last executing test programs: 14m50.032477592s ago: executing program 1 (id=122): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x2, 0x6e5, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x14000, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffffff) 14m49.591878217s ago: executing program 1 (id=125): r0 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x175) poll(&(0x7f0000000100)=[{r0, 0xa}], 0x1, 0xffffff81) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000000)={0x3, {0x3a, 0xfffffffffffffdff, 0xab3d, 0x7, 0xfffffffffffffffc}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ftruncate(r0, 0xffff) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) 14m48.541344368s ago: executing program 1 (id=136): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20003}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) 14m45.647308169s ago: executing program 1 (id=148): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@inlinecrypt}, {@orlov}, {@user_xattr}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") symlinkat(0x0, 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf5, 0x20000}, 0x20) 14m44.311820473s ago: executing program 1 (id=156): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 14m43.514048512s ago: executing program 1 (id=160): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 14m43.281796055s ago: executing program 32 (id=160): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 14m14.248828817s ago: executing program 0 (id=318): r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) r2 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x712c48a0bda4084) shmctl$IPC_RMID(r2, 0x0) shmctl$SHM_STAT_ANY(r2, 0xf, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r0, 0x2, 0x20, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000280), 0x8) 14m14.081180059s ago: executing program 0 (id=319): socket(0x2, 0x2, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24048814) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa002, &(0x7f0000000140)=0x20000, 0x61, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 14m12.277542599s ago: executing program 0 (id=322): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0xfffffffffffff001, 0x0, [0x8, 0x3, 0xe, 0x200, 0x2], [0x7fffffff, 0x80000004, 0xf, 0x3, 0x5, 0x8, 0xffffffffffffffff, 0xb, 0xa51c, 0xbcd, 0x5, 0x5, 0x24c, 0xa33, 0x1, 0x6, 0x10000, 0x2, 0x10, 0x5, 0x3, 0x8, 0x7c21804a, 0x8, 0x7fff, 0xa, 0x1, 0x1, 0x9, 0xe, 0x2, 0xde1d, 0x7, 0x2, 0x3, 0xffffffffffff8000, 0x6, 0x12, 0x0, 0x0, 0x7f, 0x2, 0x5ba9, 0x8, 0x2, 0x7, 0x8, 0xfffffffffffffb61, 0xffffffffffffffff, 0x100000000, 0x8001, 0x1, 0x3, 0x5, 0xffff, 0x3, 0x101, 0x0, 0x67c, 0x8000000000000000, 0x1, 0x9, 0x4, 0x0, 0x8000000000000000, 0x0, 0x1, 0x5, 0x5, 0x100, 0x2da74e41, 0x1, 0x10, 0x80000000080, 0x75, 0x1, 0x2, 0x2, 0x8, 0xc79, 0x8000, 0x3, 0x7, 0x7ff, 0x6, 0x7686, 0x1ff, 0x7, 0xe648, 0x2, 0x2, 0xdfb3, 0x3, 0x2, 0xfffffffffffffffd, 0x4, 0x7, 0x13, 0x80, 0x5, 0x8001, 0x0, 0x0, 0x80, 0x7f, 0x40003, 0xb4000000, 0x0, 0x6, 0x80, 0x5, 0x662, 0x7, 0x9, 0xca, 0x8, 0x7, 0xe7, 0xfffffffffffffffe, 0xfffffffffffff36f, 0x4]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14m11.733041254s ago: executing program 0 (id=326): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") syz_mount_image$fuse(0x0, 0x0, 0x10104a8, 0x0, 0x81, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 14m10.102110932s ago: executing program 0 (id=331): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r0 = epoll_create1(0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 14m3.162573527s ago: executing program 0 (id=356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x4d89c374, 0x1, 0x8}, 0x1000b, 0xfffffffe, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x5, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 14m2.90591575s ago: executing program 33 (id=356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x4d89c374, 0x1, 0x8}, 0x1000b, 0xfffffffe, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x5, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 24.670019694s ago: executing program 5 (id=2772): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$ITER_CREATE(0x1d, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 20.482340329s ago: executing program 5 (id=2777): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x4734, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 14.907667819s ago: executing program 5 (id=2787): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard_async}, {@metadata_ratio}, {@nodatasum}]}, 0xfc, 0x559e, &(0x7f0000005680)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(0x0, 0x84242, 0x1df2a23c5997fa7f) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x8, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x1, 0x1, {0x6, 0xff, 0x5, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB=',volume=0000000000000006,\x00\x00\x00\x00\x00'], 0x1, 0x489, &(0x7f0000000580)="$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") truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) remap_file_pages(&(0x7f00007fa000/0x4000)=nil, 0x4000, 0x300000a, 0x800, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 14.138956388s ago: executing program 6 (id=2790): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) clock_getres(0xa, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'lblcr\x00', 0x28, 0x5, 0x72}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 13.628283903s ago: executing program 3 (id=2793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x891b, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x19}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) mmap(&(0x7f0000aa0000/0x1000)=nil, 0x1000, 0x2000005, 0x40010, 0xffffffffffffffff, 0xf3e7a000) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 12.415967486s ago: executing program 6 (id=2794): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) fchdir(r3) bpf$PROG_LOAD(0x5, &(0x7f0000003fc0)={0x17, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f00000006c0)='syzkaller\x00', 0x3, 0x34, &(0x7f0000000700)=""/52, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x6, 0x9, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003f80)=[0xffffffffffffffff, r3], 0x0, 0x10, 0x4}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x80) openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x2b00, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) 11.905823792s ago: executing program 3 (id=2796): pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r3, &(0x7f0000000240)=""/157, 0x9d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 10.848507583s ago: executing program 6 (id=2798): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x4734, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 10.838733403s ago: executing program 3 (id=2799): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x8000, 0x5) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x8800000) rmdir(&(0x7f0000000040)='./file0\x00') 8.225048811s ago: executing program 3 (id=2800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4080) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x10) r5 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x24048015) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@dyn}, {}]}) 8.194833482s ago: executing program 6 (id=2801): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto(r0, 0x0, 0x0, 0x4084080, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x2004d890) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x7, 0xc, 0xffffffff, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0x7, 0x7, 0xf8f, "a04517f70c38ca"}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0x8cd, 0x3, 0xfffffffffffffff9}) r3 = dup(r2) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r4, r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x2710, 0x0, 0xdddd0000, 0x1000, &(0x7f00003cd000/0x1000)=nil}) 6.886587286s ago: executing program 5 (id=2805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r3) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r5 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 6.376059101s ago: executing program 3 (id=2806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_setup(0x2688, &(0x7f0000000300)={0x0, 0x600, 0x400, 0x8001002, 0x3d7}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = accept(r3, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r5}, 0x20) 6.318017612s ago: executing program 2 (id=2807): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$char_usb(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e17fb55ae6f1221bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1d48f913f8b22a30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec9dd110f31ba5ae65e31f00e641832d29ed658b91f349b801b8b0d2de59d006ce210a0351b6bbd06c77c9aa67b5d7287fc1bfa1d0bf035ccdd4b20d7f95b5c77afde046b146ce8b395126fceb6cca68972ac02bc7d9b0aa6453cbca85e30a02db8f48b9eb10526d00f4e90971d6c844fb8b2fb70ec826465726fb78cc47db98cf04ba351e13fcd9ab1c4c2a18f2fb931951347528d02aa982f43adc7275cf628880d83ec1ec3f1f408d21a04e388b2460a6f33071ba190c3538bcc29d16bb0119570263af15bd2ae5f09c5d317", 0x1bb, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 6.212910343s ago: executing program 4 (id=2808): mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x420, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000300)={0x0, 0x9, 0x3}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r3, 0x0, 0x0) 5.148193174s ago: executing program 4 (id=2809): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x4, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x3e3, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x100, 0x312, 0x78, 0xe43, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0xb, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x9, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000000400)=""/4096, 0x1000) getdents64(r1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x1802, 0x40) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.993932526s ago: executing program 2 (id=2810): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) prlimit64(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x8007, &(0x7f0000000280)=ANY=[], 0x3, 0x59b, &(0x7f0000001080)="$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") fcntl$notify(0xffffffffffffffff, 0x402, 0x91ea6c1af182532) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 4.956845407s ago: executing program 3 (id=2811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$poke(0x4, 0x0, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009965, r4, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x68042, 0xe) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r6, 0x115, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 3.962286677s ago: executing program 2 (id=2812): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x4734, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 3.833971289s ago: executing program 4 (id=2813): unshare(0x44050400) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x109c02, 0x0) r3 = epoll_create1(0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x2001) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000020340)={0xb0000010}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffffffffffeffff) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) 2.660612021s ago: executing program 2 (id=2814): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 2.646458971s ago: executing program 5 (id=2815): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r0, 0xf, &(0x7f00000001c0)={0x0, 0x7fffffffffffffff}, &(0x7f0000000280)) r3 = socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_pidfd_open(r0, 0x0) process_mrelease(r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 2.538112413s ago: executing program 2 (id=2816): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union]}}, 0x0, 0x4e}, 0x28) 2.537927342s ago: executing program 6 (id=2817): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) sendmsg$IEEE802154_DISASSOCIATE_REQ(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x840) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x8001) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 2.455144134s ago: executing program 4 (id=2818): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) capget(0x0, 0x0) capget(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000001340)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x80001001, @remote, 0x6}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) sched_setaffinity(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2182, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) 2.357228435s ago: executing program 2 (id=2819): syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040f003040040000102030109021b0001040000000904000002070101"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xf2a9a9ee94caf607, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x85, &(0x7f00000001c0)="259a53f271a76d2686dd4ca80000", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001}, 0x23) socket(0x11, 0x3, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000100)=0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x4e8001, 0x84) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0xb56e2e3f2d9728b3, 0x8, 0x8001, 0x0, 0x9, 0x100008003, 0xfffffe0000000001, 0xfa11, 0x80000000}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x2, 0x6, 0x57c, 0x440, 0x190, 0x0, 0x0, 0x280, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@mcast1, @private2, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x130, 0x154, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], [], 0x0, 0x886}}]}, @HL={0x24}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@private=0xa010102, 0x1, 0x10, 0xfffd}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}, {0xff}}, 0x0, 0xa4, 0xc8, 0x48000000}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@TOS={0x24, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5d8) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000004c0)={&(0x7f0000000480)=[{0x5279, 0x200, 0x0, 0x0}, {0x5, 0x810, 0x0, 0x0}], 0x2}) 1.113731597s ago: executing program 6 (id=2820): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 1.015735149s ago: executing program 4 (id=2821): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) clock_getres(0xa, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'lblcr\x00', 0x28, 0x5, 0x72}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 342.68µs ago: executing program 5 (id=2822): syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) getpgrp(r2) fcntl$lock(r4, 0x24, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1, 0x1, 0xe12, 0x40000000000006}) 0s ago: executing program 4 (id=2823): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc1400", 0x8, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0xd22d5000) preadv(r5, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtaction={0x48, 0x30, 0x709, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): nvalid rate [ 264.434673][ T7486] Buffer I/O error on dev loop6, logical block 150, async page read [ 264.549002][ T7486] Buffer I/O error on dev loop6, logical block 151, async page read [ 264.590352][ T7486] Buffer I/O error on dev loop6, logical block 152, async page read [ 264.612119][ T7486] Buffer I/O error on dev loop6, logical block 145, async page read [ 264.674038][ T7486] Buffer I/O error on dev loop6, logical block 146, async page read [ 265.488194][ T7545] netlink: 'syz.4.890': attribute type 4 has an invalid length. [ 265.647196][ T7545] netlink: 'syz.4.890': attribute type 4 has an invalid length. [ 267.389970][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.898'. [ 267.524021][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.531846][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.847294][ T7584] loop5: detected capacity change from 0 to 128 [ 269.090105][ T7584] handle_bad_sector: 2559 callbacks suppressed [ 269.090128][ T7584] attempt to access beyond end of device [ 269.090128][ T7584] loop5: rw=0, want=150, limit=128 [ 269.138222][ T7584] attempt to access beyond end of device [ 269.138222][ T7584] loop5: rw=0, want=151, limit=128 [ 269.151843][ T7584] attempt to access beyond end of device [ 269.151843][ T7584] loop5: rw=0, want=152, limit=128 [ 269.165377][ T7584] attempt to access beyond end of device [ 269.165377][ T7584] loop5: rw=0, want=153, limit=128 [ 269.204895][ T7584] attempt to access beyond end of device [ 269.204895][ T7584] loop5: rw=0, want=146, limit=128 [ 269.218422][ T7584] attempt to access beyond end of device [ 269.218422][ T7584] loop5: rw=0, want=147, limit=128 [ 269.231559][ T7584] attempt to access beyond end of device [ 269.231559][ T7584] loop5: rw=0, want=148, limit=128 [ 269.245655][ T7584] attempt to access beyond end of device [ 269.245655][ T7584] loop5: rw=0, want=149, limit=128 [ 269.259483][ T7584] attempt to access beyond end of device [ 269.259483][ T7584] loop5: rw=0, want=150, limit=128 [ 269.273294][ T7584] attempt to access beyond end of device [ 269.273294][ T7584] loop5: rw=0, want=151, limit=128 [ 270.492612][ T7584] buffer_io_error: 3162 callbacks suppressed [ 270.492632][ T7584] Buffer I/O error on dev loop5, logical block 149, async page read [ 270.588589][ T7616] device dummy0 entered promiscuous mode [ 270.640810][ T7616] device macvlan2 entered promiscuous mode [ 270.667491][ T7584] Buffer I/O error on dev loop5, logical block 150, async page read [ 270.697429][ T4190] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 270.710262][ T4190] CPU: 1 PID: 4190 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 270.719325][ T4190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 270.731706][ T4190] Workqueue: hci3 hci_rx_work [ 270.737779][ T4190] Call Trace: [ 270.741820][ T4190] [ 270.745555][ T4190] dump_stack_lvl+0x188/0x250 [ 270.751169][ T4190] ? show_regs_print_info+0x20/0x20 [ 270.757522][ T4190] ? load_image+0x400/0x400 [ 270.763049][ T4190] sysfs_create_dir_ns+0x26a/0x290 [ 270.769493][ T4190] ? sysfs_warn_dup+0xa0/0xa0 [ 270.775308][ T4190] ? process_one_work+0x85f/0x1010 [ 270.781453][ T4190] ? do_raw_spin_unlock+0x11d/0x230 [ 270.787707][ T4190] kobject_add_internal+0x6e0/0xd90 [ 270.794051][ T4190] kobject_add+0x160/0x230 [ 270.799377][ T4190] ? kobject_init+0x1d0/0x1d0 [ 270.804997][ T4190] ? klist_children_get+0x50/0x50 [ 270.811122][ T4190] ? get_device_parent+0x121/0x3f0 [ 270.817255][ T4190] device_add+0x483/0xfb0 [ 270.822567][ T4190] hci_conn_add_sysfs+0xd1/0x1e0 [ 270.828664][ T4190] le_conn_complete_evt+0xc48/0x15c0 [ 270.835329][ T4190] ? cs_le_create_conn+0x5e0/0x5e0 [ 270.841586][ T4190] ? __mutex_trylock_common+0x155/0x260 [ 270.848254][ T4190] hci_le_meta_evt+0x285/0x3c90 [ 270.854094][ T4190] ? hci_event_packet+0x37b/0x1370 [ 270.860563][ T4190] ? __lock_acquire+0x7d10/0x7d10 [ 270.866722][ T4190] ? hci_remote_host_features_evt+0x280/0x280 [ 270.874005][ T4190] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 270.880994][ T4190] ? mark_lock+0x94/0x320 [ 270.886206][ T4190] ? mutex_unlock+0x10/0x10 [ 270.891729][ T4190] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 270.899030][ T4190] ? lock_chain_count+0x20/0x20 [ 270.904872][ T4190] ? __rwlock_init+0x140/0x140 [ 270.910692][ T4190] hci_event_packet+0xe48/0x1370 [ 270.916621][ T4190] ? lockdep_hardirqs_on+0x94/0x140 [ 270.922978][ T4190] ? rcu_lock_release+0x20/0x20 [ 270.929555][ T4190] ? hci_send_to_monitor+0x9c/0x4a0 [ 270.935797][ T4190] hci_rx_work+0x255/0xa10 [ 270.941136][ T4190] process_one_work+0x85f/0x1010 [ 270.947468][ T4190] ? worker_detach_from_pool+0x240/0x240 [ 270.954579][ T4190] ? lockdep_hardirqs_off+0x70/0x100 [ 270.961761][ T4190] ? _raw_spin_lock_irq+0xb7/0xf0 [ 270.969240][ T4190] ? _raw_spin_lock_irqsave+0x100/0x100 [ 270.976126][ T4190] ? wq_worker_running+0x97/0x170 [ 270.982330][ T4190] worker_thread+0xaa6/0x1290 [ 270.987900][ T6028] Bluetooth: hci4: command 0x0406 tx timeout [ 270.988200][ T4190] ? lockdep_hardirqs_on+0x94/0x140 [ 271.002167][ T4190] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 271.009703][ T4190] kthread+0x436/0x520 [ 271.014689][ T4190] ? rcu_lock_release+0x20/0x20 [ 271.020678][ T4190] ? kthread_blkcg+0xd0/0xd0 [ 271.026541][ T4190] ret_from_fork+0x1f/0x30 [ 271.030265][ T7584] Buffer I/O error on dev loop5, logical block 151, async page read [ 271.031963][ T4190] [ 271.034370][ T4190] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 271.065090][ T4190] Bluetooth: hci3: failed to register connection device [ 271.075298][ T7584] Buffer I/O error on dev loop5, logical block 152, async page read [ 271.398241][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 271.842584][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 272.135210][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 272.146744][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 273.999760][ T4357] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 274.400606][ T4357] usb 6-1: Using ep0 maxpacket: 32 [ 274.833978][ T4357] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.848039][ T7681] xt_TCPMSS: Only works on TCP SYN packets [ 275.535647][ T4357] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.546771][ T4357] usb 6-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 275.559864][ T4357] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.593539][ T4357] usb 6-1: config 0 descriptor?? [ 275.605659][ T7685] netlink: 'syz.4.935': attribute type 1 has an invalid length. [ 275.640416][ T7685] netlink: 'syz.4.935': attribute type 4 has an invalid length. [ 275.667537][ T7685] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.935'. [ 275.709340][ T7692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.883539][ T4677] usb 6-1: USB disconnect, device number 5 [ 276.894383][ T7704] netlink: 'syz.3.942': attribute type 12 has an invalid length. [ 277.116710][ T7705] device bond1 left promiscuous mode [ 278.816182][ T7705] device bridge2 left promiscuous mode [ 278.854563][ T7705] device dummy0 left promiscuous mode [ 278.870537][ T7705] device macvlan2 left promiscuous mode [ 278.975198][ T7721] netlink: 16 bytes leftover after parsing attributes in process `syz.4.945'. [ 280.816438][ T7746] netlink: 2 bytes leftover after parsing attributes in process `syz.4.950'. [ 280.828007][ T7746] netlink: 2 bytes leftover after parsing attributes in process `syz.4.950'. [ 280.839348][ T7746] netlink: 2 bytes leftover after parsing attributes in process `syz.4.950'. [ 280.850654][ T7746] netlink: 2 bytes leftover after parsing attributes in process `syz.4.950'. [ 280.862027][ T7746] netlink: 2 bytes leftover after parsing attributes in process `syz.4.950'. [ 280.873576][ T7746] netlink: 2 bytes leftover after parsing attributes in process `syz.4.950'. [ 280.884975][ T7746] netlink: 2 bytes leftover after parsing attributes in process `syz.4.950'. [ 280.896786][ T7746] netlink: 2 bytes leftover after parsing attributes in process `syz.4.950'. [ 281.724337][ T7749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.735638][ T7772] xt_CONNSECMARK: invalid mode: 66 [ 286.212976][ T7804] set match dimension is over the limit! [ 286.883948][ T7810] xt_connbytes: Forcing CT accounting to be enabled [ 286.937363][ T7810] xt_CT: No such helper "netbios-ns" [ 287.315313][ T7833] __nla_validate_parse: 2 callbacks suppressed [ 287.315330][ T7833] netlink: 144 bytes leftover after parsing attributes in process `syz.4.979'. [ 287.390073][ T7834] device ip6gre1 entered promiscuous mode [ 288.292063][ T7842] device syzkaller0 entered promiscuous mode [ 288.377394][ T26] audit: type=1326 audit(1777898179.669:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.2.984" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 288.869107][ T26] audit: type=1326 audit(1777898179.697:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.2.984" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 288.944435][ T26] audit: type=1326 audit(1777898179.697:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.2.984" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 289.019391][ T26] audit: type=1326 audit(1777898180.066:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.2.984" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 289.066082][ T26] audit: type=1326 audit(1777898180.066:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.2.984" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 289.096600][ T26] audit: type=1326 audit(1777898180.112:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.2.984" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4e27e0160e code=0x7ffc0000 [ 289.131760][ T26] audit: type=1326 audit(1777898180.269:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.2.984" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 289.547865][ T7883] netlink: 'syz.5.996': attribute type 12 has an invalid length. [ 291.901210][ T7917] set match dimension is over the limit! [ 295.894278][ T7940] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1015'. [ 296.632661][ T7957] set match dimension is over the limit! [ 296.952802][ T7960] tipc: Started in network mode [ 296.970521][ T7960] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 296.992712][ T7960] tipc: Enabling of bearer rejected, failed to enable media [ 298.499846][ T7977] IPVS: Error joining to the multicast group [ 300.005319][ T7994] fuse: Bad value for 'fd' [ 304.374455][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1053'. [ 304.396259][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1053'. [ 307.705619][ T8120] netlink: 'syz.6.1069': attribute type 14 has an invalid length. [ 307.711190][ T8124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.815748][ T8124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.004748][ T8124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.109370][ T8137] openvswitch: netlink: Key 29 has unexpected len 2 expected 0 [ 309.338340][ T8157] ODEBUG: Out of memory. ODEBUG disabled [ 309.970080][ T8178] syz.6.1084 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 310.281645][ T8184] loop5: detected capacity change from 0 to 1764 [ 311.310463][ T8192] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 311.412451][ T8196] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1089'. [ 311.845997][ T8211] tipc: Cannot configure node identity twice [ 311.888314][ T4361] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 313.276042][ T4361] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 313.292221][ T4361] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.307543][ T4361] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 313.375891][ T4361] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.824846][ T4361] usb 6-1: config 0 descriptor?? [ 316.000759][ T4361] konepure 0003:1E7D:2DBE.0004: unknown main item tag 0x4 [ 316.018514][ T4361] konepure 0003:1E7D:2DBE.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.5-1/input0 [ 316.078631][ T8246] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1104'. [ 316.087453][ T6028] usb 6-1: USB disconnect, device number 6 [ 318.462393][ T8257] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 318.500971][ T8257] rdma_rxe: ignoring netdev event = 23 for bond_slave_1 [ 318.515756][ T8257] rdma_rxe: bond_slave_1 changed mtu to 1536 [ 318.621410][ T8273] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 318.878128][ T8281] netlink: 'syz.4.1112': attribute type 3 has an invalid length. [ 323.019035][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.088042][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.871147][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.891256][ T8336] siw: device registration error -23 [ 326.845682][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.862040][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.912071][ T8345] Set syz1 is full, maxelem 14 reached [ 326.946242][ T8301] syz.5.1118 (8301): drop_caches: 2 [ 327.027219][ T8347] device syzkaller0 entered promiscuous mode [ 327.188219][ T8357] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000 [ 327.668568][ T8376] netlink: 'syz.6.1145': attribute type 1 has an invalid length. [ 327.827502][ T8378] device gretap1 entered promiscuous mode [ 327.841730][ T8383] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 327.841730][ T8383] The task syz.4.1146 (8383) triggered the difference, watch for misbehavior. [ 327.881279][ T8378] bond1: (slave gretap1): making interface the new active one [ 327.901030][ T8378] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 327.953734][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.876662][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.979673][ T4200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.990529][ T4212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.045545][ T8402] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 332.135965][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.919031][ T8431] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 333.238847][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.451591][ T8454] infiniband syz2: set active [ 333.460262][ T8454] infiniband syz2: set active [ 334.138640][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 334.200923][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.261505][ T8460] loop5: detected capacity change from 0 to 128 [ 334.422374][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.010295][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.025342][ T8460] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 335.191443][ T8460] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 335.204795][ T8460] ext2 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.826984][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.873205][ T8494] mmap: syz.6.1185 (8494) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 337.233439][ T8504] Invalid option length (62363) for dns_resolver key [ 337.921318][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.490153][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.521366][ T8513] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1188'. [ 338.549301][ T8512] xt_l2tp: missing protocol rule (udp|l2tpip) [ 338.566976][ T8516] Set syz1 is full, maxelem 14 reached [ 339.439020][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.599778][ T8532] netlink: 'syz.5.1196': attribute type 12 has an invalid length. [ 339.643734][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1196'. [ 339.670501][ T8532] bond0: option primary_reselect: invalid value (191) [ 339.951050][ T8543] 9pnet_virtio: no channels available for device syz [ 341.225987][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.353238][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.428493][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.086618][ T26] audit: type=1326 audit(1777898231.054:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8576 comm="syz.2.1211" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 344.224107][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.350674][ T26] audit: type=1326 audit(1777898231.110:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8576 comm="syz.2.1211" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 344.431108][ T8587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1212'. [ 344.445163][ T26] audit: type=1326 audit(1777898231.110:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8576 comm="syz.2.1211" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 344.463485][ T8580] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1212'. [ 344.476855][ T26] audit: type=1326 audit(1777898231.110:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8576 comm="syz.2.1211" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 344.806415][ T26] audit: type=1326 audit(1777898231.110:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8576 comm="syz.2.1211" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 345.183276][ T26] audit: type=1326 audit(1777898231.110:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8576 comm="syz.2.1211" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 345.331408][ T26] audit: type=1326 audit(1777898231.119:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8576 comm="syz.2.1211" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 345.396415][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.408738][ T26] audit: type=1326 audit(1777898231.119:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8576 comm="syz.2.1211" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 345.621056][ T26] audit: type=1326 audit(1777898231.119:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8576 comm="syz.2.1211" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 346.065610][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.092109][ T26] audit: type=1326 audit(1777898231.119:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8576 comm="syz.2.1211" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 348.343397][ T8614] xt_CT: No such helper "snmp_trap" [ 348.862522][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.603505][ C0] hrtimer: interrupt took 37654 ns [ 349.836324][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.972349][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.994556][ T8636] 9pnet_virtio: no channels available for device syz [ 350.374917][ T8656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.388032][ T8657] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 350.441861][ T8656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.475874][ T8656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.522685][ T8656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.678272][ T8656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.400968][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.612281][ T8675] netlink: 'syz.6.1238': attribute type 1 has an invalid length. [ 351.641823][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1235'. [ 351.704229][ T8662] netlink: 'syz.3.1235': attribute type 8 has an invalid length. [ 351.744938][ T8662] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.756309][ T8662] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.767386][ T8662] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.777984][ T8662] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.801952][ T8675] device bond2 entered promiscuous mode [ 351.859354][ T8675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 351.946482][ T8680] device bridge2 entered promiscuous mode [ 351.988202][ T8680] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 352.028013][ T4403] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 353.384315][ T8681] device bridge3 entered promiscuous mode [ 353.408960][ T8681] bond2: (slave bridge3): Enslaving as a backup interface with a down link [ 353.427080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 353.687253][ T8681] device bridge4 entered promiscuous mode [ 353.711838][ T8681] bond2: (slave bridge4): Enslaving as a backup interface with a down link [ 355.242679][ T4357] net_ratelimit: 7 callbacks suppressed [ 355.242697][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.963867][ T8731] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1254'. [ 356.523124][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.443025][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.526084][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.555603][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.103753][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.213996][ T4677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.197231][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.329990][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.236094][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.610203][ T4677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.448749][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.589381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.738291][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.879237][ T26] kauditd_printk_skb: 51 callbacks suppressed [ 366.879251][ T26] audit: type=1800 audit(1777898252.092:284): pid=8841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1288" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 366.937737][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1289'. [ 366.998422][ T8849] device syzkaller0 entered promiscuous mode [ 367.327420][ T8863] bridge0: port 3(vlan2) entered blocking state [ 367.371338][ T8863] bridge0: port 3(vlan2) entered disabled state [ 367.391266][ T8863] device vlan2 entered promiscuous mode [ 367.394487][ T8871] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1295'. [ 367.467379][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1295'. [ 368.364732][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.613360][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.136277][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.951974][ T8889] device syzkaller0 entered promiscuous mode [ 370.104164][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.291712][ T8893] rdma_rxe: ignoring netdev event = 8 for bond_slave_1 [ 370.317377][ T8893] infiniband syz2: set active [ 370.342691][ T8893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.363239][ T8893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.637476][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.428623][ T4677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.817452][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.143705][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.162288][ T8932] netlink: 'syz.2.1314': attribute type 10 has an invalid length. [ 374.942602][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.188723][ T8953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1320'. [ 375.289309][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.404832][ T8953] bridge2: port 1(erspan0) entered blocking state [ 375.413515][ T8953] bridge2: port 1(erspan0) entered disabled state [ 376.487313][ T4677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.579535][ T8975] netlink: 'syz.4.1328': attribute type 10 has an invalid length. [ 376.623508][ T8975] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 376.651243][ T8976] netlink: 'syz.5.1327': attribute type 33 has an invalid length. [ 376.679034][ T8976] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1327'. [ 376.729404][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.970754][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.149586][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.797761][ T4677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.616815][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.848326][ T9050] syz.6.1351[9050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 380.848538][ T9050] syz.6.1351[9050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.204159][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.706795][ T4677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.754815][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.304101][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.605521][ T9123] loop5: detected capacity change from 0 to 256 [ 386.930368][ T26] audit: type=1326 audit(1777898270.435:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.2.1373" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 386.971372][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.018644][ T26] audit: type=1326 audit(1777898270.444:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.2.1373" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 387.027656][ T9123] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 387.377936][ T26] audit: type=1326 audit(1777898270.444:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.2.1373" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 387.609171][ T26] audit: type=1326 audit(1777898270.444:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.2.1373" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 389.237740][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.369714][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.520275][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.003567][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.437474][ T9182] netlink: 'syz.2.1387': attribute type 10 has an invalid length. [ 392.970439][ T6028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.987357][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.019777][ T9185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.035888][ T9185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.048039][ T9185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.060828][ T9185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.531133][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.531279][ T4357] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 395.459219][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.544890][ T4357] usb 6-1: device descriptor read/64, error -71 [ 395.610876][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.635938][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.679073][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.826817][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.865115][ T9235] rdma_rxe: ignoring netdev event = 8 for ipvlan0 [ 397.047676][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.128858][ T9235] rdma_rxe: ignoring netdev event = 8 for ipvlan0 [ 397.290697][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.300846][ T4357] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 398.221637][ T9263] 9pnet: p9_fd_create_unix (9263): address too long: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 398.872220][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.010277][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.694835][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 400.703096][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 400.866350][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.949395][ T4403] bond2: (slave bridge2): link status up again after 0 ms [ 401.041335][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.097270][ T9301] tipc: Failed to remove unknown binding: 66,0,0/0:2538814922/2538814923 [ 401.115696][ T4403] bond2: (slave bridge2): failed to get link speed/duplex [ 401.138000][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.234692][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 401.399512][ T9301] tipc: Failed to remove unknown binding: 66,0,0/0:2538814922/2538814923 [ 401.415201][ T4403] bond2: (slave bridge2): failed to get link speed/duplex [ 401.592453][ T4403] bond2: (slave bridge2): failed to get link speed/duplex [ 401.712605][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 401.993289][ T4403] bond2: (slave bridge2): failed to get link speed/duplex [ 402.177963][ T4403] bond2: (slave bridge2): failed to get link speed/duplex [ 402.392130][ T9321] batman_adv: batadv0: Adding interface: dummy0 [ 402.428052][ T9321] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.627494][ T9321] batman_adv: batadv0: Interface activated: dummy0 [ 402.676162][ T4318] bond2: (slave bridge2): failed to get link speed/duplex [ 403.709690][ T9318] loop5: detected capacity change from 0 to 262144 [ 404.417778][ T9318] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop5 scanned by syz.5.1436 (9318) [ 404.463521][ T9318] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 404.478508][ T9318] BTRFS info (device loop5): using free space tree [ 404.486577][ T9318] BTRFS info (device loop5): has skinny extents [ 404.494307][ T9318] BTRFS info (device loop5): flagging fs with big metadata feature [ 406.551197][ T4315] net_ratelimit: 37 callbacks suppressed [ 406.551217][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 406.807721][ T9374] syz.2.1446 (9374) used greatest stack depth: 17464 bytes left [ 408.301515][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 408.344733][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.453950][ T9] bond2: (slave bridge2): failed to get link speed/duplex [ 408.619556][ T4318] bond2: (slave bridge2): failed to get link speed/duplex [ 408.634660][ T9318] BTRFS error (device loop5): open_ctree failed: -22 [ 408.680444][ T4216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.750192][ T8757] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop5 scanned by udevd (8757) [ 408.767094][ T9] bond2: (slave bridge2): failed to get link speed/duplex [ 409.169236][ T9] bond2: (slave bridge2): failed to get link speed/duplex [ 409.341710][ T9] bond2: (slave bridge2): failed to get link speed/duplex [ 409.599375][ T4403] bond2: (slave bridge2): failed to get link speed/duplex [ 412.510547][ T4403] net_ratelimit: 7 callbacks suppressed [ 412.510892][ T4403] bond2: (slave bridge2): failed to get link speed/duplex [ 412.519449][ T6028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.667416][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.830385][ T4403] bond2: (slave bridge2): failed to get link speed/duplex [ 412.984530][ T4403] bond2: (slave bridge2): failed to get link speed/duplex [ 413.384022][ T4403] bond2: (slave bridge2): failed to get link speed/duplex [ 413.546642][ T4403] bond2: (slave bridge2): failed to get link speed/duplex [ 413.622974][ T9462] tipc: Started in network mode [ 413.707028][ T9462] tipc: Node identity 080211000001, cluster identity 4711 [ 413.716515][ T9462] tipc: Enabled bearer , priority 0 [ 413.730715][ T4318] bond2: (slave bridge2): failed to get link speed/duplex [ 413.907195][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.917709][ T4318] bond2: (slave bridge2): failed to get link speed/duplex [ 414.607711][ T9475] overlayfs: failed to clone upperpath [ 415.481659][ T4361] tipc: Node number set to 134418688 [ 418.373264][ T4318] net_ratelimit: 18 callbacks suppressed [ 418.373284][ T4318] bond2: (slave bridge2): failed to get link speed/duplex [ 418.482075][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.686808][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 419.642908][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.687353][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 420.188648][ T6028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.235254][ T4403] bond2: (slave bridge2): failed to get link speed/duplex [ 420.312214][ T9538] (unnamed net_device) (uninitialized): up delay (1073744714) is not a multiple of miimon (100), value rounded to 1073744700 ms [ 420.373448][ T9538] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 420.384634][ T9538] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 420.397748][ T9546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.410257][ T9546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.421907][ T9546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.898730][ T9538] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1494'. [ 421.285248][ T9538] bond1: (slave macvlan2): Releasing active interface [ 421.372498][ T9538] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 421.389724][ T9538] bond0 (unregistering): Released all slaves [ 422.949991][ T9577] team0: Port device bridge1 added [ 423.863989][ T4315] net_ratelimit: 759 callbacks suppressed [ 423.864007][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 424.764319][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 424.785319][ T9609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.882952][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.893515][ T4318] bond2: (slave bridge2): failed to get link speed/duplex [ 424.940886][ T9609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.971009][ T9616] loop5: detected capacity change from 0 to 64 [ 425.012932][ T4254] bond2: (slave bridge2): failed to get link speed/duplex [ 425.056421][ T9609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.097478][ T9609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.164490][ T4254] bond2: (slave bridge2): failed to get link speed/duplex [ 425.702261][ T4254] bond2: (slave bridge2): failed to get link speed/duplex [ 425.848373][ T4254] bond2: (slave bridge2): failed to get link speed/duplex [ 425.999046][ T4254] bond2: (slave bridge2): failed to get link speed/duplex [ 426.213512][ T4254] bond2: (slave bridge2): failed to get link speed/duplex [ 426.409497][ T9636] netlink: 'syz.2.1518': attribute type 1 has an invalid length. [ 428.510510][ T9636] 8021q: adding VLAN 0 to HW filter on device bond3 [ 430.784735][ T4361] net_ratelimit: 4 callbacks suppressed [ 430.784752][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.991326][ T9646] bond3: (slave veth5): Enslaving as an active interface with a down link [ 431.051997][ T9649] batman_adv: batadv0: Interface deactivated: dummy0 [ 431.226527][ T9649] batman_adv: batadv0: Removing interface: dummy0 [ 431.290824][ T9] bond2: (slave bridge2): failed to get link speed/duplex [ 431.515671][ T9] bond2: (slave bridge2): failed to get link speed/duplex [ 431.668010][ T9] bond2: (slave bridge2): failed to get link speed/duplex [ 431.876907][ T9419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.901860][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 431.929230][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.554927][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 432.854994][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 433.430831][ T4318] bond2: (slave bridge2): failed to get link speed/duplex [ 434.371346][ T9711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1532'. [ 434.511441][ T9715] fuse: Bad value for 'fd' [ 434.646554][ T9718] overlayfs: missing 'lowerdir' [ 436.355749][ T9] net_ratelimit: 13 callbacks suppressed [ 436.355766][ T9] bond2: (slave bridge2): failed to get link speed/duplex [ 436.402780][ T9744] hugetlbfs: syz.4.1541 (9744): Using mlock ulimits for SHM_HUGETLB is deprecated [ 436.517027][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 436.613224][ T9419] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 436.690050][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 436.944913][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.958728][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 437.367968][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.780361][ T9] bond2: (slave bridge2): failed to get link speed/duplex [ 437.957007][ T4403] bond2: (slave bridge2): failed to get link speed/duplex [ 438.820954][ T4403] bond2: (slave bridge2): failed to get link speed/duplex [ 438.835684][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.852609][ T9419] usb 6-1: Using ep0 maxpacket: 8 [ 441.659517][ T9419] usb 6-1: unable to read config index 0 descriptor/all [ 441.671857][ T9419] usb 6-1: can't read configurations, error -71 [ 441.744614][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1552'. [ 441.908841][ T144] net_ratelimit: 6 callbacks suppressed [ 441.908857][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 441.987210][ T9831] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1555'. [ 442.085676][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 442.235546][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 442.329387][ T9840] (unnamed net_device) (uninitialized): up delay (1073744714) is not a multiple of miimon (100), value rounded to 1073744700 ms [ 442.382094][ T9840] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 442.392712][ T9840] bond3: (slave macvlan0): Enslaving as an active interface with a down link [ 442.411779][ T9840] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1559'. [ 442.437067][ T9840] bond3: (slave macvlan0): Releasing active interface [ 442.461129][ T9840] bond0 (unregistering): Released all slaves [ 442.581337][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 442.605580][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.815531][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 443.209519][ T4364] bond2: (slave bridge2): failed to get link speed/duplex [ 443.351003][ T4364] bond2: (slave bridge2): failed to get link speed/duplex [ 443.503739][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1563'. [ 443.515034][ T9855] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1563'. [ 443.527199][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1563'. [ 443.543302][ T9855] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1563'. [ 443.581951][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 444.793788][ T4364] bond2: (slave bridge2): failed to get link speed/duplex [ 447.478391][ T155] net_ratelimit: 13 callbacks suppressed [ 448.078123][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.088738][ T155] bond2: (slave bridge2): failed to get link speed/duplex [ 448.205649][ T9419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.270584][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 448.452928][ T155] bond2: (slave bridge2): failed to get link speed/duplex [ 448.810873][ T4605] bond2: (slave bridge2): failed to get link speed/duplex [ 449.137768][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 449.303580][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.318429][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 449.788369][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 450.483981][ T9933] netlink: 'syz.5.1580': attribute type 1 has an invalid length. [ 450.977123][ T9934] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 450.995927][ T9930] IPVS: stopping master sync thread 9934 ... [ 451.045152][ T9933] netlink: 'syz.5.1580': attribute type 2 has an invalid length. [ 451.056648][ T9936] ip6t_srh: unknown srh invflags 4000 [ 451.270178][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1587'. [ 451.414643][ T9951] device veth5 entered promiscuous mode [ 451.424464][ T9951] bond1: (slave veth5): Enslaving as an active interface with an up link [ 451.440051][ T9946] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1587'. [ 451.648449][ T9946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.017170][ T9419] net_ratelimit: 14 callbacks suppressed [ 453.017185][ T9419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.017598][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 453.079560][ T9969] loop5: detected capacity change from 0 to 512 [ 453.105337][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 453.252228][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 453.440348][ T155] bond2: (slave bridge2): failed to get link speed/duplex [ 453.723458][ T4605] bond2: (slave bridge2): failed to get link speed/duplex [ 453.846315][ T9969] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.1593: missing EA_INODE flag [ 453.931909][ T9969] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1593: error while reading EA inode 12 err=-117 [ 453.971789][ T9969] EXT4-fs (loop5): 1 orphan inode deleted [ 454.002239][ T9988] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1600'. [ 454.018706][ T9969] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 454.066480][ T4200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.090863][ T9980] tipc: Started in network mode [ 454.097136][ T9980] tipc: Node identity ac14142f, cluster identity 4711 [ 454.157951][ T9980] tipc: New replicast peer: 0.0.0.0 [ 454.186509][ T9980] tipc: Enabled bearer , priority 10 [ 454.232456][ T4605] bond2: (slave bridge2): failed to get link speed/duplex [ 454.295356][ T9995] tipc: Enabled bearer , priority 0 [ 455.177718][ T9990] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.241889][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.285912][ T4605] bond2: (slave bridge2): failed to get link speed/duplex [ 455.394949][ T9990] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.471678][ T4200] tipc: Node number set to 2886997039 [ 455.592916][ T4605] bond2: (slave bridge2): failed to get link speed/duplex [ 456.867914][ T9990] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.965236][ T9990] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.498979][T10027] device vlan0 entered promiscuous mode [ 457.602114][T10027] device geneve1 entered promiscuous mode [ 457.887598][ T9990] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.951770][ T9990] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.975644][ T9990] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.011232][ T9990] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.129245][T10049] (unnamed net_device) (uninitialized): up delay (1073744714) is not a multiple of miimon (100), value rounded to 1073744700 ms [ 458.859800][ T9820] net_ratelimit: 7 callbacks suppressed [ 458.859827][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 458.998384][ T4364] bond2: (slave bridge2): failed to get link speed/duplex [ 459.579689][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.642842][T10060] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1619'. [ 459.890558][T10063] syz.5.1622 (10063): drop_caches: 2 [ 459.988935][T10060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.000023][ T9419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.361415][T10060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.392049][T10078] loop5: detected capacity change from 0 to 16 [ 460.401715][T10060] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 460.734948][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.748582][T10060] bond0 (unregistering): Released all slaves [ 461.080395][T10078] erofs: (device loop5): mounted with root inode @ nid 36. [ 461.124195][ T4364] bond2: (slave bridge2): failed to get link speed/duplex [ 461.243861][ T4605] bond2: (slave bridge2): failed to get link speed/duplex [ 461.568704][ T4605] bond2: (slave bridge2): failed to get link speed/duplex [ 461.767389][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 462.447074][T10078] erofs: (device loop5): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 46 [ 462.707065][T10078] handle_bad_sector: 890 callbacks suppressed [ 462.707087][T10078] attempt to access beyond end of device [ 462.707087][T10078] loop5: rw=0, want=304, limit=16 [ 462.809416][T10078] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 462.827427][T10078] erofs: (device loop5): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 46 [ 462.858652][ T9820] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.894646][T10078] attempt to access beyond end of device [ 462.894646][T10078] loop5: rw=0, want=304, limit=16 [ 463.120430][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.155873][T10078] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 463.780152][T10103] erofs: (device loop5): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 46 [ 463.850437][T10103] attempt to access beyond end of device [ 463.850437][T10103] loop5: rw=0, want=304, limit=16 [ 463.856933][ T9820] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.880537][T10103] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 464.620182][ T145] net_ratelimit: 3 callbacks suppressed [ 464.620200][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 464.657364][T10078] erofs: (device loop5): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 46 [ 464.693027][T10078] attempt to access beyond end of device [ 464.693027][T10078] loop5: rw=0, want=304, limit=16 [ 464.811746][ T7420] bond2: (slave bridge2): failed to get link speed/duplex [ 464.917517][T10078] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 464.994124][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.004923][T10078] erofs: (device loop5): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 465.047567][T10101] erofs: (device loop5): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 46 [ 465.163767][T10101] attempt to access beyond end of device [ 465.163767][T10101] loop5: rw=0, want=304, limit=16 [ 465.393899][ T9820] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.536683][T10101] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 465.892901][ T4364] bond2: (slave bridge2): failed to get link speed/duplex [ 465.973709][T10132] overlayfs: failed to resolve './bus': -2 [ 466.154765][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.237013][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.267359][ T9820] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.291202][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 467.299589][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 467.388475][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 467.517170][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.540024][ T4364] bond2: (slave bridge2): failed to get link speed/duplex [ 467.736409][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 470.375092][ T7420] net_ratelimit: 15 callbacks suppressed [ 470.375111][ T7420] bond2: (slave bridge2): failed to get link speed/duplex [ 470.578000][ T9419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.760585][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 471.099320][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.413016][ T4364] bond2: (slave bridge2): failed to get link speed/duplex [ 471.933550][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 472.222821][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.407280][ T7420] bond2: (slave bridge2): failed to get link speed/duplex [ 472.788955][ T4364] bond2: (slave bridge2): failed to get link speed/duplex [ 472.834991][T10224] overlayfs: failed to clone upperpath [ 473.079919][ T4364] bond2: (slave bridge2): failed to get link speed/duplex [ 473.605099][T10234] loop5: detected capacity change from 0 to 4096 [ 474.120145][T10234] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 474.425761][T10234] ntfs: volume version 3.1. [ 475.888467][ T4315] net_ratelimit: 10 callbacks suppressed [ 475.888487][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 476.543268][ T4511] ntfs: (device loop5): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 476.600467][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.790863][ T9419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.831246][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.037597][T10266] gre0: Caught tx_queue_len zero misconfig [ 478.659558][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 478.811896][ T4364] bond2: (slave bridge2): failed to get link speed/duplex [ 478.904286][T10302] tipc: Enabling of bearer rejected, already enabled [ 479.006551][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 479.122795][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.155221][ T4364] bond2: (slave bridge2): failed to get link speed/duplex [ 480.254425][T10325] netlink: 'syz.5.1685': attribute type 2 has an invalid length. [ 480.285693][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 480.672946][ T26] audit: type=1326 audit(1777898357.086:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.4.1688" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd4710dd9 code=0x7ffc0000 [ 481.057929][ T26] audit: type=1326 audit(1777898357.086:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.4.1688" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd4710dd9 code=0x7ffc0000 [ 481.232622][ T26] audit: type=1326 audit(1777898357.086:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.4.1688" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd4710dd9 code=0x7ffc0000 [ 481.264526][ T26] audit: type=1326 audit(1777898357.086:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.4.1688" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fadd4710dd9 code=0x7ffc0000 [ 481.383661][ T26] audit: type=1326 audit(1777898357.086:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.4.1688" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd4710dd9 code=0x7ffc0000 [ 481.479750][ T7412] net_ratelimit: 7 callbacks suppressed [ 481.479864][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 481.522089][ T26] audit: type=1326 audit(1777898357.095:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.4.1688" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd4710dd9 code=0x7ffc0000 [ 481.646383][T10350] loop5: detected capacity change from 0 to 16 [ 481.936526][T10350] erofs: (device loop5): mounted with root inode @ nid 36. [ 481.951463][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.965427][ T26] audit: type=1326 audit(1777898357.095:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.4.1688" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd4710dd9 code=0x7ffc0000 [ 482.017950][ T26] audit: type=1326 audit(1777898357.095:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.4.1688" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fadd4710dd9 code=0x7ffc0000 [ 482.098753][ T4364] bond2: (slave bridge2): failed to get link speed/duplex [ 482.600375][ T26] audit: type=1326 audit(1777898357.095:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.4.1688" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd4710dd9 code=0x7ffc0000 [ 482.650578][ T26] audit: type=1326 audit(1777898357.095:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.4.1688" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd4710dd9 code=0x7ffc0000 [ 482.718409][ T9820] device hsr_slave_0 left promiscuous mode [ 482.738555][ T9820] device hsr_slave_1 left promiscuous mode [ 482.777737][ T9820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.787160][ T9820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.869597][ T9820] device bridge_slave_1 left promiscuous mode [ 482.898675][ T9820] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.953517][ T9820] device bridge_slave_0 left promiscuous mode [ 482.970856][ T9820] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.027692][ T9820] device veth1_macvtap left promiscuous mode [ 483.036436][ T9820] device veth0_macvtap left promiscuous mode [ 483.059700][ T9820] device veth1_vlan left promiscuous mode [ 483.059958][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.067219][ T9820] device veth0_vlan left promiscuous mode [ 485.264056][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.415499][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.616920][ T9820] bond1 (unregistering): (slave batadv_slave_1): Releasing backup interface [ 485.661388][ T9820] bond1 (unregistering): Released all slaves [ 486.535050][ T4357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.575944][ T9820] team0 (unregistering): Port device team_slave_1 removed [ 486.597183][ T9820] team0 (unregistering): Port device team_slave_0 removed [ 487.136437][ T9820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.153557][ T9820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.462127][ T9820] bond0 (unregistering): Released all slaves [ 487.621913][T10399] device bridge_slave_0 left promiscuous mode [ 487.629857][T10399] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.640065][T10399] device bridge_slave_1 left promiscuous mode [ 487.648560][T10399] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.184433][T10399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.215204][T10399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.225178][T10399] device veth3 left promiscuous mode [ 493.231996][T10399] bridge1: port 1(veth3) entered disabled state [ 493.245000][T10399] bond2: (slave gretap1): Releasing backup interface [ 493.256004][T10399] bond3: (slave veth5): Releasing active interface [ 493.350167][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 493.461988][T10426] Malformed UNC in devname [ 493.461988][T10426] [ 493.474328][T10426] CIFS: VFS: Malformed UNC in devname [ 493.562125][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 494.167299][T10431] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1715'. [ 494.201559][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 494.257849][T10436] netlink: 'syz.2.1717': attribute type 10 has an invalid length. [ 494.269352][T10436] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1717'. [ 494.320994][ T4315] smc: removing ib device syz0 [ 495.540855][T10447] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1720'. [ 495.643673][ T4364] bond2: (slave bridge2): failed to get link speed/duplex [ 495.811715][ T4364] bond2: (slave bridge2): failed to get link speed/duplex [ 495.978693][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 496.055934][T10463] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 496.206477][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 496.434945][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 496.618439][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 496.943063][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 499.033136][ T4605] net_ratelimit: 8 callbacks suppressed [ 499.033151][ T4605] bond2: (slave bridge2): failed to get link speed/duplex [ 499.176270][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 499.264319][T10516] sctp: [Deprecated]: syz.4.1737 (pid 10516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.264319][T10516] Use struct sctp_sack_info instead [ 499.338127][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 499.369539][T10516] sctp: [Deprecated]: syz.4.1737 (pid 10516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.369539][T10516] Use struct sctp_sack_info instead [ 501.434869][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 502.337206][T10533] __sock_release: fasync list not empty! [ 502.392694][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 502.556993][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 502.719844][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 502.900546][T10540] tipc: Enabling of bearer rejected, failed to enable media [ 502.936175][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 503.057616][T10547] loop5: detected capacity change from 0 to 1024 [ 503.088060][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 503.181285][T10547] EXT4-fs (loop5): Ignoring removed orlov option [ 503.378204][T10547] EXT4-fs (loop5): Ignoring removed bh option [ 503.633203][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 503.836696][T10547] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 503.836696][T10547] [ 504.320735][T10563] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1744'. [ 505.300106][T10562] netlink: 'syz.2.1747': attribute type 10 has an invalid length. [ 505.968531][T10570] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1748'. [ 506.025281][ T4511] net_ratelimit: 1 callbacks suppressed [ 506.025296][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 506.087343][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1749'. [ 506.352052][T10574] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 506.394748][T10574] team0: Port device team_slave_0 removed [ 506.469510][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 506.531411][T10584] loop5: detected capacity change from 0 to 4096 [ 506.613129][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 506.627343][T10584] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 506.783857][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 506.914703][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 507.062283][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 507.209617][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 507.347313][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 507.488684][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 507.698076][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 507.835140][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1757'. [ 507.894764][T10614] tipc: Failed to remove unknown binding: 66,0,0/2886997039:1465344061/1465344062 [ 507.948710][T10618] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1756'. [ 509.883606][T10646] netlink: 'syz.2.1766': attribute type 10 has an invalid length. [ 509.961763][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1766'. [ 511.946357][ T4605] net_ratelimit: 24 callbacks suppressed [ 511.946378][ T4605] bond2: (slave bridge2): failed to get link speed/duplex [ 512.147857][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 512.285294][ T4605] bond2: (slave bridge2): failed to get link speed/duplex [ 512.826052][ T4605] bond2: (slave bridge2): failed to get link speed/duplex [ 513.045319][T10706] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1777'. [ 513.126361][T10709] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1778'. [ 513.154178][T10660] loop5: detected capacity change from 0 to 32768 [ 513.185186][T10706] netlink: 'syz.3.1777': attribute type 12 has an invalid length. [ 513.279543][T10712] bridge5: port 1(veth3) entered blocking state [ 513.392297][T10712] bridge5: port 1(veth3) entered disabled state [ 513.425344][T10712] device veth3 entered promiscuous mode [ 514.254516][T10709] bridge5: port 2(veth5) entered blocking state [ 514.290245][T10709] bridge5: port 2(veth5) entered disabled state [ 514.326085][T10709] device veth5 entered promiscuous mode [ 514.534230][T10738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1784'. [ 514.547500][T10738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1784'. [ 514.576178][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 514.869676][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 515.042120][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 515.149046][T10746] bond1: option mode: unable to set because the bond device has slaves [ 515.288353][T10746] device veth5 entered promiscuous mode [ 515.359396][T10746] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 515.541973][T10746] device geneve2 entered promiscuous mode [ 515.552070][T10746] bond1: (slave geneve2): Enslaving as a backup interface with an up link [ 516.311239][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 516.429667][T10768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.446334][T10767] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 516.490497][T10773] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1794'. [ 516.528954][ T6027] hid-generic 0004:0004:FFFF0001.0005: unknown main item tag 0x0 [ 516.529963][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 516.575646][ T6027] hid-generic 0004:0004:FFFF0001.0005: unknown main item tag 0x0 [ 516.658100][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 516.666727][ T6027] hid-generic 0004:0004:FFFF0001.0005: unknown main item tag 0x0 [ 516.683869][ T6027] hid-generic 0004:0004:FFFF0001.0005: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 516.714926][T10780] tipc: Enabling of bearer rejected, failed to enable media [ 516.976387][T10783] fido_id[10783]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 517.438156][ T4511] net_ratelimit: 3 callbacks suppressed [ 517.438254][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 517.885309][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 518.034312][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 518.164473][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 518.592532][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 520.082527][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 520.248384][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 520.399737][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 520.574185][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 520.764593][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 525.186266][ T7412] net_ratelimit: 6 callbacks suppressed [ 525.186283][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 525.213784][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 525.213809][ T26] audit: type=1326 audit(493.491:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.4.1814" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd4710dd9 code=0x7ffc0000 [ 525.452102][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 526.658134][ T26] audit: type=1326 audit(493.500:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.4.1814" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd4710dd9 code=0x7ffc0000 [ 526.714335][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 526.914218][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 527.447883][T10899] netlink: 'syz.6.1822': attribute type 29 has an invalid length. [ 527.521848][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1822'. [ 527.548837][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 527.583934][T10899] netlink: 'syz.6.1822': attribute type 29 has an invalid length. [ 527.651532][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1822'. [ 528.015890][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 528.155624][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 528.296602][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 528.460335][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 528.602796][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 529.722961][T10933] tipc: Enabling of bearer rejected, failed to enable media [ 530.273599][T10943] device bridge2 left promiscuous mode [ 530.282676][T10943] device ip6gre1 left promiscuous mode [ 530.295840][T10943] device veth5 left promiscuous mode [ 530.626946][ T145] net_ratelimit: 4 callbacks suppressed [ 530.626965][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 531.105827][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 532.174656][T10964] futex_wake_op: syz.4.1833 tries to shift op by 144; fix this program [ 532.317410][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 532.334065][T10956] tipc: Started in network mode [ 532.371235][T10956] tipc: Node identity 9e44e6f0e4ba, cluster identity 4711 [ 532.653474][T10956] tipc: Enabled bearer , priority 0 [ 532.742423][T10971] device syzkaller0 entered promiscuous mode [ 534.539688][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 534.548294][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 535.492992][T10950] tipc: Resetting bearer [ 536.071364][T10950] tipc: Disabling bearer [ 536.122104][ T6027] tipc: Node number set to 2063525616 [ 536.148147][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 536.283957][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 536.336780][T10998] TC_ACT_REPEAT abuse ? [ 536.599217][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 536.817867][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 537.479951][T11021] device syzkaller0 left promiscuous mode [ 537.488469][T11021] tipc: Resetting bearer [ 537.496501][T11021] tipc: Resetting bearer [ 537.678854][T11021] device bridge1 left promiscuous mode [ 537.698951][T11021] device gretap1 left promiscuous mode [ 537.708921][T11021] device bond2 left promiscuous mode [ 537.715930][T11021] device bridge2 left promiscuous mode [ 537.723647][T11021] device bridge3 left promiscuous mode [ 537.732508][T11021] device bridge4 left promiscuous mode [ 537.752872][T11021] device vlan0 left promiscuous mode [ 537.760109][T11021] device geneve1 left promiscuous mode [ 537.920591][ T4315] bond2: (slave bridge2): link status up again after 0 ms [ 538.218258][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 538.769674][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 543.275299][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 543.416288][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 543.567939][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 543.729730][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 544.412375][ T4605] bond2: (slave bridge2): failed to get link speed/duplex [ 544.855451][ T4605] bond2: (slave bridge2): failed to get link speed/duplex [ 545.501486][ T4605] bond2: (slave bridge2): failed to get link speed/duplex [ 545.520329][T11115] loop5: detected capacity change from 0 to 512 [ 545.724492][T11115] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 545.788775][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 545.886137][T11125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1871'. [ 546.016473][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 546.569050][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 546.664908][T11135] loop5: detected capacity change from 0 to 1024 [ 547.393696][T11135] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 547.526965][T11135] EXT4-fs (loop5): mounted filesystem without journal. Opts: mblk_io_submit,errors=continue,noquota,delalloc,journal_dev=0x0000000000000008,grpjquota=,,errors=continue. Quota mode: none. [ 547.557060][T11153] tipc: Enabling of bearer rejected, failed to enable media [ 547.597206][T11135] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: block 3: comm syz.5.1873: lblock 3 mapped to illegal pblock 3 (length 3) [ 547.712808][T11135] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 547.728233][T11135] EXT4-fs (loop5): This should not happen!! Data will be lost [ 547.728233][T11135] [ 547.747359][T11161] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1873: bg 0: block 112: padding at end of block bitmap is not set [ 548.981417][ T144] net_ratelimit: 8 callbacks suppressed [ 548.981447][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 549.184693][ T7412] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:12: lblock 8 mapped to illegal pblock 8 (length 5) [ 549.215065][T11171] tipc: Resetting bearer [ 549.379455][ T144] bond2: (slave bridge2): link status up again after 0 ms [ 549.417875][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 549.438096][ T7412] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 549.502667][ T7412] EXT4-fs (loop5): This should not happen!! Data will be lost [ 549.502667][ T7412] [ 550.156453][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 550.362921][T11171] tipc: New replicast peer: 0.0.0.0 [ 550.369796][T11171] tipc: Enabled bearer , priority 10 [ 550.383438][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 551.544570][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 551.688754][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 551.797001][T11211] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1886'. [ 551.894827][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 552.400155][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 553.398016][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 553.570406][ T4605] bond2: (slave bridge2): failed to get link speed/duplex [ 554.453900][ T9820] net_ratelimit: 3 callbacks suppressed [ 554.453919][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 554.650325][T11265] loop5: detected capacity change from 0 to 256 [ 554.659634][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 554.780728][T11265] exfat: Deprecated parameter 'utf8' [ 554.892642][T11265] exfat: Deprecated parameter 'namecase' [ 554.900226][T11265] exfat: Deprecated parameter 'namecase' [ 554.907279][T11265] exfat: Deprecated parameter 'utf8' [ 554.960142][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 555.239427][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 555.249873][T11265] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 555.522295][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 555.615109][T11277] tipc: Enabling of bearer rejected, failed to enable media [ 555.651417][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 555.836680][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 555.988439][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 556.136732][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 556.279711][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 557.338563][T11299] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1918'. [ 558.381377][T11318] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1912'. [ 560.635395][ T145] net_ratelimit: 20 callbacks suppressed [ 560.635428][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 560.929120][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 561.454942][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 561.580593][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 562.176723][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 562.211834][ T9421] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 562.663136][ T9421] usb 6-1: Using ep0 maxpacket: 8 [ 562.755348][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 564.046213][ T9421] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 564.059708][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 564.085693][ T9421] usb 6-1: config 179 has no interface number 0 [ 564.094029][ T9421] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 564.278588][ T9421] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 564.293970][ T9421] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 564.339021][ T9421] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 564.408002][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 564.497973][ T9421] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 564.514921][ T9421] usb 6-1: config 179 interface 65 has no altsetting 0 [ 564.524320][ T9421] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 564.541713][ T9421] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.758082][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 566.132180][T11427] loop5: detected capacity change from 0 to 256 [ 566.256497][ T9421] usb 6-1: can't set config #179, error -71 [ 566.280298][ T9421] usb 6-1: USB disconnect, device number 11 [ 566.315687][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 566.357889][T11427] FAT-fs (loop5): Directory bread(block 64) failed [ 566.366180][T11427] FAT-fs (loop5): Directory bread(block 65) failed [ 566.374917][T11427] FAT-fs (loop5): Directory bread(block 66) failed [ 566.383229][T11427] FAT-fs (loop5): Directory bread(block 67) failed [ 566.391482][T11427] FAT-fs (loop5): Directory bread(block 68) failed [ 566.399784][T11427] FAT-fs (loop5): Directory bread(block 69) failed [ 566.408209][T11427] FAT-fs (loop5): Directory bread(block 70) failed [ 566.416425][T11427] FAT-fs (loop5): Directory bread(block 71) failed [ 566.424879][T11427] FAT-fs (loop5): Directory bread(block 72) failed [ 566.433176][T11427] FAT-fs (loop5): Directory bread(block 73) failed [ 566.544006][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 568.721441][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 569.396948][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 569.612150][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 570.467124][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 570.847231][T11473] UBIFS error (pid: 11473): cannot open "(null)", error -22 [ 571.410238][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 571.615394][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 571.810503][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 572.403845][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 572.463219][T11500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1957'. [ 572.804078][ T9820] bond2: (slave bridge2): failed to get link speed/duplex [ 574.375700][T11537] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1963'. [ 574.529313][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 575.487882][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 575.696583][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 575.831060][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 576.337775][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 576.572450][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 578.947047][ T144] bond2: (slave bridge2): failed to get link speed/duplex [ 579.051993][T11588] device syzkaller0 entered promiscuous mode [ 580.735334][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 580.883558][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 581.016887][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 581.199558][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 581.380144][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 581.692036][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 581.824769][T11636] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1986'. [ 582.012214][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 582.366236][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 582.608510][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 584.487131][ T4511] net_ratelimit: 2 callbacks suppressed [ 584.487183][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 585.251735][T11664] device macvlan2 entered promiscuous mode [ 585.274967][T11664] bond0: (slave macvlan2): Opening slave failed [ 585.574828][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 585.836672][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 585.874194][T11683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1998'. [ 586.008623][ T4605] bond2: (slave bridge2): failed to get link speed/duplex [ 586.239378][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 587.613298][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 589.601442][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 589.888152][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 590.202130][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 590.931487][ T145] bond2: (slave bridge2): failed to get link speed/duplex [ 591.036188][T11736] loop5: detected capacity change from 0 to 1024 [ 591.316315][ T4511] bond2: (slave bridge2): failed to get link speed/duplex [ 591.449261][T11736] EXT4-fs (loop5): Ignoring removed oldalloc option [ 591.457895][T11736] EXT4-fs (loop5): Ignoring removed bh option [ 591.536221][ T4605] bond2: (slave bridge2): failed to get link speed/duplex [ 591.628143][T11736] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 591.648021][T11736] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 591.648021][T11736] [ 591.816683][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 591.936250][ T4315] bond2: (slave bridge2): failed to get link speed/duplex [ 592.137444][ T7412] bond2: (slave bridge2): failed to get link speed/duplex [ 592.482184][T11764] tipc: Resetting bearer [ 592.734740][T11764] bond1: (slave gretap1): Releasing active interface [ 592.943149][T11764] bond2: (slave bridge2): Removing an active aggregator [ 592.956403][T11764] bond2: (slave bridge2): Releasing backup interface [ 592.965783][T11764] bond2: (slave bridge2): the permanent HWaddr of slave - 1e:9c:1c:25:83:08 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 594.130168][T11764] bond2: (slave bridge3): Releasing backup interface [ 594.149819][T11764] bond2: (slave bridge4): Releasing backup interface [ 594.161633][T11764] device veth3 left promiscuous mode [ 594.171016][T11764] bridge5: port 1(veth3) entered disabled state [ 594.177776][T11783] loop5: detected capacity change from 0 to 256 [ 594.192891][T11764] device veth5 left promiscuous mode [ 594.199795][T11764] bridge5: port 2(veth5) entered disabled state [ 596.117042][T11819] loop5: detected capacity change from 0 to 512 [ 601.743628][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 601.756021][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 601.842102][T11846] team0: Port device bridge1 removed [ 604.103783][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 604.217142][ T7412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 604.387185][T11900] netlink: 'syz.2.2051': attribute type 1 has an invalid length. [ 604.407545][T11904] netlink: 'syz.4.2049': attribute type 1 has an invalid length. [ 604.438275][T11904] 8021q: adding VLAN 0 to HW filter on device bond2 [ 604.450356][T11900] netlink: 'syz.2.2051': attribute type 1 has an invalid length. [ 606.647376][T11908] device macvlan2 entered promiscuous mode [ 607.807568][T11904] bond2: (slave ip6gretap2): making interface the new active one [ 607.862254][T11904] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 608.037180][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 615.393041][T11972] device syzkaller0 entered promiscuous mode [ 624.310384][T12044] loop5: detected capacity change from 0 to 512 [ 624.443989][T12044] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 624.732330][T12044] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 626.631545][T12053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2092'. [ 627.924267][T12044] EXT4-fs (loop5): 1 orphan inode deleted [ 627.961102][T12044] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,jqfmt=vfsv0,resgid=0x0000000000000000,mblk_io_submit,auto_da_alloc=0x0000000000000002,quota,. Quota mode: writeback. [ 629.203965][ T26] audit: type=1326 audit(589.138:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.2.2099" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 629.260585][ T26] audit: type=1326 audit(589.138:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.2.2099" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 629.312175][ T26] audit: type=1326 audit(589.138:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.2.2099" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 630.096901][ T26] audit: type=1326 audit(589.138:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.2.2099" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 630.126296][ T26] audit: type=1326 audit(589.138:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.2.2099" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 631.334830][ T26] audit: type=1326 audit(589.148:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.2.2099" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 631.397799][ T26] audit: type=1326 audit(589.148:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.2.2099" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 631.427484][ T26] audit: type=1326 audit(589.148:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.2.2099" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 631.901906][ T26] audit: type=1326 audit(589.148:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.2.2099" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 631.931960][ T26] audit: type=1326 audit(589.148:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.2.2099" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 634.734179][T12115] bridge0: port 1(syz_tun) entered blocking state [ 634.742588][T12115] bridge0: port 1(syz_tun) entered disabled state [ 634.751535][T12115] device syz_tun entered promiscuous mode [ 635.080910][T12126] loop5: detected capacity change from 0 to 512 [ 635.529261][T12126] EXT4-fs (loop5): Ignoring removed orlov option [ 635.538313][T12126] EXT4-fs (loop5): Ignoring removed bh option [ 635.696877][T12126] EXT4-fs (loop5): orphan cleanup on readonly fs [ 635.717328][T12126] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2112: bg 0: block 248: padding at end of block bitmap is not set [ 635.746348][T12126] __quota_error: 57 callbacks suppressed [ 635.746367][T12126] Quota error (device loop5): write_blk: dquota write failed [ 635.767016][T12126] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 635.779038][T12126] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.2112: Failed to acquire dquot type 1 [ 635.802694][T12126] EXT4-fs (loop5): 1 truncate cleaned up [ 635.816164][T12126] EXT4-fs (loop5): mounted filesystem without journal. Opts: dax=inode,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,abort,bh,stripe=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 637.153292][T12137] smc: net device vcan0 applied user defined pnetid SYZ1 [ 637.173513][T12141] smc: net device vcan0 erased user defined pnetid SYZ1 [ 638.158978][T12147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2118'. [ 641.895127][T12176] kvm [12175]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xc900 [ 642.240592][T12176] kvm [12175]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 649.339845][T12246] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 649.364423][T12246] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 652.507746][T12270] tipc: Enabling of bearer rejected, already enabled [ 653.586448][T12283] overlayfs: failed to clone lowerpath [ 660.140275][T12321] loop5: detected capacity change from 0 to 16 [ 661.231986][T12321] erofs: (device loop5): mounted with root inode @ nid 36. [ 661.266767][T12313] attempt to access beyond end of device [ 661.266767][T12313] loop5: rw=524288, want=1072, limit=16 [ 661.293110][T12331] netlink: 'syz.2.2165': attribute type 13 has an invalid length. [ 661.309401][ T4190] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 661.355355][T12313] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 661.367833][T12313] attempt to access beyond end of device [ 661.367833][T12313] loop5: rw=524288, want=56, limit=16 [ 661.387925][T12313] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 661.495699][ T26] audit: type=1800 audit(619.246:427): pid=12313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2159" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 661.907269][T12331] gretap0: refused to change device tx_queue_len [ 661.921104][T12331] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 661.932371][T12339] fuse: Bad value for 'fd' [ 663.259700][T12368] tipc: Enabling of bearer rejected, already enabled [ 666.050270][T12385] device vlan3 entered promiscuous mode [ 667.375181][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 667.383225][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 667.399827][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2181'. [ 670.482118][T12420] device team0 entered promiscuous mode [ 670.532261][T12420] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 671.278940][T12420] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 672.367617][T12448] tipc: Enabling of bearer rejected, already enabled [ 675.370231][T12489] loop5: detected capacity change from 0 to 40427 [ 675.620502][T12491] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5675] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[12491] [ 675.917635][T12489] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 675.927592][T12489] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 675.940267][T12489] F2FS-fs (loop5): invalid crc value [ 676.008204][T12489] F2FS-fs (loop5): Found nat_bits in checkpoint [ 676.084638][T12489] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 676.093371][T12489] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 677.110009][ T26] audit: type=1800 audit(633.013:428): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2205" name="bus" dev="loop5" ino=10 res=0 errno=0 [ 678.298882][ T26] audit: type=1107 audit(634.591:429): pid=12506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 686.311204][ T26] audit: type=1107 audit(641.308:430): pid=12560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 686.404385][ T26] audit: type=1326 audit(642.212:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12566 comm="syz.4.2235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadd4710dd9 code=0x0 [ 686.654647][T12578] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2227'. [ 686.685068][T12578] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2227'. [ 691.132169][T12609] lo speed is unknown, defaulting to 1000 [ 691.139628][T12609] lo speed is unknown, defaulting to 1000 [ 691.148125][T12609] lo speed is unknown, defaulting to 1000 [ 691.158479][T12609] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 691.176285][T12609] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 691.212842][T12609] lo speed is unknown, defaulting to 1000 [ 691.221465][T12609] lo speed is unknown, defaulting to 1000 [ 691.229785][T12609] lo speed is unknown, defaulting to 1000 [ 691.237926][T12609] lo speed is unknown, defaulting to 1000 [ 691.247325][T12609] lo speed is unknown, defaulting to 1000 [ 691.747027][T12608] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2236'. [ 694.116274][T12637] overlayfs: failed to clone upperpath [ 699.053462][T12678] siw: device registration error -23 [ 699.112079][T12681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2253'. [ 699.146676][T12681] device macvlan2 left promiscuous mode [ 701.294691][T12697] netlink: 'syz.6.2258': attribute type 1 has an invalid length. [ 701.341516][T12697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.878728][T12697] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.992039][T12697] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.003753][T12697] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.481069][T12697] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.522749][T12697] bond0: (slave geneve0): making interface the new active one [ 703.769307][T12697] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 704.132948][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 704.501447][T12736] loop5: detected capacity change from 0 to 16 [ 704.529822][T12736] erofs: (device loop5): mounted with root inode @ nid 36. [ 704.538036][T12740] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2268'. [ 704.560672][T12740] tipc: Resetting bearer [ 707.177258][T12767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2271'. [ 708.203468][ T26] audit: type=1326 audit(662.188:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12763 comm="syz.5.2272" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd1bc8dd9 code=0x7ffc0000 [ 708.381923][ T26] audit: type=1326 audit(662.188:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12763 comm="syz.5.2272" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd1bc8dd9 code=0x7ffc0000 [ 709.609068][ T26] audit: type=1326 audit(662.207:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12763 comm="syz.5.2272" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd1bc8dd9 code=0x7ffc0000 [ 709.875854][ T26] audit: type=1326 audit(662.216:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12763 comm="syz.5.2272" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd1bc8dd9 code=0x7ffc0000 [ 710.140871][ T26] audit: type=1326 audit(662.216:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12763 comm="syz.5.2272" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5fd1bc8dd9 code=0x7ffc0000 [ 710.198049][ T26] audit: type=1326 audit(662.216:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12763 comm="syz.5.2272" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd1bc8dd9 code=0x7ffc0000 [ 710.295165][ T26] audit: type=1326 audit(662.216:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12763 comm="syz.5.2272" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd1bc8dd9 code=0x7ffc0000 [ 711.809303][ T26] audit: type=1326 audit(662.216:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12763 comm="syz.5.2272" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd1bc8dd9 code=0x7ffc0000 [ 711.854723][ T26] audit: type=1326 audit(662.216:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12763 comm="syz.5.2272" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd1bc8dd9 code=0x7ffc0000 [ 711.893270][ T26] audit: type=1326 audit(662.216:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12763 comm="syz.5.2272" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f5fd1bc8dd9 code=0x7ffc0000 [ 716.167640][T12831] netlink: 'syz.2.2287': attribute type 4 has an invalid length. [ 716.186009][T12831] netlink: 'syz.2.2287': attribute type 4 has an invalid length. [ 728.410127][T12976] ipt_REJECT: TCP_RESET invalid for non-tcp [ 730.354412][T12993] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2325'. [ 730.368039][T12993] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 730.470145][T12992] lo speed is unknown, defaulting to 1000 [ 734.155611][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 734.171374][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 735.391668][T13031] batman_adv: batadv0: Adding interface: dummy0 [ 735.427834][T13031] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.797454][T13031] batman_adv: batadv0: Interface activated: dummy0 [ 736.005692][T13045] batadv0: mtu less than device minimum [ 736.145486][T13045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 736.162440][T13045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 736.178585][T13045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 736.194562][T13045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 736.210643][T13045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 736.226765][T13045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 736.242792][T13045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 736.258729][T13045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 736.275351][T13045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 738.420995][T13058] loop5: detected capacity change from 0 to 64 [ 740.634132][T13066] device syz_tun left promiscuous mode [ 740.642046][T13066] bridge0: port 1(syz_tun) entered disabled state [ 741.060455][T13066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 746.238345][T13114] IPv6: Can't replace route, no match found [ 753.783172][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 753.783190][ T26] audit: type=1326 audit(703.922:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.3.2370" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2b478dd9 code=0x7ffc0000 [ 753.948359][ T26] audit: type=1326 audit(703.922:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.3.2370" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2b478dd9 code=0x7ffc0000 [ 754.052150][ T26] audit: type=1326 audit(703.931:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.3.2370" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f4b2b478dd9 code=0x7ffc0000 [ 754.172837][ T26] audit: type=1326 audit(703.931:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.3.2370" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2b478dd9 code=0x7ffc0000 [ 754.303926][ T26] audit: type=1326 audit(703.931:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.3.2370" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2b478dd9 code=0x7ffc0000 [ 754.376211][ T26] audit: type=1326 audit(703.941:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.3.2370" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f4b2b478dd9 code=0x7ffc0000 [ 754.581592][ T26] audit: type=1326 audit(703.941:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.3.2370" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2b478dd9 code=0x7ffc0000 [ 754.737866][ T26] audit: type=1326 audit(703.941:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.3.2370" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2b478dd9 code=0x7ffc0000 [ 757.055177][T13216] device syzkaller0 entered promiscuous mode [ 765.221230][T13277] device syzkaller0 entered promiscuous mode [ 768.375467][T13293] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2401'. [ 771.620481][T13301] lo speed is unknown, defaulting to 1000 [ 772.183826][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2408'. [ 773.935274][T13331] loop5: detected capacity change from 0 to 512 [ 774.396258][T13331] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 775.181552][T13331] EXT4-fs (loop5): 1 truncate cleaned up [ 775.188817][T13331] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,barrier=0x0000000000000004,. Quota mode: none. [ 780.187026][T13363] lo speed is unknown, defaulting to 1000 [ 792.893512][T13543] loop5: detected capacity change from 0 to 128 [ 793.167672][T13549] nftables ruleset with unbound set [ 794.820078][ T144] attempt to access beyond end of device [ 794.820078][ T144] loop5: rw=1, want=697, limit=128 [ 801.006889][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 801.014768][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 801.247569][T13593] bridge0: port 4(geneve1) entered blocking state [ 801.255552][T13593] bridge0: port 4(geneve1) entered disabled state [ 801.264554][T13593] device geneve1 entered promiscuous mode [ 805.072230][T13647] xt_l2tp: v2 tid > 0xffff: 37482740 [ 805.440453][T13650] ip6tnl0: Caught tx_queue_len zero misconfig [ 807.159384][T13663] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2495'. [ 811.870962][T13706] net_ratelimit: 10 callbacks suppressed [ 811.870978][T13706] TC_ACT_REPEAT abuse ? [ 814.435060][T13732] xt_CT: You must specify a L4 protocol and not use inversions on it [ 817.866831][T13767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2522'. [ 822.629545][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2529'. [ 826.557923][T13821] netlink: 'syz.4.2535': attribute type 4 has an invalid length. [ 831.631037][T13882] debugfs: Directory 'netdev:syzkaller0' with parent 'phy8' already present! [ 832.882870][T13882] netlink: 'syz.3.2549': attribute type 10 has an invalid length. [ 832.966476][T13882] device wlan1 left promiscuous mode [ 833.035097][T13882] device wlan1 entered promiscuous mode [ 833.049270][T13882] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 834.251677][T13917] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 837.536903][ T26] audit: type=1326 audit(780.931:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.5.2559" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd1bc8dd9 code=0x7ffc0000 [ 837.619460][ T26] audit: type=1326 audit(780.931:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.5.2559" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd1bc8dd9 code=0x7ffc0000 [ 840.089107][T13949] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2566'. [ 841.440914][T13959] binder: BINDER_SET_CONTEXT_MGR already set [ 841.547166][T13959] binder: 13955:13959 ioctl 4018620d 2000000002c0 returned -16 [ 842.279887][T13977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2572'. [ 845.398831][ T144] Bluetooth: (null): Invalid header checksum [ 845.407570][ T144] Bluetooth: (null): Invalid header checksum [ 845.439416][ T144] Bluetooth: (null): Invalid header checksum [ 845.456556][ T144] Bluetooth: (null): Invalid header checksum [ 845.474361][ T144] Bluetooth: (null): Invalid header checksum [ 847.419013][T14020] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 850.762583][T14053] loop5: detected capacity change from 0 to 40427 [ 850.806496][T14055] netlink: 'syz.2.2592': attribute type 8 has an invalid length. [ 850.816126][T14055] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2592'. [ 851.071973][T14053] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 851.081564][T14053] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 851.126634][T14053] F2FS-fs (loop5): invalid crc value [ 852.010227][T14053] F2FS-fs (loop5): Found nat_bits in checkpoint [ 852.152933][T14053] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 852.161563][T14053] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 857.534115][T14116] device macsec0 entered promiscuous mode [ 857.956416][T14116] Error parsing options; rc = [-22] [ 863.110257][T14188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2617'. [ 867.074605][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 867.082545][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.461710][T14243] loop5: detected capacity change from 0 to 512 [ 872.429144][T14243] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 872.466143][T14253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2634'. [ 872.478846][T14253] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 873.349423][T14265] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2635'. [ 883.163829][ T26] audit: type=1326 audit(823.772:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14310 comm="syz.2.2648" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 884.527993][ T26] audit: type=1326 audit(824.012:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14310 comm="syz.2.2648" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 884.636859][ T26] audit: type=1326 audit(824.012:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14310 comm="syz.2.2648" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 884.709019][ T26] audit: type=1326 audit(824.012:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14310 comm="syz.2.2648" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 884.750517][ T26] audit: type=1326 audit(824.012:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14310 comm="syz.2.2648" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 884.782217][ T26] audit: type=1326 audit(824.012:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14310 comm="syz.2.2648" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 885.085067][ T26] audit: type=1326 audit(824.012:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14310 comm="syz.2.2648" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 885.233944][ T26] audit: type=1326 audit(824.012:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14310 comm="syz.2.2648" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 885.302853][ T26] audit: type=1326 audit(824.012:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14310 comm="syz.2.2648" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 885.500671][ T26] audit: type=1326 audit(824.012:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14310 comm="syz.2.2648" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 885.577547][T14347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2654'. [ 887.073843][T14359] netlink: 'syz.3.2657': attribute type 10 has an invalid length. [ 892.486018][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 892.486036][ T26] audit: type=1326 audit(832.085:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14386 comm="syz.4.2664" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadd4710dd9 code=0x0 [ 900.882086][T14449] xt_hashlimit: max too large, truncated to 1048576 [ 900.894651][T14449] No such timeout policy "syz1" [ 900.978052][T14449] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2678'. [ 901.066874][T14456] bridge0: port 1(vlan2) entered blocking state [ 901.074758][T14456] bridge0: port 1(vlan2) entered disabled state [ 902.400423][T14444] atomic_op ffff88802464b198 conn xmit_atomic 0000000000000000 [ 902.790169][T14471] netlink: 'syz.4.2683': attribute type 10 has an invalid length. [ 906.804731][T14498] overlayfs: failed to clone lowerpath [ 908.524183][T14511] syz.5.2692[14511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 908.524279][T14511] syz.5.2692[14511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 910.610501][T14530] overlayfs: failed to clone lowerpath [ 911.277119][T14532] lo speed is unknown, defaulting to 1000 [ 915.872629][T14551] loop5: detected capacity change from 0 to 32768 [ 915.943656][T14554] xt_connbytes: Forcing CT accounting to be enabled [ 915.953188][T14554] set match dimension is over the limit! [ 916.244044][T14551] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.2705 (14551) [ 916.570694][T14551] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 916.581715][T14551] BTRFS info (device loop5): enabling disk space caching [ 916.590428][T14551] BTRFS info (device loop5): force clearing of disk cache [ 916.600319][T14551] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 916.612898][T14551] BTRFS info (device loop5): use zstd compression, level 3 [ 916.621626][T14551] BTRFS info (device loop5): disk space caching is enabled [ 916.630565][T14551] BTRFS info (device loop5): has skinny extents [ 917.777677][T14574] tipc: Enabling of bearer rejected, already enabled [ 917.939945][T14574] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2710'. [ 922.206641][T14611] lo speed is unknown, defaulting to 1000 [ 924.254638][T14551] BTRFS error (device loop5): open_ctree failed: -22 [ 925.148570][T14655] sctp: [Deprecated]: syz.4.2724 (pid 14655) Use of int in max_burst socket option. [ 925.148570][T14655] Use struct sctp_assoc_value instead [ 925.185750][T14655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2724'. [ 925.956400][T14655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2724'. [ 933.446949][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.454627][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 940.120971][T14737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2746'. [ 940.198468][T14737] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 943.494658][T14762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2751'. [ 944.586641][ T26] audit: type=1326 audit(92030.060:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14765 comm="syz.2.2754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 944.748726][ T26] audit: type=1326 audit(92030.060:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14765 comm="syz.2.2754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 944.919690][ T26] audit: type=1326 audit(92030.060:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14765 comm="syz.2.2754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 946.261503][ T26] audit: type=1326 audit(92030.079:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14765 comm="syz.2.2754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 947.319141][ T26] audit: type=1326 audit(92030.079:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14765 comm="syz.2.2754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 947.358722][T14802] overlayfs: failed to clone upperpath [ 948.185854][ T26] audit: type=1326 audit(92030.079:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14765 comm="syz.2.2754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 948.228916][T14810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2763'. [ 948.368789][ T26] audit: type=1326 audit(92030.079:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14765 comm="syz.2.2754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 948.402609][ T26] audit: type=1326 audit(92030.079:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14765 comm="syz.2.2754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 949.384608][ T26] audit: type=1326 audit(92030.079:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14765 comm="syz.2.2754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 949.614511][T14820] xt_connbytes: Forcing CT accounting to be enabled [ 949.623002][T14820] set match dimension is over the limit! [ 950.650102][ T26] audit: type=1326 audit(92030.079:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14765 comm="syz.2.2754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 950.854890][ T26] audit: type=1326 audit(92030.079:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14765 comm="syz.2.2754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 950.904205][ T26] audit: type=1326 audit(92030.079:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14765 comm="syz.2.2754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 952.418469][ T26] audit: type=1326 audit(92030.079:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14765 comm="syz.2.2754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 954.752876][ T26] audit: type=1326 audit(92030.079:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14765 comm="syz.2.2754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 955.701297][ T26] audit: type=1326 audit(92030.088:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14765 comm="syz.2.2754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 956.457480][ T26] audit: type=1326 audit(92030.088:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14765 comm="syz.2.2754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 956.500372][T14863] loop5: detected capacity change from 0 to 512 [ 956.569469][ T26] audit: type=1326 audit(92030.088:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14765 comm="syz.2.2754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 958.023519][T14889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2781'. [ 958.058894][ T26] audit: type=1326 audit(92030.088:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14765 comm="syz.2.2754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27e40dd9 code=0x7ffc0000 [ 958.494431][T14863] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 962.147544][T14916] smc: net device vcan0 applied user defined pnetid SYZ1 [ 963.700925][T14927] loop5: detected capacity change from 0 to 32768 [ 964.217064][T14927] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.2787 (14927) [ 964.916884][T14927] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 964.928023][T14927] BTRFS info (device loop5): turning on async discard [ 964.936581][T14927] BTRFS info (device loop5): metadata ratio 0 [ 964.944091][T14927] BTRFS info (device loop5): setting nodatasum [ 964.951762][T14927] BTRFS info (device loop5): using free space tree [ 964.960404][T14927] BTRFS info (device loop5): has skinny extents [ 965.397089][T14957] overlayfs: failed to clone upperpath [ 966.524156][T14972] overlayfs: failed to clone upperpath [ 968.723408][T14927] BTRFS error (device loop5): open_ctree failed: -22 [ 972.936838][T15024] overlayfs: failed to clone lowerpath [ 974.342063][T15044] loop5: detected capacity change from 0 to 2048 [ 974.567972][T15044] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 976.286862][T15067] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2815'. [ 976.298638][T15067] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2815'. [ 976.984244][T15074] xt_TPROXY: Can be used only with -p tcp or -p udp [ 977.634319][T14090] [ 977.637139][T14090] ====================================================== [ 977.645677][T14090] WARNING: possible circular locking dependency detected [ 977.654214][T14090] syzkaller #0 Not tainted [ 977.659627][T14090] ------------------------------------------------------ [ 977.668144][T14090] kworker/u4:5/14090 is trying to acquire lock: [ 977.675917][T14090] ffff88805f1aee70 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x24/0xe0 [ 977.688311][T14090] [ 977.688311][T14090] but task is already holding lock: [ 977.697439][T14090] ffff88801d520c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 977.709823][T14090] [ 977.709823][T14090] which lock already depends on the new lock. [ 977.709823][T14090] [ 977.722535][T14090] [ 977.722535][T14090] the existing dependency chain (in reverse order) is: [ 977.733784][T14090] [ 977.733784][T14090] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 977.744098][T14090] percpu_down_read+0x46/0x1b0 [ 977.750523][T14090] ext4_writepages+0x20f/0x2df0 [ 977.756943][T14090] do_writepages+0x476/0x6e0 [ 977.763734][T14090] __writeback_single_inode+0x153/0xda0 [ 977.771109][T14090] writeback_single_inode+0x3cb/0x8e0 [ 977.778147][T14090] write_inode_now+0x23b/0x2c0 [ 977.784666][T14090] iput+0x5ab/0x8a0 [ 977.790052][T14090] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 977.797370][T14090] ext4_xattr_block_set+0x4fd/0x2d20 [ 977.804372][T14090] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 977.812262][T14090] __ext4_expand_extra_isize+0x301/0x3e0 [ 977.819624][T14090] __ext4_mark_inode_dirty+0x469/0x700 [ 977.827200][T14090] ext4_evict_inode+0xa8d/0x1090 [ 977.833827][T14090] evict+0x4c9/0x8d0 [ 977.839322][T14090] ext4_orphan_cleanup+0xad2/0x1320 [ 977.846466][T14090] ext4_fill_super+0x8d6e/0x94f0 [ 977.852988][T14090] mount_bdev+0x287/0x3c0 [ 977.858797][T14090] legacy_get_tree+0xe6/0x180 [ 977.865041][T14090] vfs_get_tree+0x88/0x270 [ 977.871227][T14090] do_new_mount+0x24a/0xa40 [ 977.877854][T14090] __se_sys_mount+0x2e3/0x3d0 [ 977.884169][T14090] do_syscall_64+0x4c/0xa0 [ 977.890318][T14090] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 977.898111][T14090] [ 977.898111][T14090] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 977.907619][T14090] __lock_acquire+0x2c42/0x7d10 [ 977.914106][T14090] lock_acquire+0x19e/0x400 [ 977.920217][T14090] down_write+0x38/0x60 [ 977.925918][T14090] ext4_destroy_inline_data+0x24/0xe0 [ 977.933386][T14090] ext4_writepages+0x670/0x2df0 [ 977.939928][T14090] do_writepages+0x476/0x6e0 [ 977.946160][T14090] __writeback_single_inode+0x153/0xda0 [ 977.953635][T14090] writeback_sb_inodes+0xa4e/0x1680 [ 977.960731][T14090] wb_writeback+0x45d/0xbe0 [ 977.966957][T14090] wb_workfn+0x43a/0xf20 [ 977.972761][T14090] process_one_work+0x85f/0x1010 [ 977.979390][T14090] worker_thread+0xaa6/0x1290 [ 977.985949][T14090] kthread+0x436/0x520 [ 977.991575][T14090] ret_from_fork+0x1f/0x30 [ 977.997588][T14090] [ 977.997588][T14090] other info that might help us debug this: [ 977.997588][T14090] [ 978.009951][T14090] Possible unsafe locking scenario: [ 978.009951][T14090] [ 978.019175][T14090] CPU0 CPU1 [ 978.025588][T14090] ---- ---- [ 978.032004][T14090] lock(&sbi->s_writepages_rwsem); [ 978.038211][T14090] lock(&ei->xattr_sem); [ 978.046604][T14090] lock(&sbi->s_writepages_rwsem); [ 978.056082][T14090] lock(&ei->xattr_sem); [ 978.061502][T14090] [ 978.061502][T14090] *** DEADLOCK *** [ 978.061502][T14090] [ 978.071461][T14090] 3 locks held by kworker/u4:5/14090: [ 978.078087][T14090] #0: ffff888144784938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 978.090904][T14090] #1: ffffc90003e9fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 978.105180][T14090] #2: ffff88801d520c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 978.118347][T14090] [ 978.118347][T14090] stack backtrace: [ 978.125389][T14090] CPU: 0 PID: 14090 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 978.134522][T14090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 978.146673][T14090] Workqueue: writeback wb_workfn (flush-7:5) [ 978.153852][T14090] Call Trace: [ 978.157771][T14090] [ 978.161375][T14090] dump_stack_lvl+0x188/0x250 [ 978.167069][T14090] ? load_image+0x400/0x400 [ 978.172472][T14090] ? show_regs_print_info+0x20/0x20 [ 978.178794][T14090] ? print_circular_bug+0x12b/0x1a0 [ 978.185137][T14090] check_noncircular+0x296/0x330 [ 978.191037][T14090] ? deref_stack_reg+0xd0/0x120 [ 978.196947][T14090] ? add_chain_block+0x940/0x940 [ 978.202841][T14090] ? lockdep_lock+0xf1/0x1f0 [ 978.208428][T14090] ? deref_stack_reg+0xd0/0x120 [ 978.214246][T14090] ? mark_lock+0x94/0x320 [ 978.219530][T14090] __lock_acquire+0x2c42/0x7d10 [ 978.225342][T14090] ? __lock_acquire+0x13bc/0x7d10 [ 978.231554][T14090] ? verify_lock_unused+0x140/0x140 [ 978.237871][T14090] ? kmem_cache_free+0x8f/0x210 [ 978.243794][T14090] ? verify_lock_unused+0x140/0x140 [ 978.250379][T14090] ? mark_lock+0x94/0x320 [ 978.255662][T14090] lock_acquire+0x19e/0x400 [ 978.261042][T14090] ? ext4_destroy_inline_data+0x24/0xe0 [ 978.267921][T14090] ? read_lock_is_recursive+0x10/0x10 [ 978.274488][T14090] ? rcu_read_lock_any_held+0xb0/0x130 [ 978.281162][T14090] ? ext4_journal_check_start+0x180/0x250 [ 978.288353][T14090] down_write+0x38/0x60 [ 978.293506][T14090] ? ext4_destroy_inline_data+0x24/0xe0 [ 978.300372][T14090] ext4_destroy_inline_data+0x24/0xe0 [ 978.307135][T14090] ext4_writepages+0x670/0x2df0 [ 978.313160][T14090] ? mark_lock+0x94/0x320 [ 978.318442][T14090] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 978.325620][T14090] ? verify_lock_unused+0x140/0x140 [ 978.332046][T14090] ? lock_chain_count+0x20/0x20 [ 978.338050][T14090] ? __perf_event_task_sched_in+0x4e6/0x560 [ 978.345473][T14090] ? ext4_readpage+0x2e0/0x2e0 [ 978.351284][T14090] ? finish_lock_switch+0x12f/0x280 [ 978.358150][T14090] ? lockdep_hardirqs_on+0x94/0x140 [ 978.364380][T14090] ? finish_lock_switch+0x12f/0x280 [ 978.370598][T14090] ? __lock_acquire+0x7d10/0x7d10 [ 978.376717][T14090] ? do_raw_spin_lock+0x128/0x2f0 [ 978.382730][T14090] ? do_raw_spin_unlock+0x11d/0x230 [ 978.389277][T14090] ? ext4_readpage+0x2e0/0x2e0 [ 978.395120][T14090] do_writepages+0x476/0x6e0 [ 978.400710][T14090] ? preempt_schedule+0xbc/0xd0 [ 978.406513][T14090] ? __writepage+0x130/0x130 [ 978.412103][T14090] ? preempt_schedule_common+0xa5/0xd0 [ 978.418941][T14090] ? preempt_schedule+0xbc/0xd0 [ 978.424836][T14090] ? schedule_preempt_disabled+0x20/0x20 [ 978.431669][T14090] ? __lock_acquire+0x7d10/0x7d10 [ 978.437716][T14090] ? do_raw_spin_lock+0x128/0x2f0 [ 978.443730][T14090] __writeback_single_inode+0x153/0xda0 [ 978.451097][T14090] writeback_sb_inodes+0xa4e/0x1680 [ 978.457744][T14090] ? queue_io+0x550/0x550 [ 978.463386][T14090] ? rcu_is_watching+0x11/0xa0 [ 978.469502][T14090] wb_writeback+0x45d/0xbe0 [ 978.475748][T14090] ? rcu_lock_release+0x20/0x20 [ 978.481647][T14090] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 978.489347][T14090] ? mark_lock+0x94/0x320 [ 978.495175][T14090] ? _raw_spin_unlock_irq+0x1f/0x40 [ 978.501721][T14090] wb_workfn+0x43a/0xf20 [ 978.506990][T14090] ? inode_wait_for_writeback+0x220/0x220 [ 978.513956][T14090] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 978.521143][T14090] ? read_lock_is_recursive+0x10/0x10 [ 978.527858][T14090] ? __schedule+0x11f7/0x43c0 [ 978.533684][T14090] ? _raw_spin_unlock_irq+0x1f/0x40 [ 978.539896][T14090] process_one_work+0x85f/0x1010 [ 978.546321][T14090] ? worker_detach_from_pool+0x240/0x240 [ 978.553182][T14090] ? lockdep_hardirqs_off+0x70/0x100 [ 978.560156][T14090] ? _raw_spin_lock_irq+0xb7/0xf0 [ 978.566187][T14090] ? _raw_spin_lock_irqsave+0x100/0x100 [ 978.573007][T14090] ? wq_worker_running+0x97/0x170 [ 978.579602][T14090] worker_thread+0xaa6/0x1290 [ 978.585225][T14090] kthread+0x436/0x520 [ 978.590534][T14090] ? rcu_lock_release+0x20/0x20 [ 978.596737][T14090] ? kthread_blkcg+0xd0/0xd0 [ 978.602325][T14090] ret_from_fork+0x1f/0x30 [ 978.607611][T14090] [ 978.726446][T14090] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 978.746667][T14090] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 978.762643][T14090] EXT4-fs (loop5): This should not happen!! Data will be lost [ 978.762643][T14090] [ 978.778087][T14090] EXT4-fs (loop5): Total free blocks count 0 [ 978.795012][T14090] EXT4-fs (loop5): Free/Dirty block details [ 978.813010][T14090] EXT4-fs (loop5): free_blocks=4096 [ 978.819825][T14090] EXT4-fs (loop5): dirty_blocks=48 [ 978.826244][T14090] EXT4-fs (loop5): Block reservation details [ 978.833696][T14090] EXT4-fs (loop5): i_reserved_data_blocks=3