T5885] EXT4-fs (loop0): mount failed [ 94.936883][ T1205] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 94.949658][ T1205] usb 2-1: USB disconnect, device number 2 [ 95.138586][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.462355][ T1205] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.602613][ T5899] kvm: kvm [5898]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000080 [ 95.654103][ T5899] kvm: kvm [5898]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 95.671793][ T5899] kvm: kvm [5898]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 95.675505][ T1205] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.718654][ T1205] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.745298][ T1205] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.761269][ T1205] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.778303][ T1205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.803629][ T1205] usb 2-1: config 0 descriptor?? [ 95.977739][ T5897] loop0: detected capacity change from 0 to 40427 [ 96.003097][ T5897] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 96.031054][ T5897] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 96.079675][ T5897] F2FS-fs (loop0): Found nat_bits in checkpoint [ 96.263783][ T1205] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 96.281887][ T1205] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 96.289519][ T1205] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 96.308612][ T5897] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 96.317551][ T1205] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 96.353095][ T5897] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 96.365778][ T1205] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 96.644147][ T5818] usb 2-1: USB disconnect, device number 3 [ 96.708920][ T5908] loop3: detected capacity change from 0 to 512 [ 96.783796][ T5908] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.096725][ T5910] loop2: detected capacity change from 0 to 256 [ 97.134192][ T5910] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5e82f46f, utbl_chksum : 0xe619d30d) [ 97.202803][ T28] audit: type=1800 audit(1783686783.429:2): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.21" name="file1" dev="loop2" ino=1048592 res=0 errno=0 [ 97.227211][ T5910] Zero length message leads to an empty skb [ 97.325469][ T5914] loop1: detected capacity change from 0 to 512 [ 97.435045][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.480021][ T5914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.541763][ T5914] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.577757][ T5818] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.670415][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.802009][ T5818] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.816839][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.827642][ T5818] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 97.846752][ T5818] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 97.862895][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.890251][ T5818] usb 1-1: config 0 descriptor?? [ 97.967760][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.323499][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.943326][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.961498][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.976604][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.986099][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.996978][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.004835][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.228389][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 100.387410][ T10] usb 1-1: USB disconnect, device number 2 [ 100.517162][ T11] hsr_slave_0: left promiscuous mode [ 100.554006][ T11] hsr_slave_1: left promiscuous mode [ 100.578469][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.596694][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.628434][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.655855][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.689386][ T11] bridge_slave_1: left allmulticast mode [ 100.727074][ T11] bridge_slave_1: left promiscuous mode [ 100.762944][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.118773][ T11] bridge_slave_0: left allmulticast mode [ 101.133684][ T5789] Bluetooth: hci0: command tx timeout [ 101.238137][ T11] bridge_slave_0: left promiscuous mode [ 101.502067][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.640944][ T11] veth1_macvtap: left promiscuous mode [ 101.665397][ T11] veth0_macvtap: left promiscuous mode [ 101.682136][ T11] veth1_vlan: left promiscuous mode [ 101.687815][ T11] veth0_vlan: left promiscuous mode [ 101.744445][ T5950] loop2: detected capacity change from 0 to 40427 [ 101.767060][ T5950] F2FS-fs (loop2): heap/no_heap options were deprecated [ 101.783472][ T5950] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x7ffff [ 102.164374][ T5976] process 'syz.0.29' launched '/dev/fd/3' with NULL argv: empty string added [ 103.152475][ T5789] Bluetooth: hci0: command tx timeout [ 103.320319][ T5983] mmap: syz.2.31 (5983) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.406106][ T5985] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 105.688540][ T5789] Bluetooth: hci0: command tx timeout [ 106.065537][ T11] team0 (unregistering): Port device team_slave_1 removed [ 106.170816][ T11] team0 (unregistering): Port device team_slave_0 removed [ 106.269996][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.399384][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.721729][ T5789] Bluetooth: hci0: command tx timeout [ 107.882846][ T11] bond0 (unregistering): Released all slaves [ 107.987284][ T6000] syz.1.34 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 107.999860][ T6000] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 108.329438][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.340195][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.351011][ T5934] bridge_slave_0: entered allmulticast mode [ 108.360726][ T5934] bridge_slave_0: entered promiscuous mode [ 108.440147][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.457955][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.500623][ T5934] bridge_slave_1: entered allmulticast mode [ 108.510461][ T5934] bridge_slave_1: entered promiscuous mode [ 108.721076][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.769147][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.831318][ T6011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.37'. [ 109.081071][ T5934] team0: Port device team_slave_0 added [ 109.131000][ T5934] team0: Port device team_slave_1 added [ 109.320053][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.327486][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.364553][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.406435][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.424063][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.467035][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.598003][ T5934] hsr_slave_0: entered promiscuous mode [ 109.609562][ T5934] hsr_slave_1: entered promiscuous mode [ 109.622393][ T5934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.633549][ T5763] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.648052][ T5934] Cannot create hsr debugfs directory [ 109.894342][ T5763] usb 3-1: config 127 has an invalid interface number: 228 but max is 0 [ 109.903686][ T5763] usb 3-1: config 127 has no interface number 0 [ 109.910130][ T5763] usb 3-1: config 127 interface 228 altsetting 0 bulk endpoint 0xB has invalid maxpacket 32 [ 109.933134][ T5818] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.959159][ T5763] usb 3-1: config 127 interface 228 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023 [ 110.085124][ T5763] usb 3-1: New USB device found, idVendor=2e24, idProduct=1d95, bcdDevice=5e.f2 [ 110.105095][ T5763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.147126][ T5818] usb 2-1: Using ep0 maxpacket: 8 [ 110.166043][ T5763] usb 3-1: Product: syz [ 110.170746][ T5763] usb 3-1: Manufacturer: syz [ 110.179135][ T5818] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 110.203870][ T5763] usb 3-1: SerialNumber: syz [ 110.226371][ T5818] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 110.276129][ T6020] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 110.395422][ T6020] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 110.437386][ T5818] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.717224][ T5818] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.831858][ T5818] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.952142][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.998247][ T5763] usb 3-1: USB disconnect, device number 2 [ 111.106631][ T5934] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.127650][ T5934] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.140278][ T5934] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 111.153835][ T5934] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 111.230463][ T6024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.260640][ T6024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.278347][ T5818] usb 2-1: GET_CAPABILITIES returned 0 [ 111.296565][ T5818] usbtmc 2-1:16.0: can't read capabilities [ 111.326583][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.368579][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.391391][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.398649][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.429876][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.437110][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.499214][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 111.540257][ T5816] usb 2-1: USB disconnect, device number 4 [ 112.106099][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.072752][ T6067] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 113.221875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 113.380227][ T5818] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.589119][ T6071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.45'. [ 113.664187][ T5818] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.692043][ T5818] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 113.701170][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.746980][ T5818] usb 1-1: config 0 descriptor?? [ 113.776093][ T5818] pwc: Askey VC010 type 2 USB webcam detected. [ 114.300525][ T5818] pwc: recv_control_msg error -32 req 02 val 2b00 [ 114.400343][ T5818] pwc: recv_control_msg error -32 req 02 val 2700 [ 114.544543][ T5818] pwc: recv_control_msg error -32 req 02 val 2c00 [ 114.687990][ T5818] pwc: recv_control_msg error -32 req 04 val 1000 [ 114.838905][ T5818] pwc: recv_control_msg error -32 req 04 val 1300 [ 114.863419][ T5818] pwc: recv_control_msg error -71 req 04 val 1400 [ 114.877881][ T5818] pwc: recv_control_msg error -71 req 02 val 2000 [ 114.897522][ T5818] pwc: recv_control_msg error -71 req 02 val 2100 [ 114.916825][ T5818] pwc: recv_control_msg error -71 req 04 val 1500 [ 114.951828][ T5818] pwc: recv_control_msg error -71 req 02 val 2500 [ 114.972782][ T5818] pwc: recv_control_msg error -71 req 02 val 2400 [ 114.987395][ T5818] pwc: recv_control_msg error -71 req 02 val 2600 [ 115.004747][ T5818] pwc: recv_control_msg error -71 req 02 val 2900 [ 115.026605][ T5818] pwc: recv_control_msg error -71 req 02 val 2800 [ 115.055834][ T5818] pwc: recv_control_msg error -71 req 04 val 1100 [ 115.080973][ T5818] pwc: recv_control_msg error -71 req 04 val 1200 [ 115.107178][ T5934] veth0_vlan: entered promiscuous mode [ 115.124411][ T5818] pwc: Registered as video103. [ 115.149010][ T5818] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 115.156218][ T5934] veth1_vlan: entered promiscuous mode [ 115.218748][ T5818] usb 1-1: USB disconnect, device number 3 [ 115.333638][ T5934] veth0_macvtap: entered promiscuous mode [ 115.372736][ T5934] veth1_macvtap: entered promiscuous mode [ 115.448663][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.491646][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.536166][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.551566][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.561441][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.596555][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.625442][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.721873][ T6094] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 115.808479][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.924874][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.039606][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.154983][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.266109][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.385413][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.484025][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.555466][ T5934] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.592051][ T5934] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.612892][ T5934] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.641826][ T5934] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.863489][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.872146][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.968138][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.985668][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.329644][ T6122] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20004 [ 118.392436][ T5818] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.581916][ T5818] usb 1-1: Using ep0 maxpacket: 8 [ 118.620292][ T5818] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 118.626249][ T6133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.54'. [ 118.661075][ T5818] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 118.695349][ T5818] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.718228][ T5818] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.745040][ T5818] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.781698][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.087529][ T6142] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 119.524379][ T6119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.622109][ T6119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.686823][ T5818] usb 1-1: GET_CAPABILITIES returned 0 [ 119.702309][ T5818] usbtmc 1-1:16.0: can't read capabilities [ 119.931617][ T171] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 120.045762][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 120.061043][ T23] usb 1-1: USB disconnect, device number 4 [ 121.005048][ T171] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.028437][ T171] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 121.065007][ T171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.089912][ T171] usb 2-1: config 0 descriptor?? [ 121.113625][ T171] pwc: Askey VC010 type 2 USB webcam detected. [ 121.683497][ T171] pwc: recv_control_msg error -32 req 02 val 2b00 [ 121.797984][ T171] pwc: recv_control_msg error -32 req 02 val 2700 [ 121.816186][ T171] pwc: recv_control_msg error -32 req 02 val 2c00 [ 121.860510][ T171] pwc: recv_control_msg error -32 req 04 val 1000 [ 121.900987][ T171] pwc: recv_control_msg error -32 req 04 val 1300 [ 121.913633][ T171] pwc: recv_control_msg error -71 req 04 val 1400 [ 121.929278][ T171] pwc: recv_control_msg error -71 req 02 val 2000 [ 121.940609][ T171] pwc: recv_control_msg error -71 req 02 val 2100 [ 121.957482][ T171] pwc: recv_control_msg error -71 req 04 val 1500 [ 121.975396][ T171] pwc: recv_control_msg error -71 req 02 val 2500 [ 121.987473][ T171] pwc: recv_control_msg error -71 req 02 val 2400 [ 121.995282][ T171] pwc: recv_control_msg error -71 req 02 val 2600 [ 122.011902][ T171] pwc: recv_control_msg error -71 req 02 val 2900 [ 122.109589][ T171] pwc: recv_control_msg error -71 req 02 val 2800 [ 122.116793][ T171] pwc: recv_control_msg error -71 req 04 val 1100 [ 122.126654][ T171] pwc: recv_control_msg error -71 req 04 val 1200 [ 122.143295][ T171] pwc: Registered as video103. [ 122.152061][ T171] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 122.169626][ T171] usb 2-1: USB disconnect, device number 5 [ 122.203671][ T6161] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 124.122942][ T6191] loop1: detected capacity change from 0 to 256 [ 124.477660][ T6196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.63'. [ 124.823933][ T6203] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 125.025224][ T6210] loop4: detected capacity change from 0 to 128 [ 125.155064][ T6211] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 125.281728][ T5816] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.341839][ T28] audit: type=1804 audit(1783686811.569:3): pid=6210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.68" name="/newroot/3/bus/bus" dev="loop4" ino=1048597 res=1 errno=0 [ 125.531691][ T5816] usb 1-1: Using ep0 maxpacket: 8 [ 125.540879][ T5816] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 125.793392][ T5816] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 125.805619][ T5816] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.815962][ T5816] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.835482][ T5816] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 125.850528][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.204094][ T1205] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 126.576120][ T6208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.599952][ T6208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.616778][ T5816] usb 1-1: GET_CAPABILITIES returned 0 [ 126.625393][ T5816] usbtmc 1-1:16.0: can't read capabilities [ 126.745491][ T1205] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.769661][ T1205] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 126.789846][ T1205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.813019][ T1205] usb 5-1: config 0 descriptor?? [ 126.833993][ T1205] pwc: Askey VC010 type 2 USB webcam detected. [ 126.846643][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 126.859586][ T27] usb 1-1: USB disconnect, device number 5 [ 127.239908][ T1205] pwc: recv_control_msg error -32 req 02 val 2b00 [ 127.249953][ T1205] pwc: recv_control_msg error -32 req 02 val 2700 [ 127.265536][ T1205] pwc: recv_control_msg error -32 req 02 val 2c00 [ 127.279794][ T1205] pwc: recv_control_msg error -32 req 04 val 1000 [ 127.295529][ T1205] pwc: recv_control_msg error -32 req 04 val 1300 [ 127.308963][ T1205] pwc: recv_control_msg error -71 req 04 val 1400 [ 127.326334][ T1205] pwc: recv_control_msg error -71 req 02 val 2000 [ 127.342642][ T1205] pwc: recv_control_msg error -71 req 02 val 2100 [ 127.359818][ T1205] pwc: recv_control_msg error -71 req 04 val 1500 [ 127.373046][ T1205] pwc: recv_control_msg error -71 req 02 val 2500 [ 127.382314][ T1205] pwc: recv_control_msg error -71 req 02 val 2400 [ 127.396856][ T1205] pwc: recv_control_msg error -71 req 02 val 2600 [ 127.411335][ T1205] pwc: recv_control_msg error -71 req 02 val 2900 [ 127.427324][ T1205] pwc: recv_control_msg error -71 req 02 val 2800 [ 127.443585][ T1205] pwc: recv_control_msg error -71 req 04 val 1100 [ 127.460725][ T1205] pwc: recv_control_msg error -71 req 04 val 1200 [ 127.485136][ T1205] pwc: Registered as video103. [ 127.505145][ T1205] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 127.563816][ T1205] usb 5-1: USB disconnect, device number 2 [ 129.187512][ T6258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.76'. [ 129.220373][ T6233] loop1: detected capacity change from 0 to 40427 [ 129.235429][ T6233] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 129.265717][ T6233] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 129.290289][ T6233] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 129.391962][ T6233] F2FS-fs (loop1): Found nat_bits in checkpoint [ 129.525667][ T6233] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 129.540368][ T6233] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 132.475129][ T6278] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 133.236178][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 133.317209][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.324358][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.331728][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 133.442227][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 133.526433][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 133.550950][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 133.573746][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.590373][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.621838][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 133.631013][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.651818][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.664601][ T6290] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 133.672413][ T27] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 133.690243][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.715005][ T27] usb 1-1: config 0 descriptor?? [ 133.738624][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 133.930015][ T6284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.017476][ T6284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.079444][ T8] usb 3-1: GET_CAPABILITIES returned 0 [ 134.090085][ T8] usbtmc 3-1:16.0: can't read capabilities [ 134.308631][ T27] pwc: recv_control_msg error -32 req 02 val 2b00 [ 134.364248][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 134.384666][ T1205] usb 3-1: USB disconnect, device number 3 [ 134.397230][ T27] pwc: recv_control_msg error -32 req 02 val 2700 [ 134.412504][ T27] pwc: recv_control_msg error -32 req 02 val 2c00 [ 134.424067][ T27] pwc: recv_control_msg error -32 req 04 val 1000 [ 134.432072][ T27] pwc: recv_control_msg error -32 req 04 val 1300 [ 134.440275][ T27] pwc: recv_control_msg error -71 req 04 val 1400 [ 134.448043][ T27] pwc: recv_control_msg error -71 req 02 val 2000 [ 134.455426][ T27] pwc: recv_control_msg error -71 req 02 val 2100 [ 134.462920][ T27] pwc: recv_control_msg error -71 req 04 val 1500 [ 134.475303][ T27] pwc: recv_control_msg error -71 req 02 val 2500 [ 134.522485][ T27] pwc: recv_control_msg error -71 req 02 val 2400 [ 135.427370][ T27] pwc: recv_control_msg error -71 req 02 val 2600 [ 135.594265][ T27] pwc: recv_control_msg error -71 req 02 val 2900 [ 135.626815][ T27] pwc: recv_control_msg error -71 req 02 val 2800 [ 135.663237][ T27] pwc: recv_control_msg error -71 req 04 val 1100 [ 135.696058][ T27] pwc: recv_control_msg error -71 req 04 val 1200 [ 135.724014][ T27] pwc: Registered as video103. [ 135.737424][ T27] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 135.792980][ T6304] loop2: detected capacity change from 0 to 256 [ 135.793086][ T27] usb 1-1: USB disconnect, device number 6 [ 136.002543][ T6307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.85'. [ 137.473928][ T6323] loop1: detected capacity change from 0 to 512 [ 137.629048][ T6323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.662015][ T6323] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.331785][ T171] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 138.424681][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.531989][ T171] usb 1-1: Using ep0 maxpacket: 8 [ 138.552343][ T171] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 138.650675][ T171] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 138.673210][ T6351] netlink: 28 bytes leftover after parsing attributes in process `syz.4.95'. [ 138.728661][ T171] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 138.761600][ T171] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.798163][ T6354] loop1: detected capacity change from 0 to 256 [ 138.812350][ T171] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.834694][ T171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.101385][ T6341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.292138][ T6341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.400898][ T171] usb 1-1: GET_CAPABILITIES returned 0 [ 139.431699][ T171] usbtmc 1-1:16.0: can't read capabilities [ 139.597896][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 139.723026][ T23] usb 1-1: USB disconnect, device number 7 [ 140.704023][ T6363] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 143.270921][ T6406] loop0: detected capacity change from 0 to 512 [ 143.456870][ T6406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.512317][ T6406] ext4 filesystem being mounted at /33/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.683090][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.4.104'. [ 143.687667][ T6426] loop1: detected capacity change from 0 to 256 [ 143.761288][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.137128][ T6433] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 144.193124][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 144.391947][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 144.407953][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 144.490159][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 144.549031][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.631681][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.698763][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 144.741339][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.181841][ T6454] loop1: detected capacity change from 0 to 128 [ 145.228730][ T6454] FAT-fs (loop1): Directory bread(block 162) failed [ 145.235781][ T6454] FAT-fs (loop1): Directory bread(block 163) failed [ 145.242620][ T6454] FAT-fs (loop1): Directory bread(block 164) failed [ 145.249342][ T6454] FAT-fs (loop1): Directory bread(block 165) failed [ 145.256088][ T6454] FAT-fs (loop1): Directory bread(block 166) failed [ 145.262866][ T6454] FAT-fs (loop1): Directory bread(block 167) failed [ 145.269619][ T6454] FAT-fs (loop1): Directory bread(block 168) failed [ 145.276544][ T6454] FAT-fs (loop1): Directory bread(block 169) failed [ 145.283638][ T6454] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.338543][ T6454] FAT-fs (loop1): Directory bread(block 162) failed [ 145.345656][ T6454] FAT-fs (loop1): Directory bread(block 163) failed [ 145.356726][ T6454] syz.1.109: attempt to access beyond end of device [ 145.356726][ T6454] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 145.370395][ T6454] syz.1.109: attempt to access beyond end of device [ 145.370395][ T6454] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 145.415502][ T6454] syz.1.109: attempt to access beyond end of device [ 145.415502][ T6454] loop1: rw=3, sector=234, nr_sectors = 6 limit=128 [ 145.429109][ T6454] syz.1.109: attempt to access beyond end of device [ 145.429109][ T6454] loop1: rw=2051, sector=240, nr_sectors = 2 limit=128 [ 145.467322][ T6454] netlink: 27 bytes leftover after parsing attributes in process `syz.1.109'. [ 145.583868][ T6430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.720556][ T6430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.827351][ T8] usb 1-1: GET_CAPABILITIES returned 0 [ 145.866463][ T8] usbtmc 1-1:16.0: can't read capabilities [ 146.038758][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 146.070501][ T8] usb 1-1: USB disconnect, device number 8 [ 147.370591][ T6472] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 147.731643][ T6480] netlink: 28 bytes leftover after parsing attributes in process `syz.4.115'. [ 147.734109][ T6478] loop1: detected capacity change from 0 to 256 [ 148.154642][ T28] audit: type=1326 audit(1783686834.389:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6483 comm="syz.4.117" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246659de59 code=0x7ffc0000 [ 148.340938][ T28] audit: type=1326 audit(1783686834.419:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6483 comm="syz.4.117" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246659de59 code=0x7ffc0000 [ 148.340994][ T28] audit: type=1326 audit(1783686834.419:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6483 comm="syz.4.117" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246659de59 code=0x7ffc0000 [ 148.341038][ T28] audit: type=1326 audit(1783686834.429:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6483 comm="syz.4.117" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246659de59 code=0x7ffc0000 [ 148.341082][ T28] audit: type=1326 audit(1783686834.429:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6483 comm="syz.4.117" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f246659de59 code=0x7ffc0000 [ 148.341126][ T28] audit: type=1326 audit(1783686834.429:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6483 comm="syz.4.117" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246659de59 code=0x7ffc0000 [ 148.341180][ T28] audit: type=1326 audit(1783686834.429:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6483 comm="syz.4.117" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246659de59 code=0x7ffc0000 [ 148.341224][ T28] audit: type=1326 audit(1783686834.429:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6483 comm="syz.4.117" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246659de59 code=0x7ffc0000 [ 148.341269][ T28] audit: type=1326 audit(1783686834.429:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6483 comm="syz.4.117" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246659de59 code=0x7ffc0000 [ 148.341313][ T28] audit: type=1326 audit(1783686834.429:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6483 comm="syz.4.117" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f246659de59 code=0x7ffc0000 [ 148.396660][ T6490] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 149.371792][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 149.459637][ T6506] loop0: detected capacity change from 0 to 512 [ 149.668417][ T6506] EXT4-fs: inline encryption not supported [ 149.900954][ T6506] EXT4-fs (loop0): Test dummy encryption mode enabled [ 150.134387][ T6506] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 150.236883][ T6506] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.123: bad orphan inode 131083 [ 150.303500][ T6506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.685988][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.757572][ T6514] netlink: 'syz.4.124': attribute type 1 has an invalid length. [ 151.784140][ T6514] bridge0: port 3(erspan0) entered blocking state [ 151.791298][ T6514] bridge0: port 3(erspan0) entered disabled state [ 151.801375][ T6514] erspan0: entered allmulticast mode [ 151.817077][ T6514] erspan0: entered promiscuous mode [ 151.827354][ T6514] bridge0: port 3(erspan0) entered blocking state [ 151.834326][ T6514] bridge0: port 3(erspan0) entered forwarding state [ 151.866174][ T6514] erspan0: left allmulticast mode [ 151.871345][ T6514] erspan0: left promiscuous mode [ 151.879089][ T6514] bridge0: port 3(erspan0) entered disabled state [ 152.111833][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 152.150130][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.317620][ T8] usb 2-1: string descriptor 0 read error: -71 [ 152.351931][ T8] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 152.400388][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.424271][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.425568][ T6522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.125'. [ 152.434510][ T8] usb 2-1: config 0 descriptor?? [ 152.448502][ T8] usb 2-1: can't set config #0, error -71 [ 152.476098][ T8] usb 2-1: USB disconnect, device number 6 [ 153.836718][ T6540] loop0: detected capacity change from 0 to 128 [ 153.942427][ T6541] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 156.744487][ T6565] loop2: detected capacity change from 0 to 4096 [ 156.920973][ T6572] loop0: detected capacity change from 0 to 1024 [ 156.961006][ T6572] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 156.979112][ T6572] JBD2: no valid journal superblock found [ 156.987815][ T6572] EXT4-fs (loop0): Could not load journal inode [ 157.541130][ T6565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.624236][ T5791] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 160.688917][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.231656][ T6596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.139'. [ 164.726564][ T6592] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 164.955593][ T6612] loop4: detected capacity change from 0 to 256 [ 165.395882][ T6616] kvm: pic: non byte write [ 166.258060][ T6621] loop4: detected capacity change from 0 to 40427 [ 166.339110][ T6621] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 166.401660][ T6621] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 166.499091][ T6621] F2FS-fs (loop4): invalid crc_offset: 1 [ 166.559510][ T6647] loop2: detected capacity change from 0 to 512 [ 166.627910][ T6647] EXT4-fs: Ignoring removed i_version option [ 166.691175][ T6647] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 166.695886][ T6652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.151'. [ 166.770218][ T6621] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 166.775702][ T6647] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 166.777967][ T6621] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 166.836604][ T6647] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 166.868336][ T6647] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.150: Corrupt directory, running e2fsck is recommended [ 166.908421][ T6621] syz.4.146: attempt to access beyond end of device [ 166.908421][ T6621] loop4: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 166.931199][ T6647] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 166.964890][ T6647] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.150: corrupted in-inode xattr: invalid ea_ino [ 167.014163][ T6647] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.150: couldn't read orphan inode 15 (err -117) [ 167.051237][ T6647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.110079][ T6658] netlink: 'syz.1.152': attribute type 24 has an invalid length. [ 167.138284][ T5934] syz-executor: attempt to access beyond end of device [ 167.138284][ T5934] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 167.211671][ T5934] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 167.285803][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.377422][ T6662] loop1: detected capacity change from 0 to 256 [ 167.594776][ T6662] FAT-fs (loop1): Directory bread(block 64) failed [ 167.612715][ T6662] FAT-fs (loop1): Directory bread(block 65) failed [ 167.634293][ T6662] FAT-fs (loop1): Directory bread(block 66) failed [ 167.652633][ T6662] FAT-fs (loop1): Directory bread(block 67) failed [ 167.664715][ T6662] FAT-fs (loop1): Directory bread(block 68) failed [ 167.681956][ T6662] FAT-fs (loop1): Directory bread(block 69) failed [ 167.701943][ T6662] FAT-fs (loop1): Directory bread(block 70) failed [ 167.723857][ T6662] FAT-fs (loop1): Directory bread(block 71) failed [ 167.751686][ T6662] FAT-fs (loop1): Directory bread(block 72) failed [ 167.758308][ T6662] FAT-fs (loop1): Directory bread(block 73) failed [ 168.367921][ T6685] loop2: detected capacity change from 0 to 512 [ 168.610467][ T6685] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 168.881650][ T6686] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 169.106131][ T6685] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.161: invalid indirect mapped block 256 (level 2) [ 169.193507][ T6693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.160'. [ 169.218717][ T6685] EXT4-fs (loop2): 2 truncates cleaned up [ 169.239485][ T6685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.879557][ T6685] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.161: bg 0: block 5: invalid block bitmap [ 170.906720][ T6685] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 170.950054][ T6685] EXT4-fs (loop2): This should not happen!! Data will be lost [ 170.950054][ T6685] [ 170.968991][ T6685] EXT4-fs (loop2): Total free blocks count 0 [ 170.978335][ T6685] EXT4-fs (loop2): Free/Dirty block details [ 170.984691][ T6685] EXT4-fs (loop2): free_blocks=0 [ 170.989975][ T6685] EXT4-fs (loop2): dirty_blocks=1 [ 170.996146][ T6685] EXT4-fs (loop2): Block reservation details [ 171.002407][ T6685] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 171.049977][ T6696] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 171.113551][ T6696] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 171.204872][ T6699] netlink: 56 bytes leftover after parsing attributes in process `syz.1.164'. [ 171.225596][ T6696] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 171.237186][ T6696] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 171.238669][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.246225][ T6696] overlayfs: d_ino too big (27, ino=9223372036854775973, xinobits=3) [ 171.272467][ T6696] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 171.292184][ T6696] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 171.310847][ T6699] loop1: detected capacity change from 0 to 1024 [ 171.332616][ T6696] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 171.355069][ T6696] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 171.417078][ T6696] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 171.445989][ T6696] overlayfs: d_ino too big (dev, ino=4611686018427387909, xinobits=3) [ 171.478239][ T6696] overlayfs: d_ino too big (kernel, ino=4611686018427389232, xinobits=3) [ 171.497086][ T6706] loop0: detected capacity change from 0 to 512 [ 171.542578][ T6706] EXT4-fs: quotafile must be on filesystem root [ 171.848199][ T6715] netlink: 28 bytes leftover after parsing attributes in process `syz.4.171'. [ 172.072011][ T6722] capability: warning: `syz.0.174' uses deprecated v2 capabilities in a way that may be insecure [ 172.706687][ T6730] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.716232][ T6730] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.133117][ T6730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.177657][ T6730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.529997][ T6730] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.539508][ T6730] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.548511][ T6730] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.557493][ T6730] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.679087][ T6730] syz.2.176 (6730) used greatest stack depth: 20840 bytes left [ 173.909682][ T6749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.183'. [ 173.911727][ T6746] kvm: pic: non byte write [ 174.053517][ T6751] loop1: detected capacity change from 0 to 512 [ 174.088088][ T6751] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 174.131623][ T6751] EXT4-fs (loop1): orphan cleanup on readonly fs [ 174.171858][ T6751] [ 174.174282][ T6751] ====================================================== [ 174.181593][ T6751] WARNING: possible circular locking dependency detected [ 174.188630][ T6751] syzkaller #0 Not tainted [ 174.193048][ T6751] ------------------------------------------------------ [ 174.200065][ T6751] syz.1.184/6751 is trying to acquire lock: [ 174.205961][ T6751] ffff88807d5bec58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 174.216000][ T6751] [ 174.216000][ T6751] but task is already holding lock: [ 174.223466][ T6751] ffff88805fbc64c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3d3/0x6d0 [ 174.233334][ T6751] [ 174.233334][ T6751] which lock already depends on the new lock. [ 174.233334][ T6751] [ 174.243834][ T6751] [ 174.243834][ T6751] the existing dependency chain (in reverse order) is: [ 174.252851][ T6751] [ 174.252851][ T6751] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 174.260424][ T6751] down_write+0x97/0x200 [ 174.265210][ T6751] ext4_destroy_inline_data+0x28/0xe0 [ 174.271140][ T6751] ext4_do_writepages+0x4f2/0x3990 [ 174.276799][ T6751] ext4_writepages+0x1dd/0x350 [ 174.282099][ T6751] do_writepages+0x351/0x590 [ 174.287246][ T6751] filemap_fdatawrite_wbc+0x122/0x180 [ 174.293155][ T6751] file_write_and_wait_range+0x197/0x280 [ 174.299313][ T6751] generic_buffers_fsync_noflush+0x6f/0x160 [ 174.305739][ T6751] ext4_sync_file+0x460/0xd50 [ 174.310947][ T6751] ext4_buffered_write_iter+0x2c0/0x350 [ 174.317019][ T6751] ext4_file_write_iter+0x1e7/0x1980 [ 174.323275][ T6751] vfs_write+0x474/0x9a0 [ 174.328050][ T6751] ksys_write+0x151/0x260 [ 174.332910][ T6751] do_syscall_64+0x55/0xb0 [ 174.337882][ T6751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.344312][ T6751] [ 174.344312][ T6751] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 174.353095][ T6751] __lock_acquire+0x37ef/0x7d80 [ 174.358474][ T6751] lock_acquire+0x19e/0x420 [ 174.363598][ T6751] percpu_down_read+0x44/0x1a0 [ 174.368894][ T6751] ext4_writepages+0x1a4/0x350 [ 174.374299][ T6751] do_writepages+0x351/0x590 [ 174.379425][ T6751] __writeback_single_inode+0x14e/0xee0 [ 174.385528][ T6751] writeback_single_inode+0x21f/0x760 [ 174.391546][ T6751] write_inode_now+0x183/0x210 [ 174.396850][ T6751] iput+0x58f/0x900 [ 174.401196][ T6751] ext4_xattr_block_set+0x2228/0x2fe0 [ 174.407127][ T6751] ext4_expand_extra_isize_ea+0x128f/0x1e70 [ 174.413654][ T6751] __ext4_expand_extra_isize+0x306/0x400 [ 174.419818][ T6751] __ext4_mark_inode_dirty+0x458/0x6d0 [ 174.425805][ T6751] ext4_evict_inode+0x7dd/0xe70 [ 174.431286][ T6751] evict+0x4b7/0x8a0 [ 174.435716][ T6751] ext4_orphan_cleanup+0xc33/0x1470 [ 174.441641][ T6751] ext4_fill_super+0x5fb5/0x6870 [ 174.447256][ T6751] get_tree_bdev+0x3e5/0x520 [ 174.452410][ T6751] vfs_get_tree+0x8c/0x280 [ 174.457358][ T6751] do_new_mount+0x24a/0xa40 [ 174.462399][ T6751] __se_sys_mount+0x2e7/0x3d0 [ 174.467710][ T6751] do_syscall_64+0x55/0xb0 [ 174.472762][ T6751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.479285][ T6751] [ 174.479285][ T6751] other info that might help us debug this: [ 174.479285][ T6751] [ 174.489541][ T6751] Possible unsafe locking scenario: [ 174.489541][ T6751] [ 174.497076][ T6751] CPU0 CPU1 [ 174.502463][ T6751] ---- ---- [ 174.507831][ T6751] lock(&ei->xattr_sem); [ 174.512608][ T6751] lock(&sbi->s_writepages_rwsem); [ 174.520344][ T6751] lock(&ei->xattr_sem); [ 174.527204][ T6751] rlock(&sbi->s_writepages_rwsem); [ 174.532508][ T6751] [ 174.532508][ T6751] *** DEADLOCK *** [ 174.532508][ T6751] [ 174.540750][ T6751] 3 locks held by syz.1.184/6751: [ 174.545788][ T6751] #0: ffff88807d5bc0e0 (&type->s_umount_key#31){++++}-{3:3}, at: get_tree_bdev+0x345/0x520 [ 174.555912][ T6751] #1: ffff88807d5bc608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b4/0xe70 [ 174.565330][ T6751] #2: ffff88805fbc64c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3d3/0x6d0 [ 174.575878][ T6751] [ 174.575878][ T6751] stack backtrace: [ 174.581939][ T6751] CPU: 1 PID: 6751 Comm: syz.1.184 Not tainted syzkaller #0 [ 174.589246][ T6751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 174.599316][ T6751] Call Trace: [ 174.602607][ T6751] [ 174.605578][ T6751] dump_stack_lvl+0x18c/0x250 [ 174.610272][ T6751] ? load_image+0x420/0x420 [ 174.614790][ T6751] ? show_regs_print_info+0x20/0x20 [ 174.620005][ T6751] ? print_circular_bug+0x12b/0x1a0 [ 174.625217][ T6751] check_noncircular+0x2fc/0x400 [ 174.630163][ T6751] ? look_up_lock_class+0x75/0x140 [ 174.635282][ T6751] ? print_deadlock_bug+0x5d0/0x5d0 [ 174.640487][ T6751] ? lockdep_lock+0xf5/0x230 [ 174.645197][ T6751] ? mark_lock+0x94/0x320 [ 174.649558][ T6751] ? _find_first_zero_bit+0xd6/0x100 [ 174.654867][ T6751] __lock_acquire+0x37ef/0x7d80 [ 174.659738][ T6751] ? mark_lock+0x94/0x320 [ 174.664078][ T6751] ? verify_lock_unused+0x140/0x140 [ 174.669311][ T6751] ? __lock_acquire+0x1336/0x7d80 [ 174.674368][ T6751] ? __lock_acquire+0x7d80/0x7d80 [ 174.679438][ T6751] lock_acquire+0x19e/0x420 [ 174.684092][ T6751] ? ext4_writepages+0x1a4/0x350 [ 174.689114][ T6751] ? __might_sleep+0xe0/0xe0 [ 174.693730][ T6751] ? read_lock_is_recursive+0x20/0x20 [ 174.699201][ T6751] ? mark_lock+0x94/0x320 [ 174.703543][ T6751] ? __lock_acquire+0x1336/0x7d80 [ 174.708595][ T6751] ? look_up_lock_class+0x75/0x140 [ 174.713719][ T6751] percpu_down_read+0x44/0x1a0 [ 174.718496][ T6751] ? ext4_writepages+0x1a4/0x350 [ 174.723537][ T6751] ext4_writepages+0x1a4/0x350 [ 174.728327][ T6751] ? ext4_read_folio+0x2f0/0x2f0 [ 174.733281][ T6751] ? __rwlock_init+0x150/0x150 [ 174.738060][ T6751] ? do_raw_spin_unlock+0x121/0x230 [ 174.743616][ T6751] ? ext4_read_folio+0x2f0/0x2f0 [ 174.748833][ T6751] do_writepages+0x351/0x590 [ 174.753443][ T6751] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 174.759261][ T6751] ? writeback_single_inode+0x214/0x760 [ 174.764822][ T6751] ? __lock_acquire+0x7d80/0x7d80 [ 174.769853][ T6751] ? do_raw_spin_lock+0x11f/0x2b0 [ 174.774890][ T6751] __writeback_single_inode+0x14e/0xee0 [ 174.780472][ T6751] writeback_single_inode+0x21f/0x760 [ 174.785870][ T6751] ? write_inode_now+0x210/0x210 [ 174.790906][ T6751] write_inode_now+0x183/0x210 [ 174.795685][ T6751] ? bdi_split_work_to_wbs+0x900/0x900 [ 174.801166][ T6751] ? do_raw_spin_unlock+0x121/0x230 [ 174.806376][ T6751] iput+0x58f/0x900 [ 174.810198][ T6751] ext4_xattr_block_set+0x2228/0x2fe0 [ 174.815682][ T6751] ? ext4_xattr_block_find+0x320/0x320 [ 174.821153][ T6751] ? xattr_find_entry+0x2a6/0x2f0 [ 174.826713][ T6751] ? ext4_xattr_block_find+0xce/0x320 [ 174.832104][ T6751] ext4_expand_extra_isize_ea+0x128f/0x1e70 [ 174.838051][ T6751] __ext4_expand_extra_isize+0x306/0x400 [ 174.843890][ T6751] __ext4_mark_inode_dirty+0x458/0x6d0 [ 174.849825][ T6751] ext4_evict_inode+0x7dd/0xe70 [ 174.854719][ T6751] ? evict+0x482/0x8a0 [ 174.858803][ T6751] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 174.864715][ T6751] ? do_raw_spin_unlock+0x121/0x230 [ 174.869941][ T6751] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 174.875874][ T6751] evict+0x4b7/0x8a0 [ 174.879800][ T6751] ? __lock_acquire+0x7d80/0x7d80 [ 174.884854][ T6751] ? proc_nr_inodes+0x230/0x230 [ 174.889713][ T6751] ? do_raw_spin_unlock+0x121/0x230 [ 174.894921][ T6751] ? _raw_spin_unlock+0x28/0x40 [ 174.899802][ T6751] ext4_orphan_cleanup+0xc33/0x1470 [ 174.905071][ T6751] ? ext4_orphan_del+0xc90/0xc90 [ 174.910067][ T6751] ? ext4_register_li_request+0x182/0x930 [ 174.915819][ T6751] ? errseq_check_and_advance+0x66/0x120 [ 174.921459][ T6751] ext4_fill_super+0x5fb5/0x6870 [ 174.926418][ T6751] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 174.932679][ T6751] ? __might_sleep+0xe0/0xe0 [ 174.937295][ T6751] ? read_lock_is_recursive+0x20/0x20 [ 174.942700][ T6751] ? snprintf+0xe9/0x140 [ 174.946958][ T6751] ? down_read_killable+0x340/0x340 [ 174.952181][ T6751] ? setup_bdev_super+0x56b/0x660 [ 174.957222][ T6751] get_tree_bdev+0x3e5/0x520 [ 174.961820][ T6751] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 174.968163][ T6751] ? setup_bdev_super+0x660/0x660 [ 174.973217][ T6751] ? apparmor_capable+0x137/0x1a0 [ 174.978350][ T6751] ? bpf_lsm_capable+0x9/0x10 [ 174.983044][ T6751] ? security_capable+0x89/0xb0 [ 174.987917][ T6751] vfs_get_tree+0x8c/0x280 [ 174.992441][ T6751] do_new_mount+0x24a/0xa40 [ 174.996962][ T6751] __se_sys_mount+0x2e7/0x3d0 [ 175.001692][ T6751] ? __x64_sys_mount+0xc0/0xc0 [ 175.006514][ T6751] ? lockdep_hardirqs_on+0x98/0x150 [ 175.011847][ T6751] ? __x64_sys_mount+0x20/0xc0 [ 175.016625][ T6751] do_syscall_64+0x55/0xb0 [ 175.021063][ T6751] ? clear_bhb_loop+0x40/0x90 [ 175.025779][ T6751] ? clear_bhb_loop+0x40/0x90 [ 175.030470][ T6751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.036382][ T6751] RIP: 0033:0x7f855479f0ca [ 175.040839][ T6751] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.060464][ T6751] RSP: 002b:00007f855566fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 175.069001][ T6751] RAX: ffffffffffffffda RBX: 00007f855566fee0 RCX: 00007f855479f0ca [ 175.076983][ T6751] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f855566fea0 [ 175.084969][ T6751] RBP: 0000200000000180 R08: 00007f855566fee0 R09: 000000000000001f [ 175.092952][ T6751] R10: 000000000000001f R11: 0000000000000246 R12: 0000200000000000 [ 175.101195][ T6751] R13: 00007f855566fea0 R14: 000000000000047a R15: 00002000000001c0 [ 175.109183][ T6751] [ 175.144680][ T6751] ------------[ cut here ]------------ [ 175.150236][ T6751] EA inode 11 i_nlink=0 [ 175.162913][ T6751] WARNING: CPU: 0 PID: 6751 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x572/0x5d0 [ 175.177977][ T6751] Modules linked in: [ 175.182367][ T6751] CPU: 0 PID: 6751 Comm: syz.1.184 Not tainted syzkaller #0 [ 175.190060][ T6751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 175.200627][ T6751] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 175.207651][ T6751] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 81 f2 98 ff 49 8b 34 24 48 c7 c7 a0 da de 8a 44 89 fa e8 8e 53 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 48 5c 45 08 [ 175.227871][ T6751] RSP: 0018:ffffc90004f47220 EFLAGS: 00010246 [ 175.234594][ T6751] RAX: 05572512f631ca00 RBX: ffff88805fb58ea8 RCX: 0000000000080000 [ 175.242998][ T6751] RDX: ffffc9000da15000 RSI: 000000000007ffff RDI: 0000000000080000 [ 175.251005][ T6751] RBP: ffffc90004f47318 R08: ffffc90004f46e27 R09: 1ffff920009e8dc4 [ 175.259079][ T6751] R10: dffffc0000000000 R11: fffff520009e8dc5 R12: ffff88805fb58d00 [ 175.267237][ T6751] R13: ffffc90004f47280 R14: dffffc0000000000 R15: 0000000000000000 [ 175.275280][ T6751] FS: 00007f85556706c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 175.284960][ T6751] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.292630][ T6751] CR2: 0000200000001000 CR3: 000000007678d000 CR4: 00000000003526f0 [ 175.300655][ T6751] Call Trace: [ 175.304060][ T6751] [ 175.307036][ T6751] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 175.312778][ T6751] ? ext4_xattr_inode_iget+0x3f5/0x5d0 [ 175.318283][ T6751] ext4_xattr_set_entry+0xcc9/0x1ee0 [ 175.323650][ T6751] ext4_xattr_ibody_set+0x262/0x700 [ 175.328908][ T6751] ext4_expand_extra_isize_ea+0x134a/0x1e70 [ 175.334907][ T6751] __ext4_expand_extra_isize+0x306/0x400 [ 175.340616][ T6751] __ext4_mark_inode_dirty+0x458/0x6d0 [ 175.346176][ T6751] ext4_evict_inode+0x7dd/0xe70 [ 175.351272][ T6751] ? evict+0x482/0x8a0 [ 175.355416][ T6751] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 175.361367][ T6751] ? do_raw_spin_unlock+0x121/0x230 [ 175.366683][ T6751] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 175.372653][ T6751] evict+0x4b7/0x8a0 [ 175.376589][ T6751] ? __lock_acquire+0x7d80/0x7d80 [ 175.381917][ T6751] ? proc_nr_inodes+0x230/0x230 [ 175.386814][ T6751] ? do_raw_spin_unlock+0x121/0x230 [ 175.392097][ T6751] ? _raw_spin_unlock+0x28/0x40 [ 175.397005][ T6751] ext4_orphan_cleanup+0xc33/0x1470 [ 175.402267][ T6751] ? ext4_orphan_del+0xc90/0xc90 [ 175.407330][ T6751] ? ext4_register_li_request+0x182/0x930 [ 175.413111][ T6751] ? errseq_check_and_advance+0x66/0x120 [ 175.418796][ T6751] ext4_fill_super+0x5fb5/0x6870 [ 175.423819][ T6751] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 175.430094][ T6751] ? __might_sleep+0xe0/0xe0 [ 175.434953][ T6751] ? read_lock_is_recursive+0x20/0x20 [ 175.440364][ T6751] ? snprintf+0xe9/0x140 [ 175.444674][ T6751] ? down_read_killable+0x340/0x340 [ 175.449910][ T6751] ? setup_bdev_super+0x56b/0x660 [ 175.455098][ T6751] get_tree_bdev+0x3e5/0x520 [ 175.460442][ T6751] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 175.466885][ T6751] ? setup_bdev_super+0x660/0x660 [ 175.471996][ T6751] ? apparmor_capable+0x137/0x1a0 [ 175.477031][ T6751] ? bpf_lsm_capable+0x9/0x10 [ 175.482010][ T6751] ? security_capable+0x89/0xb0 [ 175.486893][ T6751] vfs_get_tree+0x8c/0x280 [ 175.491328][ T6751] do_new_mount+0x24a/0xa40 [ 175.495893][ T6751] __se_sys_mount+0x2e7/0x3d0 [ 175.500596][ T6751] ? __x64_sys_mount+0xc0/0xc0 [ 175.505475][ T6751] ? lockdep_hardirqs_on+0x98/0x150 [ 175.511042][ T6751] ? __x64_sys_mount+0x20/0xc0 [ 175.516028][ T6751] do_syscall_64+0x55/0xb0 [ 175.520472][ T6751] ? clear_bhb_loop+0x40/0x90 [ 175.525219][ T6751] ? clear_bhb_loop+0x40/0x90 [ 175.529911][ T6751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.535846][ T6751] RIP: 0033:0x7f855479f0ca [ 175.540280][ T6751] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.560864][ T6751] RSP: 002b:00007f855566fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 175.569503][ T6751] RAX: ffffffffffffffda RBX: 00007f855566fee0 RCX: 00007f855479f0ca [ 175.577557][ T6751] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f855566fea0 [ 175.585831][ T6751] RBP: 0000200000000180 R08: 00007f855566fee0 R09: 000000000000001f [ 175.593862][ T6751] R10: 000000000000001f R11: 0000000000000246 R12: 0000200000000000 [ 175.601929][ T6751] R13: 00007f855566fea0 R14: 000000000000047a R15: 00002000000001c0 [ 175.609928][ T6751] [ 175.613037][ T6751] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 175.620446][ T6751] CPU: 0 PID: 6751 Comm: syz.1.184 Not tainted syzkaller #0 [ 175.627752][ T6751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 175.638082][ T6751] Call Trace: [ 175.641425][ T6751] [ 175.644387][ T6751] dump_stack_lvl+0x18c/0x250 [ 175.649111][ T6751] ? show_regs_print_info+0x20/0x20 [ 175.654357][ T6751] ? load_image+0x420/0x420 [ 175.658875][ T6751] panic+0x2ca/0x720 [ 175.662795][ T6751] ? bpf_jit_dump+0xd0/0xd0 [ 175.667300][ T6751] __warn+0x2e0/0x470 [ 175.671295][ T6751] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 175.677391][ T6751] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 175.683400][ T6751] report_bug+0x2be/0x4f0 [ 175.687762][ T6751] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 175.693932][ T6751] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 175.699930][ T6751] ? ext4_xattr_inode_update_ref+0x574/0x5d0 [ 175.705935][ T6751] handle_bug+0xcf/0x120 [ 175.710213][ T6751] exc_invalid_op+0x1a/0x50 [ 175.714756][ T6751] asm_exc_invalid_op+0x1a/0x20 [ 175.719734][ T6751] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 175.726389][ T6751] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 81 f2 98 ff 49 8b 34 24 48 c7 c7 a0 da de 8a 44 89 fa e8 8e 53 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 48 5c 45 08 [ 175.746058][ T6751] RSP: 0018:ffffc90004f47220 EFLAGS: 00010246 [ 175.752160][ T6751] RAX: 05572512f631ca00 RBX: ffff88805fb58ea8 RCX: 0000000000080000 [ 175.760144][ T6751] RDX: ffffc9000da15000 RSI: 000000000007ffff RDI: 0000000000080000 [ 175.768137][ T6751] RBP: ffffc90004f47318 R08: ffffc90004f46e27 R09: 1ffff920009e8dc4 [ 175.776145][ T6751] R10: dffffc0000000000 R11: fffff520009e8dc5 R12: ffff88805fb58d00 [ 175.784214][ T6751] R13: ffffc90004f47280 R14: dffffc0000000000 R15: 0000000000000000 [ 175.792299][ T6751] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 175.797957][ T6751] ? ext4_xattr_inode_iget+0x3f5/0x5d0 [ 175.803467][ T6751] ext4_xattr_set_entry+0xcc9/0x1ee0 [ 175.808795][ T6751] ext4_xattr_ibody_set+0x262/0x700 [ 175.814275][ T6751] ext4_expand_extra_isize_ea+0x134a/0x1e70 [ 175.821453][ T6751] __ext4_expand_extra_isize+0x306/0x400 [ 175.827129][ T6751] __ext4_mark_inode_dirty+0x458/0x6d0 [ 175.832712][ T6751] ext4_evict_inode+0x7dd/0xe70 [ 175.837585][ T6751] ? evict+0x482/0x8a0 [ 175.841668][ T6751] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 175.847573][ T6751] ? do_raw_spin_unlock+0x121/0x230 [ 175.852788][ T6751] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 175.858690][ T6751] evict+0x4b7/0x8a0 [ 175.862596][ T6751] ? __lock_acquire+0x7d80/0x7d80 [ 175.867632][ T6751] ? proc_nr_inodes+0x230/0x230 [ 175.872492][ T6751] ? do_raw_spin_unlock+0x121/0x230 [ 175.877707][ T6751] ? _raw_spin_unlock+0x28/0x40 [ 175.882578][ T6751] ext4_orphan_cleanup+0xc33/0x1470 [ 175.887790][ T6751] ? ext4_orphan_del+0xc90/0xc90 [ 175.892735][ T6751] ? ext4_register_li_request+0x182/0x930 [ 175.898485][ T6751] ? errseq_check_and_advance+0x66/0x120 [ 175.904259][ T6751] ext4_fill_super+0x5fb5/0x6870 [ 175.909243][ T6751] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 175.915509][ T6751] ? __might_sleep+0xe0/0xe0 [ 175.920133][ T6751] ? read_lock_is_recursive+0x20/0x20 [ 175.925786][ T6751] ? snprintf+0xe9/0x140 [ 175.930104][ T6751] ? down_read_killable+0x340/0x340 [ 175.936135][ T6751] ? setup_bdev_super+0x56b/0x660 [ 175.941229][ T6751] get_tree_bdev+0x3e5/0x520 [ 175.945839][ T6751] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 175.952193][ T6751] ? setup_bdev_super+0x660/0x660 [ 175.957443][ T6751] ? apparmor_capable+0x137/0x1a0 [ 175.962608][ T6751] ? bpf_lsm_capable+0x9/0x10 [ 175.967312][ T6751] ? security_capable+0x89/0xb0 [ 175.972190][ T6751] vfs_get_tree+0x8c/0x280 [ 175.976881][ T6751] do_new_mount+0x24a/0xa40 [ 175.981493][ T6751] __se_sys_mount+0x2e7/0x3d0 [ 175.986472][ T6751] ? __x64_sys_mount+0xc0/0xc0 [ 175.991269][ T6751] ? lockdep_hardirqs_on+0x98/0x150 [ 175.996498][ T6751] ? __x64_sys_mount+0x20/0xc0 [ 176.001286][ T6751] do_syscall_64+0x55/0xb0 [ 176.005725][ T6751] ? clear_bhb_loop+0x40/0x90 [ 176.010410][ T6751] ? clear_bhb_loop+0x40/0x90 [ 176.015639][ T6751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.021692][ T6751] RIP: 0033:0x7f855479f0ca [ 176.026131][ T6751] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.045869][ T6751] RSP: 002b:00007f855566fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 176.054350][ T6751] RAX: ffffffffffffffda RBX: 00007f855566fee0 RCX: 00007f855479f0ca [ 176.062444][ T6751] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f855566fea0 [ 176.070692][ T6751] RBP: 0000200000000180 R08: 00007f855566fee0 R09: 000000000000001f [ 176.078800][ T6751] R10: 000000000000001f R11: 0000000000000246 R12: 0000200000000000 [ 176.086813][ T6751] R13: 00007f855566fea0 R14: 000000000000047a R15: 00002000000001c0 [ 176.094912][ T6751] [ 176.098228][ T6751] Kernel Offset: disabled [ 176.102597][ T6751] Rebooting in 86400 seconds..