last executing test programs: 13m0.900092582s ago: executing program 1 (id=72): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 12m59.954971926s ago: executing program 1 (id=79): semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x1, 0xee01, r1, 0x0, 0x0, 0x140}, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}) 12m57.437196717s ago: executing program 1 (id=91): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x21, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3886dd2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12m56.971462143s ago: executing program 32 (id=91): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x21, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3886dd2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11m4.00137832s ago: executing program 2 (id=592): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2}, {0x80000, 0x200000004, 0x40000000007, 0x20000a0de, 0x100000000, 0x0, 0x200000003, 0x9}, {0x5}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x3502, 0x3, 0x8, 0xff, 0x9075, 0xef, 0xc5e}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) 11m3.484653349s ago: executing program 33 (id=592): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2}, {0x80000, 0x200000004, 0x40000000007, 0x20000a0de, 0x100000000, 0x0, 0x200000003, 0x9}, {0x5}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x3502, 0x3, 0x8, 0xff, 0x9075, 0xef, 0xc5e}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) 10m47.982155091s ago: executing program 5 (id=669): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) listen(r1, 0xe) 10m47.82863899s ago: executing program 5 (id=670): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009b80)={0x40000012}) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) 10m47.678564191s ago: executing program 5 (id=672): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0ff}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) 10m47.503888268s ago: executing program 5 (id=673): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@inlinecrypt}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49f, &(0x7f00000004c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x113) 10m47.139031179s ago: executing program 5 (id=674): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4048004) 10m44.097569616s ago: executing program 5 (id=686): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 10m43.577815754s ago: executing program 34 (id=686): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 5m33.97072616s ago: executing program 0 (id=1916): ioprio_set$pid(0x2, 0x0, 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0xffffffff}, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x1, 0x79b1, 0x2, 0x0, 0xfe94) 5m33.131612125s ago: executing program 0 (id=1919): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e21, @private=0xa010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4048000}, 0x28008841) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0x3000, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) 5m32.832707305s ago: executing program 0 (id=1924): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0xc000, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 5m32.504272982s ago: executing program 0 (id=1926): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 5m32.135936605s ago: executing program 0 (id=1928): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x257, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x141, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 5m27.144383192s ago: executing program 0 (id=1947): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x400017e) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') 5m26.292413377s ago: executing program 35 (id=1947): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x400017e) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') 2m40.857336197s ago: executing program 4 (id=2628): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)}], 0x1}, 0x8080) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000280)) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) 2m40.834883555s ago: executing program 6 (id=2629): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r3, 0x2939, 0x30, 0xfffffffffffffa1a, 0xcc}, &(0x7f0000000240)=0x18) 2m40.596992721s ago: executing program 6 (id=2630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m39.838401999s ago: executing program 4 (id=2633): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10002, 0x0) 2m39.824305847s ago: executing program 6 (id=2634): mremap(&(0x7f0000880000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) socket$rds(0x15, 0x5, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000340), 0x0, 0x20000) unshare(0x2040400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20) poll(&(0x7f0000000040), 0x55, 0x2) 2m39.222690157s ago: executing program 6 (id=2636): mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 2m39.057889222s ago: executing program 6 (id=2637): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, 0x0, 0x0) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) 2m37.91170964s ago: executing program 4 (id=2641): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x330c, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 2m37.469760747s ago: executing program 4 (id=2642): timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x1, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) 2m37.0174927s ago: executing program 6 (id=2646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10) 2m36.695262965s ago: executing program 36 (id=2646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10) 2m35.676726942s ago: executing program 4 (id=2655): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r1, r2, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x7}, {0xf, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close(r3) 2m34.041508632s ago: executing program 4 (id=2657): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@nodelalloc}, {@noinit_itable}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) sync() setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000000)=ANY=[], 0x835, 0x2) 2m18.972567212s ago: executing program 37 (id=2657): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@nodelalloc}, {@noinit_itable}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) sync() setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000000)=ANY=[], 0x835, 0x2) 1m50.836630327s ago: executing program 8 (id=2856): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0x4, 0xc, 0xf1, 0x5, 0xfd, 0xd0, 0xd4, 0x0, 0x7, 0x7, 0x4f}, {0x0, 0x2, 0xd, 0x8, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x2, 0x2, 0x0, 0x24, 0x1, 0x5, 0x0, 0xc4, 0x5}, {0xd000, 0x50000, 0x4, 0xf8, 0x2, 0x68, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x30000, 0xa000, 0x9, 0x1, 0x8, 0x9, 0xd, 0x6, 0x8, 0x4, 0x6e, 0x4b}, {0x6000, 0x8000000, 0xb, 0x0, 0x3, 0x1, 0x1, 0xc3, 0x4, 0x90, 0x1, 0xfc}, {0x70000, 0x4000, 0xf, 0xff, 0x3, 0xfb, 0x0, 0xb, 0x5, 0x7, 0x80, 0xfc}, {0xf7f63004, 0x58000, 0xf, 0x5, 0xfc, 0x3, 0x82, 0x1, 0x54, 0x1, 0xff, 0x5}, {0x58000, 0x5}, {0x80a0000, 0x9}, 0x4001000e, 0x0, 0xffff1000, 0x300, 0x5, 0x2100, 0xfec00000, [0x6, 0x20000403, 0x7, 0xc5]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, 0x0) 1m49.75310956s ago: executing program 8 (id=2859): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x4, 0x0, 0x0, @adapter={0x8, 0x9, 0xbb8, 0xbb, 0x100}}]}) r2 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x2}) 1m48.611372586s ago: executing program 8 (id=2862): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) 1m48.46138631s ago: executing program 8 (id=2864): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 1m48.171480984s ago: executing program 8 (id=2866): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "5bebd250addb1b29", "0fe57ac3a02500", "5cccf758", "0002000000f3ff00"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304, 0x33}, "627ce0e144c779da", "a2d1b61370275f757fe176f0655e2f421e334359bcf7e22446cf5ad5ca42a01a", "0c6c7e9a", "73f7a3c10c6faf92"}, 0x38) 1m46.187925694s ago: executing program 8 (id=2871): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x3, 0x6) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000800) syz_emit_ethernet(0x4a, &(0x7f0000001040)={@link_local, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x20, 0x6, 0x2, @loopback, @empty}, "e65ce9f23cda77d3"}}}}}, 0x0) 1m45.37229354s ago: executing program 38 (id=2871): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x3, 0x6) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000800) syz_emit_ethernet(0x4a, &(0x7f0000001040)={@link_local, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x20, 0x6, 0x2, @loopback, @empty}, "e65ce9f23cda77d3"}}}}}, 0x0) 1m33.230412491s ago: executing program 1 (id=2726): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x106) 1m31.865388493s ago: executing program 1 (id=2927): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x547, 0x4) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x102) 1m24.177364317s ago: executing program 1 (id=2949): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x12d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000400)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x1, 0x18100}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) 1m23.524584131s ago: executing program 39 (id=2949): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x12d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000400)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x1, 0x18100}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) 7.449831184s ago: executing program 2 (id=2874): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r3, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) 6.884097536s ago: executing program 2 (id=3105): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0xb0}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 4.829383227s ago: executing program 3 (id=3118): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r3, r2, 0x25, 0xe, @val=@tracing={0x0, 0x8}}, 0x20) 4.422970708s ago: executing program 3 (id=3120): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0x29, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 4.255931294s ago: executing program 2 (id=3122): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0xc0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x49}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) 3.741496249s ago: executing program 3 (id=3123): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x2a3f, 0x67) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="2213", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="92", 0x1}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c80)="eff38aa2e3f2c417a4d0bb308e1c69bfccb5c880f7298574b9b1319ae8337cb785c530e8807e76ff2c9afaa0c4c5eddc4bf88f600a0ae333b712235bc8b9b11fe545834b4c1b93c72090fb55ae34e9ab74837f7fb8db37a7c2366a2b2a17", 0x5e}], 0x1}}], 0x3, 0x4080) 3.498941285s ago: executing program 9 (id=3124): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x6a8a40, 0x0) openat$cgroup_ro(r1, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x2020) 2.930889326s ago: executing program 9 (id=3127): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r1, 0xffffffffffffffff}, &(0x7f00000014c0), &(0x7f0000001500)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f00000005c0), &(0x7f0000000600)=r0}, 0x20) 2.855199276s ago: executing program 2 (id=3128): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r0, 0xd8efb88b38e288e3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r1) 2.616530372s ago: executing program 3 (id=3130): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44) 2.364294013s ago: executing program 7 (id=3131): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70820a2, 0x0, 0x1, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.925489086s ago: executing program 9 (id=3132): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="19"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000840)=0x2000000, &(0x7f0000000740)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000200), &(0x7f0000000100)=r1}, 0x20) 1.832315196s ago: executing program 7 (id=3133): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x1800440, &(0x7f0000000480)={[{@uni_xlate}, {@shortname_lower}, {@fat=@time_offset={'time_offset', 0x3d, 0x5d}}, {@shortname_win95}, {@fat=@sys_immutable}, {@shortname_win95}, {@uni_xlate}, {@fat=@dos1xfloppy}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@shortname_lower}]}, 0x21, 0x21a, &(0x7f0000000180)="$eJzs3bFqU1EYB/AvbaqlIOkgFEXwiotTaCruEVEQCgqSwc1iU5QkFgwE2qHVyZfQV9DRVXAQV19ABKmCi906CJF6Y2NL2kRqcov9/ZZ8JOd/z3cuIYcMObl3rlFbXG4ubW5uxORkLvLlKMdWLqZjLMYj9SQAgP/JVrsd39uprHsBAEbD/g8Ax8+A+//tEbYEAAzZwN//x0bWEgAwZHfutnNplUxGNJ61Kq1K+pg+e3UpHkY9qjEbhfgR0d6R1jduzl+fTbZ9mY5KY72TX29VxnfnS1GI6d75UpLanZ+IqU7+41RUYy4Kcbp3fq5n/kRcuvjH/MUoxIf7sRz1WIztbDe/VkqSa7fm9+RP/hoHAAAAAAAAAAAAAAAAAAAAAADDUEx29Dy/p1jc7/U0n56vk4/+5wPtPZ8nH2fz2a4dAAAAAAAAAAAAAAAAAAAAjormymptoV6vPj6oePT+5dt+YwYscp15D3udwxenLnx+vv+Yp39zf/5t8eZ8lrdlwOLdxoMzl5szV45KPyurtYmD3lrfChFDmv1Vpmv/veq+g2delBder336OuiVM/gwAgAAAAAAAAAAAAAAAACAY677o9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT//394RdZrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnwEAAP//Rp2fMw==") r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xde, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x35, "", [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x81, 0x5, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x4, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4002b2000000b20fbc2b2f8ff68b1acfce44"], 0x0, 0x0, 0x0, 0x0}, 0x0) io_setup(0x20fe, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) 1.410399547s ago: executing program 9 (id=3134): mknodat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x20, 0x4e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000180), 0x1004002, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f00000001c0)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871989b0dd67, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002a00)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43c554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4c9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce64e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a0d000000e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909190000000000000000c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9ef7d5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5e666c438f5d0f40f911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfd00d9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6eafaf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f00064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b2e4e552cc9e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a456281d18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4ed8830d00008998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd59fde0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb890d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab53391af2fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc75949424310dff81116b8f2076b8ecace84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a70bed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815d928bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4260093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a3cfafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8a3f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xf, {0x4, 0x1, 0x0, {0xffdfffffffffffff, 0x0, 0x8000000000000001, 0x80000001, 0x0, 0x80200000000001, 0x9e9, 0xc9, 0x3, 0x8000, 0x3, 0xffffffffffffffff, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000005c00)=@generic={&(0x7f0000000740)='./file0\x00'}, 0x18) 958.744279ms ago: executing program 7 (id=3135): r0 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x3f, 0x1, 0x1fb, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 711.281677ms ago: executing program 9 (id=3136): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x1ff, 0x7f, 0x8, 0x4, 0x2, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 710.144812ms ago: executing program 3 (id=3137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0xffffffff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 559.005804ms ago: executing program 7 (id=3138): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="84e27d", 0x3}], 0x1, 0x0, 0x0, 0x84}, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[], 0x9) 304.910815ms ago: executing program 7 (id=3139): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0xfd}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x3, 0x0, 0x0, 'queue0\x00', 0x7ff}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @time={0x8}, 0x40, {0x3, 0x7f}, 0x0, 0x1, 0x5a}) 264.821576ms ago: executing program 2 (id=3140): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) ptrace$getregset(0x4205, 0x0, 0x1, &(0x7f00000000c0)={0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x2000000, 0x6a, 0x0, &(0x7f00000009c0)="000035b1d44d1de88000000000000082012200ffdae2b349d07a51c9e3ec6c7dfcf095c3106d028e04fb826d545d2ba75e653ccdc0fe123cf9593681e817bb88b7ad3ce6134a9378880071f1d1f8558237910ec8bc8963d672966b05a90c6e74e66876198dacb5f9ca3b", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, 0x3c) 243.717586ms ago: executing program 9 (id=3141): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x1, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000180)={0x2000000, 0x0, 0x0, 0x5, 0x101, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) vmsplice(r2, &(0x7f0000000440)=[{&(0x7f0000000140)="d5", 0x1}], 0x1, 0x4) 151.339858ms ago: executing program 7 (id=3142): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7) 0s ago: executing program 3 (id=3143): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read$msr(r0, &(0x7f0000000000)=""/68, 0x44) kernel console output (not intermixed with test programs): nd tx timeout [ 649.725840][T13244] loop3: detected capacity change from 0 to 256 [ 649.805584][T13244] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 649.896627][T13244] exFAT-fs (loop3): start_clu is invalid cluster(0x0) [ 650.131717][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 650.222995][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 650.811307][T13272] loop4: detected capacity change from 0 to 2048 [ 651.122625][T13272] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 651.128224][T13272] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 651.710151][ T5599] Flush: task=syz-executor[5599] dev=loop4 state=2 [ 651.824047][ T5599] Teardown: task=syz-executor[5599] dev=loop4 state=2 [ 651.867764][T13296] 9p: Bad value for 'rfdno' [ 653.226528][T13327] loop3: detected capacity change from 0 to 128 [ 653.370325][T13327] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 653.462300][T13327] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 653.556329][T13321] netlink: 'syz.4.2260': attribute type 12 has an invalid length. [ 653.556353][T13321] netlink: 'syz.4.2260': attribute type 29 has an invalid length. [ 653.556368][T13321] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2260'. [ 653.556401][T13321] netlink: 'syz.4.2260': attribute type 3 has an invalid length. [ 653.556416][T13321] netlink: 'syz.4.2260': attribute type 2 has an invalid length. [ 653.556429][T13321] netlink: 'syz.4.2260': attribute type 3 has an invalid length. [ 653.556443][T13321] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2260'. [ 653.984476][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 654.060115][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 654.398972][T13079] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.399317][T13079] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.399629][T13079] bridge_slave_0: entered allmulticast mode [ 654.448229][T13079] bridge_slave_0: entered promiscuous mode [ 654.485443][T12617] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 654.573340][T13355] loop4: detected capacity change from 0 to 512 [ 654.592109][T13355] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 654.688980][T13355] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.2270: iget: bad i_size value: 38620345925642 [ 654.689021][T13355] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 654.690785][T13355] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2270: couldn't read orphan inode 15 (err -117) [ 654.690886][T13355] loop4: lost filesystem error report for type 5 error -117 [ 654.692870][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 654.692925][ C0] EXT4-fs (loop4): initial error at time 1784279710: ext4_orphan_get:1399: inode 15 [ 654.693009][ C0] EXT4-fs (loop4): last error at time 1784279710: ext4_orphan_get:1404 [ 654.749230][T13355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.785175][T13359] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 655.101442][T12617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 655.111284][T13079] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.111569][T13079] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.111832][T13079] bridge_slave_1: entered allmulticast mode [ 655.152899][T13079] bridge_slave_1: entered promiscuous mode [ 655.174665][T13347] tipc: Started in network mode [ 655.174698][T13347] tipc: Node identity ac1414aa, cluster identity 4711 [ 655.331738][T13347] tipc: Enabled bearer , priority 10 [ 655.332449][T12617] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 655.408924][T12617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 655.429111][ T5599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.545102][T12617] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 655.586833][T12617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 655.616833][ T5599] Flush: task=syz-executor[5599] dev=loop4 state=2 [ 655.685717][ T5599] Teardown: task=syz-executor[5599] dev=loop4 state=2 [ 656.440870][T12617] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 656.501246][T12617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 656.631868][T13079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.671532][ T824] tipc: Node number set to 2886997162 [ 656.981329][T13079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.361587][T13393] input: syz0 as /devices/virtual/input/input27 [ 657.616038][T13079] team0: Port device team_slave_0 added [ 657.759087][T13079] team0: Port device team_slave_1 added [ 658.351241][T13079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.351261][T13079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.351295][T13079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.426936][T13079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.426956][T13079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.426989][T13079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.642379][T13417] loop4: detected capacity change from 0 to 128 [ 658.681912][T13417] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 658.693091][ T37] bridge_slave_1: left allmulticast mode [ 658.693127][ T37] bridge_slave_1: left promiscuous mode [ 658.693420][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.916995][ T5599] Flush: task=syz-executor[5599] dev=loop4 state=2 [ 659.004025][ T37] bridge_slave_0: left allmulticast mode [ 659.004054][ T37] bridge_slave_0: left promiscuous mode [ 659.004266][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.017002][ T5599] Teardown: task=syz-executor[5599] dev=loop4 state=2 [ 659.091763][T13425] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2290'. [ 659.859292][T13440] fuse: Bad value for 'fd' [ 660.646727][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.724201][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.765698][ T37] bond0 (unregistering): Released all slaves [ 661.107211][T13457] netlink: 'syz.4.2305': attribute type 5 has an invalid length. [ 661.429118][T13079] hsr_slave_0: entered promiscuous mode [ 661.431201][T13079] hsr_slave_1: entered promiscuous mode [ 661.664682][ T37] hsr_slave_0: left promiscuous mode [ 661.713218][ T37] hsr_slave_1: left promiscuous mode [ 661.715073][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.743792][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.838543][T13468] netlink: 'syz.4.2310': attribute type 1 has an invalid length. [ 661.838568][T13468] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.2310'. [ 663.317493][ T37] team0 (unregistering): Port device team_slave_1 removed [ 663.993765][ T37] team0 (unregistering): Port device team_slave_0 removed [ 664.447769][T13484] loop3: detected capacity change from 0 to 131072 [ 664.525616][T13484] XFS (loop3): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 664.721253][T13484] XFS (loop3): Starting recovery (logdev: internal) [ 664.911307][T13484] XFS (loop3): Ending recovery (logdev: internal) [ 665.453516][ T5592] XFS (loop3): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 666.279316][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 666.415252][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 666.585506][T12617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.757222][T12617] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.896670][T13532] loop4: detected capacity change from 0 to 512 [ 666.925414][T13532] msdos: Unknown parameter '' [ 667.142843][ T5813] Flush: task=udevd[5813] dev=loop4 state=2 [ 667.415872][ T5813] Teardown: task=udevd[5813] dev=loop4 state=2 [ 668.596067][ T5253] 8021q: adding VLAN 0 to HW filter on device eth17 [ 668.610226][T13552] overlayfs: failed to clone lowerpath [ 668.918475][ T5598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 669.051946][ T5598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 669.160193][ T5598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 669.197125][ T5598] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 669.231985][ T5598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 670.075080][T13569] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 670.489886][T13580] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2339'. [ 671.568951][T13575] loop3: detected capacity change from 0 to 32768 [ 671.586240][T13605] loop4: detected capacity change from 0 to 512 [ 671.587322][T13605] EXT4-fs: Ignoring removed nobh option [ 671.656650][T13575] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 671.681398][T13605] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 671.682095][T13605] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 671.682510][T13605] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #13: comm syz.4.2344: inode has both inline data and extents flags [ 671.682533][T13605] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 671.683198][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 671.683219][ C1] EXT4-fs (loop4): initial error at time 1784279727: ext4_orphan_get:1399: inode 13 [ 671.683249][ C1] EXT4-fs (loop4): last error at time 1784279727: ext4_orphan_get:1399: inode 13 [ 671.752173][T13605] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2344: couldn't read orphan inode 13 (err -117) [ 671.752210][T13605] loop4: lost filesystem error report for type 5 error -117 [ 671.790640][T13605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.848492][ T61] Bluetooth: hci1: command tx timeout [ 672.055673][T13575] XFS (loop3): Ending clean mount [ 672.131717][ T5599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.270129][ T5599] Flush: task=syz-executor[5599] dev=loop4 state=2 [ 672.444986][ T5599] Teardown: task=syz-executor[5599] dev=loop4 state=2 [ 672.800592][ T5592] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 673.351382][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 673.546095][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 673.944696][ T61] Bluetooth: hci1: command tx timeout [ 675.858083][T13663] syz.4.2359 (13663) used greatest stack depth: 18496 bytes left [ 676.012756][ T61] Bluetooth: hci1: command tx timeout [ 676.882475][T13672] loop4: detected capacity change from 0 to 40427 [ 676.904376][T13672] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 676.904406][T13672] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 677.082340][T13672] F2FS-fs (loop4): invalid crc value [ 677.894738][T13672] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 678.092766][ T61] Bluetooth: hci1: command tx timeout [ 678.115844][T13672] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 678.115877][T13672] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 678.433133][ T5788] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 678.597587][ T5788] usb 5-1: Using ep0 maxpacket: 16 [ 678.611272][ T5788] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.611430][ T5788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.611504][ T5788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.611567][ T5788] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 678.611699][ T5788] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 678.611765][ T5788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.691065][ T5788] usb 5-1: config 0 descriptor?? [ 679.136262][ T5788] smartjoyplus 0003:6666:8804.000B: unknown global tag 0xd [ 679.136290][ T5788] smartjoyplus 0003:6666:8804.000B: item 0 1 1 13 parsing failed [ 679.137054][ T5788] smartjoyplus 0003:6666:8804.000B: parse failed [ 679.137136][ T5788] smartjoyplus 0003:6666:8804.000B: probe with driver smartjoyplus failed with error -22 [ 679.344655][ T5788] usb 5-1: USB disconnect, device number 24 [ 681.059517][T13548] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.059859][T13548] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.060342][T13548] bridge_slave_0: entered allmulticast mode [ 681.082450][T13548] bridge_slave_0: entered promiscuous mode [ 681.331086][T13548] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.331382][T13548] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.331684][T13548] bridge_slave_1: entered allmulticast mode [ 681.385831][T13548] bridge_slave_1: entered promiscuous mode [ 681.710087][ T5599] Flush: task=syz-executor[5599] dev=loop4 state=2 [ 681.817867][ T5599] Teardown: task=syz-executor[5599] dev=loop4 state=2 [ 681.973069][T13548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.009931][T13548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.773961][T13548] team0: Port device team_slave_0 added [ 682.776214][T13079] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 682.880775][T13079] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 682.901314][T13548] team0: Port device team_slave_1 added [ 682.906221][T13079] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 683.176349][T13079] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 683.456561][T13079] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 683.541452][T13079] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 683.803615][T13079] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 683.919605][T13079] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 683.935267][T13548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.935279][T13548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.935300][T13548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.076329][T13548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.076343][T13548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.076364][T13548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.388287][ T37] bridge_slave_1: left allmulticast mode [ 684.388325][ T37] bridge_slave_1: left promiscuous mode [ 684.388599][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.924131][ T37] bridge_slave_0: left allmulticast mode [ 684.924162][ T37] bridge_slave_0: left promiscuous mode [ 684.926054][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.169283][T13787] loop3: detected capacity change from 0 to 512 [ 685.249628][ T5813] Flush: task=udevd[5813] dev=loop3 state=2 [ 685.375563][ T5813] Teardown: task=udevd[5813] dev=loop3 state=2 [ 685.625226][ T824] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 685.786505][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.786599][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.811016][ T824] usb 4-1: Using ep0 maxpacket: 16 [ 685.816868][ T824] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 685.816996][ T824] usb 4-1: config 0 has an invalid descriptor of length 206, skipping remainder of the config [ 685.817052][ T824] usb 4-1: config 0 has no interface number 0 [ 685.817143][ T824] usb 4-1: too many endpoints for config 0 interface 188 altsetting 188: 165, using maximum allowed: 30 [ 685.817255][ T824] usb 4-1: config 0 interface 188 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 165 [ 685.817420][ T824] usb 4-1: config 0 interface 188 has no altsetting 0 [ 685.837083][ T824] usb 4-1: New USB device found, idVendor=06cd, idProduct=0114, bcdDevice=16.60 [ 685.837166][ T824] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 685.837228][ T824] usb 4-1: Product: syz [ 685.837271][ T824] usb 4-1: Manufacturer: syz [ 685.837311][ T824] usb 4-1: SerialNumber: syz [ 685.940894][ T824] usb 4-1: config 0 descriptor?? [ 686.179714][ T824] hub 4-1:0.188: bad descriptor, ignoring hub [ 686.179752][ T824] hub 4-1:0.188: probe with driver hub failed with error -5 [ 686.192230][ T824] keyspan 4-1:0.188: Keyspan - (without firmware) converter detected [ 686.408495][ T824] usb 4-1: USB disconnect, device number 26 [ 686.409663][ T824] keyspan 4-1:0.188: device disconnected [ 686.966038][T13796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2385'. [ 687.208647][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.488537][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.546460][ T37] bond0 (unregistering): Released all slaves [ 687.822239][T13803] loop3: detected capacity change from 0 to 32768 [ 687.823573][T13803] btrfs: Deprecated parameter 'usebackuproot' [ 687.823595][T13803] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 687.849282][T13803] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2388 (13803) [ 687.902020][T13803] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 687.902056][T13803] BTRFS info (device loop3): using crc32c checksum algorithm [ 688.142181][ T397] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 688.145055][T13803] BTRFS error (device loop3): failed to load root extent [ 688.145100][T13803] BTRFS warning (device loop3): try to load backup roots slot 1 [ 688.216938][ T1043] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 688.217097][T13803] BTRFS warning (device loop3): couldn't read tree root [ 688.217120][T13803] BTRFS warning (device loop3): try to load backup roots slot 2 [ 688.274219][ T68] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 688.274353][T13803] BTRFS warning (device loop3): couldn't read tree root [ 688.274375][T13803] BTRFS warning (device loop3): try to load backup roots slot 3 [ 688.391225][T13548] hsr_slave_0: entered promiscuous mode [ 688.396667][T13548] hsr_slave_1: entered promiscuous mode [ 688.398854][T13548] debugfs: 'hsr0' already exists in 'hsr' [ 688.398881][T13548] Cannot create hsr debugfs directory [ 688.427933][T13803] BTRFS info (device loop3): rebuilding free space tree [ 688.786862][T13803] BTRFS info (device loop3): checking UUID tree [ 688.787569][T13803] BTRFS info (device loop3): enabling ssd optimizations [ 688.787595][T13803] BTRFS info (device loop3): turning on async discard [ 688.787613][T13803] BTRFS info (device loop3): enabling free space tree [ 688.787630][T13803] BTRFS info (device loop3): force clearing of disk cache [ 688.787648][T13803] BTRFS info (device loop3): enabling auto defrag [ 688.787666][T13803] BTRFS info (device loop3): trying to use backup root at mount time [ 688.787686][T13803] BTRFS info (device loop3): use zstd compression, level 3 [ 689.325304][ T5592] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 689.572924][ T37] hsr_slave_0: left promiscuous mode [ 689.732871][ T37] hsr_slave_1: left promiscuous mode [ 689.734612][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.828210][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.880534][ T5813] Flush: task=udevd[5813] dev=loop3 state=2 [ 690.053824][ T5813] Teardown: task=udevd[5813] dev=loop3 state=2 [ 691.284067][ T37] team0 (unregistering): Port device team_slave_1 removed [ 691.367295][ T37] team0 (unregistering): Port device team_slave_0 removed [ 692.212102][T13079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.374855][T13079] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.413715][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.414049][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.608638][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.608904][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.093874][ T5253] 8021q: adding VLAN 0 to HW filter on device eth17 [ 695.016342][T13079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.750541][T13548] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 695.789422][T13548] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 695.808333][T13548] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 695.876150][T13548] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 695.898906][T13548] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 695.975462][T13548] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 696.000693][T13548] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 696.039048][T13548] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 696.312225][T13079] veth0_vlan: entered promiscuous mode [ 696.406358][T13079] veth1_vlan: entered promiscuous mode [ 696.594562][T13079] veth0_macvtap: entered promiscuous mode [ 696.638328][T13079] veth1_macvtap: entered promiscuous mode [ 696.692064][T13548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.798230][T13548] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.810732][T13079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.879921][T13079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.908059][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.908998][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.959689][ T68] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.988640][ T1527] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.988827][ T1527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.015062][ T68] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.034722][T13820] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.070529][T13820] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.502325][ T9395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.502349][ T9395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.768219][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.768242][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.211293][T13937] loop8: detected capacity change from 0 to 16 [ 699.680993][T13548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.777598][T13937] erofs (device loop8): mounted with root inode @ nid 36. [ 700.272812][ T5581] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 700.304887][T13079] Flush: task=syz-executor[13079] dev=loop8 state=2 [ 700.432236][ T5581] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 700.432273][ T5581] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.432288][ T5581] usb 5-1: Product: syz [ 700.432298][ T5581] usb 5-1: Manufacturer: syz [ 700.432309][ T5581] usb 5-1: SerialNumber: syz [ 700.512476][T13955] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 700.590738][T13079] Teardown: task=syz-executor[13079] dev=loop8 state=2 [ 700.937804][T13963] overlayfs: overlapping lowerdir path [ 701.532547][T13548] veth0_vlan: entered promiscuous mode [ 701.650931][ T5581] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 701.686617][T13548] veth1_vlan: entered promiscuous mode [ 702.000130][T13548] veth0_macvtap: entered promiscuous mode [ 702.030091][T13548] veth1_macvtap: entered promiscuous mode [ 702.180049][T13548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.304010][T13548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.379151][ T9393] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.379483][ T9393] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.379528][ T9393] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.379564][ T9393] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.200218][ T5694] usb 5-1: USB disconnect, device number 25 [ 703.780498][ T5694] usblp0: removed [ 703.901206][T13984] loop3: detected capacity change from 0 to 512 [ 704.740937][T13983] loop4: detected capacity change from 0 to 4096 [ 704.885910][T13984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.886062][T13984] ext4 filesystem being mounted at /603/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 704.888540][T13983] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 705.460578][T13820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.460602][T13820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.538951][ T5592] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.772020][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 705.839465][T13983] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 705.853736][ T9389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.853757][ T9389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.162917][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 706.240819][T13993] ntfs3(loop4): failed to convert name for inode a. [ 706.317297][T13983] ntfs3: Cannot use different iocharset when remounting! [ 706.459453][T13997] loop3: detected capacity change from 0 to 2048 [ 706.462333][T13997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 706.543090][T13997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.926303][ T5599] Flush: task=syz-executor[5599] dev=loop4 state=2 [ 707.147180][T14004] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2416: bg 0: block 2: invalid block bitmap [ 707.243338][ T5599] Teardown: task=syz-executor[5599] dev=loop4 state=2 [ 707.298692][T14004] EXT4-fs (loop3): Remounting filesystem read-only [ 707.346992][T14004] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 18, error -30) [ 707.637169][ T5592] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.810291][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 707.944025][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 708.352987][ T44] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 708.568763][ T44] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 708.568912][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.568938][ T44] usb 4-1: Product: syz [ 708.569046][ T44] usb 4-1: Manufacturer: syz [ 708.569064][ T44] usb 4-1: SerialNumber: syz [ 708.691292][T14028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.083513][ T44] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 709.114626][T14036] loop6: detected capacity change from 0 to 2048 [ 709.133137][T14036] EXT4-fs: Ignoring removed nomblk_io_submit option [ 709.497631][T14036] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.616123][T14038] usblp0:failed reading printer status (-32) [ 709.620899][ T44] usb 4-1: USB disconnect, device number 27 [ 709.680111][ T44] usblp0: removed [ 709.847649][T14044] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2430: bg 0: block 2: invalid block bitmap [ 709.853873][T14044] EXT4-fs (loop6): Remounting filesystem read-only [ 709.880832][T14044] EXT4-fs (loop6): error restoring inline_data for inode -- potential data loss! (inode 18, error -30) [ 709.966392][T13548] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.133504][T13548] Flush: task=syz-executor[13548] dev=loop6 state=2 [ 710.201835][T14050] netlink: 'syz.7.2444': attribute type 1 has an invalid length. [ 710.201858][T14050] netlink: 'syz.7.2444': attribute type 4 has an invalid length. [ 710.201872][T14050] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2444'. [ 710.328844][T13548] Teardown: task=syz-executor[13548] dev=loop6 state=2 [ 712.445181][T14092] netlink: 'syz.4.2448': attribute type 1 has an invalid length. [ 712.445204][T14092] netlink: 'syz.4.2448': attribute type 4 has an invalid length. [ 712.445220][T14092] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2448'. [ 713.032744][ T44] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 713.209341][ T44] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 713.209377][ T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.209399][ T44] usb 9-1: Product: syz [ 713.209414][ T44] usb 9-1: Manufacturer: syz [ 713.209430][ T44] usb 9-1: SerialNumber: syz [ 713.298129][T14100] loop4: detected capacity change from 0 to 32768 [ 713.405710][T14100] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 713.691657][ T44] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 713.692551][T14100] XFS (loop4): Ending clean mount [ 714.100121][T14121] usblp0:failed reading printer status (-32) [ 714.102487][ T9] usb 9-1: USB disconnect, device number 2 [ 714.120964][ T9] usblp0: removed [ 714.473225][ T5599] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 714.894454][T14132] loop3: detected capacity change from 0 to 512 [ 714.903737][ T5599] Flush: task=syz-executor[5599] dev=loop4 state=2 [ 714.904429][T14132] EXT4-fs: Ignoring removed bh option [ 715.093298][ T5599] Teardown: task=syz-executor[5599] dev=loop4 state=2 [ 715.162872][T14132] EXT4-fs (loop3): 1 truncate cleaned up [ 715.238281][T14132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 715.798224][ T5592] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.995063][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 716.212874][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 716.559700][ T9] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 716.580142][T14155] loop3: detected capacity change from 0 to 4096 [ 716.609365][T14155] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 716.867150][T14155] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 716.906407][ T9] usb 5-1: config 0 has no interfaces? [ 716.910720][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 716.910786][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.910841][ T9] usb 5-1: Product: syz [ 716.910890][ T9] usb 5-1: Manufacturer: syz [ 716.910931][ T9] usb 5-1: SerialNumber: syz [ 716.962505][ T9] usb 5-1: config 0 descriptor?? [ 717.187480][T14155] ntfs3: Cannot use different iocharset when remounting! [ 717.233990][T14155] ntfs3(loop3): failed to convert name for inode a. [ 717.472502][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 717.527603][T14167] loop8: detected capacity change from 0 to 4096 [ 717.570545][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 717.592590][T14167] ntfs3(loop8): Different NTFS sector size (2048) and media sector size (512). [ 717.938623][T14167] ntfs3(loop8): Failed to initialize $Extend/$ObjId. [ 718.069751][T14167] ntfs3: Cannot use different iocharset when remounting! [ 718.081055][T14167] ntfs3(loop8): failed to convert name for inode a. [ 718.280312][T14178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.355964][T13079] Flush: task=syz-executor[13079] dev=loop8 state=2 [ 718.432805][T13079] Teardown: task=syz-executor[13079] dev=loop8 state=2 [ 719.276668][T10057] usb 5-1: USB disconnect, device number 26 [ 719.362310][T14183] syz.8.2475 (14183) used greatest stack depth: 16672 bytes left [ 720.278814][T14210] loop3: detected capacity change from 0 to 64 [ 720.324151][T14208] input: syz1 as /devices/virtual/input/input28 [ 720.752656][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 720.891317][T14218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.893233][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 722.439823][T14244] netlink: 65047 bytes leftover after parsing attributes in process `syz.8.2506'. [ 725.621504][T14300] fuse: Bad value for 'fd' [ 726.599439][T14318] loop8: detected capacity change from 0 to 2048 [ 726.614998][T14318] EXT4-fs: Ignoring removed nomblk_io_submit option [ 726.939060][T14318] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.504127][T13079] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.539647][T14337] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2534'. [ 727.637534][T14337] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2534'. [ 727.671697][T13079] Flush: task=syz-executor[13079] dev=loop8 state=2 [ 727.963453][T13079] Teardown: task=syz-executor[13079] dev=loop8 state=2 [ 730.948821][ T9] IPVS: starting estimator thread 0... [ 731.032860][T14395] IPVS: using max 7 ests per chain, 16800 per kthread [ 732.244787][T14415] netlink: 'syz.4.2565': attribute type 2 has an invalid length. [ 732.886012][T14420] loop6: detected capacity change from 0 to 65536 [ 733.021301][T14420] XFS (loop6): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 733.188161][T14420] XFS (loop6): Ending clean mount [ 733.415945][T13548] XFS (loop6): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 733.541235][T14434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2569'. [ 733.561540][T14434] bond0: entered promiscuous mode [ 733.561563][T14434] bond_slave_0: entered promiscuous mode [ 733.561834][T14434] bond_slave_1: entered promiscuous mode [ 733.594160][T14434] gretap0: entered promiscuous mode [ 733.601905][T14434] debugfs: 'hsr1' already exists in 'hsr' [ 733.601932][T14434] Cannot create hsr debugfs directory [ 733.601953][T14434] hsr1: entered promiscuous mode [ 733.658137][T14435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2569'. [ 733.916753][T14432] loop4: detected capacity change from 0 to 8192 [ 735.446030][ T5813] Flush: task=udevd[5813] dev=loop6 state=2 [ 735.803352][ T5813] Teardown: task=udevd[5813] dev=loop6 state=2 [ 736.319749][T14454] Process accounting resumed [ 737.949141][T14473] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2584'. [ 737.996788][T14475] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2584'. [ 737.999156][T14473] bond0: entered promiscuous mode [ 737.999176][T14473] bond_slave_0: entered promiscuous mode [ 737.999500][T14473] bond_slave_1: entered promiscuous mode [ 738.004944][T14473] gretap0: entered promiscuous mode [ 738.008446][T14473] debugfs: 'hsr1' already exists in 'hsr' [ 738.008518][T14473] Cannot create hsr debugfs directory [ 738.008579][T14473] hsr1: entered promiscuous mode [ 738.726191][T14487] loop3: detected capacity change from 0 to 512 [ 738.748056][T14487] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 738.834366][ T5599] Flush: task=syz-executor[5599] dev=loop4 state=2 [ 738.987306][T14487] EXT4-fs (loop3): 1 truncate cleaned up [ 739.013090][ T5599] Teardown: task=syz-executor[5599] dev=loop4 state=2 [ 739.098729][T14492] Process accounting resumed [ 739.138912][T14487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 739.342232][T14501] loop6: detected capacity change from 0 to 512 [ 739.353274][T14501] EXT4-fs: Ignoring removed bh option [ 739.491004][T14501] EXT4-fs (loop6): 1 truncate cleaned up [ 739.544651][T14501] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 739.996696][T14500] netlink: 'syz.8.2591': attribute type 2 has an invalid length. [ 740.075739][T13548] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.199822][T13548] Flush: task=syz-executor[13548] dev=loop6 state=2 [ 740.308689][T13548] Teardown: task=syz-executor[13548] dev=loop6 state=2 [ 740.733251][ T5716] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 740.955641][ T5716] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 740.955671][ T5716] usb 7-1: config 0 has no interface number 0 [ 740.955717][ T5716] usb 7-1: config 0 interface 41 has no altsetting 0 [ 740.959027][ T5716] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 740.959060][ T5716] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.959082][ T5716] usb 7-1: Product: syz [ 740.959096][ T5716] usb 7-1: Manufacturer: syz [ 740.959121][ T5716] usb 7-1: SerialNumber: syz [ 741.026462][ T5716] usb 7-1: config 0 descriptor?? [ 741.188336][ T5592] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.397732][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 741.645689][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 741.955773][ T5716] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 742.178826][ T5716] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 742.178856][ T5716] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 742.179211][ T5716] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 742.238343][ T5716] usb 7-1: USB disconnect, device number 2 [ 742.984043][T14552] loop6: detected capacity change from 0 to 512 [ 743.132864][T14552] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.2610: inode has both inline data and extents flags [ 743.132902][T14552] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 743.134568][T14552] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2610: couldn't read orphan inode 15 (err -117) [ 743.134656][T14552] loop6: lost filesystem error report for type 5 error -117 [ 743.199680][T14552] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 743.384870][T14552] EXT4-fs (loop6): shut down requested (2) [ 743.789857][T13548] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.935074][T13548] Flush: task=syz-executor[13548] dev=loop6 state=2 [ 744.046908][T13548] Teardown: task=syz-executor[13548] dev=loop6 state=2 [ 744.251418][T14573] loop4: detected capacity change from 0 to 128 [ 744.267288][T14573] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 744.267325][T14573] hpfs: filesystem error: improperly stopped [ 744.267341][T14573] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 744.267358][T14573] hpfs: You really don't want any checks? You are crazy... [ 744.267372][T14573] hpfs: Code page index out of array [ 744.267380][T14573] hpfs: code page support is disabled [ 744.267793][T14573] hpfs: hpfs_map_4sectors(): unaligned read [ 744.267897][T14573] hpfs: hpfs_map_4sectors(): unaligned read [ 744.267908][T14573] hpfs: filesystem error: unable to find root dir [ 744.603231][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 744.758173][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 744.758205][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.758226][ T9] usb 4-1: Product: syz [ 744.758240][ T9] usb 4-1: Manufacturer: syz [ 744.758255][ T9] usb 4-1: SerialNumber: syz [ 745.319834][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 745.319899][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 745.473209][ T5599] Flush: task=syz-executor[5599] dev=loop4 state=2 [ 745.753107][ T5599] Teardown: task=syz-executor[5599] dev=loop4 state=2 [ 745.935531][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 745.935593][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 746.034837][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 746.086776][ T9] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 746.126575][ T9] usb 4-1: USB disconnect, device number 28 [ 746.810244][T13548] do_umount: task=syz-executor[13548] propagate_mount_busy()!=0 [ 746.810556][T13548] do_umount: task=syz-executor[13548] propagate_mount_busy()!=0 [ 746.822310][T13548] do_umount: task=syz-executor[13548] propagate_mount_busy()!=0 [ 746.828470][T13548] do_umount: task=syz-executor[13548] propagate_mount_busy()!=0 [ 746.870736][T14631] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2645'. [ 746.995145][T14634] CUSE: info not properly terminated [ 747.244415][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.244532][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.576468][T14631] hsr_slave_1 (unregistering): left promiscuous mode [ 749.638075][ T5598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 749.818367][ T5598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 749.834942][ T5598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 749.837284][ T5598] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 749.840577][ T5598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 750.366333][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2655'. [ 751.743883][T14664] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.744335][T14664] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.744636][T14664] bridge_slave_0: entered allmulticast mode [ 751.748333][T14664] bridge_slave_0: entered promiscuous mode [ 751.777005][T14664] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.778174][T14664] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.779044][T14664] bridge_slave_1: entered allmulticast mode [ 751.790956][T14664] bridge_slave_1: entered promiscuous mode [ 751.937258][T14696] loop4: detected capacity change from 0 to 512 [ 751.941920][T14696] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 752.020226][T14664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.089819][T14664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.091696][ T61] Bluetooth: hci1: command tx timeout [ 752.095345][T14705] syz_tun: entered allmulticast mode [ 752.299677][T14696] EXT4-fs (loop4): 1 truncate cleaned up [ 752.350742][T14699] dvmrp8: entered allmulticast mode [ 752.377301][T14696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.506357][T14697] syz_tun: left allmulticast mode [ 752.632425][T14664] team0: Port device team_slave_0 added [ 752.697517][T14664] team0: Port device team_slave_1 added [ 752.952291][T14664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.952304][T14664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.952324][T14664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.992503][T14664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.992548][T14664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.995177][T14664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.220264][T14664] hsr_slave_0: entered promiscuous mode [ 753.221943][T14664] hsr_slave_1: entered promiscuous mode [ 753.224311][T14664] debugfs: 'hsr0' already exists in 'hsr' [ 753.224369][T14664] Cannot create hsr debugfs directory [ 753.610526][T14664] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 753.647496][T14664] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 753.648641][T14664] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 753.689044][T14664] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 753.690257][T14664] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 753.713229][T14664] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 753.714376][T14664] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 753.764295][T14664] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 753.964540][T14664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.012082][T14664] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.027025][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.027205][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.066044][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.066159][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.162847][ T61] Bluetooth: hci1: command tx timeout [ 754.736550][T14664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.101249][T14664] veth0_vlan: entered promiscuous mode [ 755.118456][T14664] veth1_vlan: entered promiscuous mode [ 755.175169][T14664] veth0_macvtap: entered promiscuous mode [ 755.189165][T14664] veth1_macvtap: entered promiscuous mode [ 755.248910][T14664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.291205][T14664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.347435][ T1036] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.365791][ T1036] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.382377][ T1036] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.392465][ T1036] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.244172][ T61] Bluetooth: hci1: command tx timeout [ 757.319125][ T1530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.319178][ T1530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.467448][ T1530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.467471][ T1530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.324085][ T61] Bluetooth: hci1: command tx timeout [ 759.573397][T14762] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2662'. [ 759.573433][T14762] netlink: 'syz.8.2662': attribute type 21 has an invalid length. [ 759.573448][T14762] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2662'. [ 759.630609][T14762] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2662'. [ 759.630645][T14762] netlink: 'syz.8.2662': attribute type 21 has an invalid length. [ 759.630661][T14762] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2662'. [ 759.666968][ T9395] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.668357][ T9395] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.668407][ T9395] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.668447][ T9395] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.234148][T14770] loop3: detected capacity change from 0 to 512 [ 760.313190][T14770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 760.313447][T14770] ext4 filesystem being mounted at /653/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 760.319859][T14770] EXT4-fs (loop3): shut down requested (2) [ 760.432209][ T5592] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.626745][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 760.745175][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 761.719653][T14806] loop8: detected capacity change from 0 to 2048 [ 761.784349][T14806] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 761.788442][T14806] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 762.227264][T13079] Flush: task=syz-executor[13079] dev=loop8 state=2 [ 762.343435][T13079] Teardown: task=syz-executor[13079] dev=loop8 state=2 [ 762.384628][T14815] loop3: detected capacity change from 0 to 512 [ 762.385644][T14815] EXT4-fs: Ignoring removed nomblk_io_submit option [ 762.388322][T14815] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 762.460751][T14815] EXT4-fs (loop3): 1 truncate cleaned up [ 762.469784][T14815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 762.867470][T14814] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.205576][T14804] loop9: detected capacity change from 0 to 40427 [ 763.206950][T14804] F2FS-fs: heap/no_heap options were deprecated [ 763.207034][T14804] f2fs: Unknown parameter 'io_bits' [ 763.207480][T14804] Flush: task=syz.9.2684[14804] dev=loop9 state=2 [ 763.407358][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 763.446742][T14804] Teardown: task=syz.9.2684[14804] dev=loop9 state=2 [ 763.484930][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 764.009024][T14832] batadv_slave_1: entered promiscuous mode [ 764.022158][T14830] batadv_slave_1: left promiscuous mode [ 764.649638][T14854] input: syz0 as /devices/virtual/input/input29 [ 764.654597][ T5598] Bluetooth: hci5: command 0x0406 tx timeout [ 765.485854][T14869] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2713'. [ 766.891519][T14877] loop8: detected capacity change from 0 to 131072 [ 767.179096][T14877] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 767.192994][T14877] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 767.371014][T14877] F2FS-fs (loop8): Stopped filesystem due to reason: 0 [ 767.503214][ T5598] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 767.624276][ T5598] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 767.643296][ T5598] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 767.794322][ T5598] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 767.797749][ T5598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 768.014418][T14910] loop9: detected capacity change from 0 to 128 [ 768.226489][T14910] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 768.911782][T13079] Flush: task=syz-executor[13079] dev=loop8 state=2 [ 769.006033][T14664] Flush: task=syz-executor[14664] dev=loop9 state=2 [ 769.080840][T13079] Teardown: task=syz-executor[13079] dev=loop8 state=2 [ 769.271146][T14664] Teardown: task=syz-executor[14664] dev=loop9 state=2 [ 769.718324][T14937] loop9: detected capacity change from 0 to 512 [ 769.744743][T14937] EXT4-fs: Ignoring removed mblk_io_submit option [ 769.761677][T14937] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 769.882294][T14937] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 769.904692][T14937] EXT4-fs (loop9): orphan cleanup on readonly fs [ 770.169567][ T61] Bluetooth: hci3: command tx timeout [ 770.184437][T14937] Quota error (device loop9): do_insert_tree: Free block already used in tree: block 4 [ 770.184537][T14937] Quota error (device loop9): qtree_write_dquot: Error -5 occurred while creating quota [ 770.184631][T14937] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.2736: Failed to acquire dquot type 1 [ 770.184656][T14937] loop9: lost filesystem error report for type 5 error -5 [ 770.192639][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 770.192665][ C1] EXT4-fs (loop9): last error at time 1784279826: ext4_acquire_dquot:7041 [ 770.484474][T14937] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.2736: Invalid block bitmap block 0 in block_group 0 [ 770.484516][T14937] loop9: lost filesystem error report for type 5 error -117 [ 770.831313][T14937] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.2736: Invalid block bitmap block 0 in block_group 0 [ 770.831371][T14937] loop9: lost filesystem error report for type 5 error -117 [ 770.998300][T14937] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.2736: Invalid block bitmap block 0 in block_group 0 [ 770.998339][T14937] loop9: lost filesystem error report for type 5 error -117 [ 770.999073][T14937] Quota error (device loop9): write_blk: dquota write failed [ 770.999197][T14937] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 770.999240][T14937] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.2736: Failed to acquire dquot type 1 [ 770.999273][T14937] loop9: lost filesystem error report for type 5 error -28 [ 771.052745][ T5694] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 771.135244][T14937] Quota error (device loop9): write_blk: dquota write failed [ 771.135410][T14937] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 771.135453][T14937] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.2736: Failed to acquire dquot type 1 [ 771.135477][T14937] loop9: lost filesystem error report for type 5 error -28 [ 771.174980][T14937] EXT4-fs (loop9): 1 orphan inode deleted [ 771.242990][ T5694] usb 4-1: Using ep0 maxpacket: 32 [ 771.245294][ T5694] usb 4-1: config 0 interface 0 has no altsetting 0 [ 771.248273][ T5694] usb 4-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=b8.da [ 771.248303][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.248325][ T5694] usb 4-1: Product: syz [ 771.248341][ T5694] usb 4-1: Manufacturer: syz [ 771.248357][ T5694] usb 4-1: SerialNumber: syz [ 771.305241][ T5694] usb 4-1: config 0 descriptor?? [ 771.439725][T14937] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 771.563831][ T5694] snd_usb_podhd 4-1:0.0: Line 6 POD HD500X found [ 771.570161][ T5694] snd_usb_podhd 4-1:0.0: set_interface failed [ 771.570553][ T5694] snd_usb_podhd 4-1:0.0: Line 6 POD HD500X now disconnected [ 771.570780][ T5694] snd_usb_podhd 4-1:0.0: probe with driver snd_usb_podhd failed with error -71 [ 771.606726][ T5694] usb 4-1: USB disconnect, device number 29 [ 771.732566][T14664] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.872556][T14664] Flush: task=syz-executor[14664] dev=loop9 state=2 [ 771.960968][T14664] Teardown: task=syz-executor[14664] dev=loop9 state=2 [ 772.192487][ T5694] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 772.245254][ T61] Bluetooth: hci3: command tx timeout [ 772.467051][ T5694] usb 4-1: Using ep0 maxpacket: 32 [ 772.469800][ T5694] usb 4-1: config 0 interface 0 has no altsetting 0 [ 772.489140][ T5694] usb 4-1: string descriptor 0 read error: -22 [ 772.489294][ T5694] usb 4-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=b8.da [ 772.489322][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.578481][ T5694] usb 4-1: config 0 descriptor?? [ 772.610667][ T5694] snd_usb_podhd 4-1:0.0: Line 6 POD HD500X found [ 772.836228][ T5694] snd_usb_podhd 4-1:0.0: endpoint not available, using fallback values [ 772.836534][ T5694] snd_usb_podhd 4-1:0.0: invalid control EP [ 772.836550][ T5694] snd_usb_podhd 4-1:0.0: cannot start listening: -22 [ 772.836938][ T5694] snd_usb_podhd 4-1:0.0: Line 6 POD HD500X now disconnected [ 772.837338][ T5694] snd_usb_podhd 4-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 772.976951][T15003] loop8: detected capacity change from 0 to 64 [ 773.067709][ T5694] usb 4-1: USB disconnect, device number 30 [ 773.123498][T15003] hfs: request for non-existent node 65538 in B*Tree [ 773.123521][T15003] hfs: request for non-existent node 65538 in B*Tree [ 773.123533][T15003] hfs: fail to find leaf node: node ID 65538 [ 773.385686][T14902] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.386090][T14902] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.386444][T14902] bridge_slave_0: entered allmulticast mode [ 773.427218][T14902] bridge_slave_0: entered promiscuous mode [ 773.573144][T14902] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.573484][T14902] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.573949][T14902] bridge_slave_1: entered allmulticast mode [ 773.607774][T14902] bridge_slave_1: entered promiscuous mode [ 773.880056][T14902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.924480][T14902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.160807][T14902] team0: Port device team_slave_0 added [ 774.178965][T14902] team0: Port device team_slave_1 added [ 774.349711][ T61] Bluetooth: hci3: command tx timeout [ 774.390745][T13079] Flush: task=syz-executor[13079] dev=loop8 state=2 [ 774.472793][T13079] Teardown: task=syz-executor[13079] dev=loop8 state=2 [ 774.662235][T14902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.662255][T14902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.662285][T14902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.683878][ T5581] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 774.733689][T14902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.733708][T14902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.733739][T14902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.836385][ T5581] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.836415][ T5581] usb 10-1: config 0 has no interfaces? [ 774.836452][ T5581] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 774.836470][ T5581] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.920840][ T5581] usb 10-1: config 0 descriptor?? [ 775.188534][T15044] loop8: detected capacity change from 0 to 256 [ 775.223251][T15044] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 775.265201][ T5694] usb 10-1: USB disconnect, device number 2 [ 775.395487][T14902] hsr_slave_0: entered promiscuous mode [ 775.414674][T14902] hsr_slave_1: entered promiscuous mode [ 775.427461][T14902] debugfs: 'hsr0' already exists in 'hsr' [ 775.427549][T14902] Cannot create hsr debugfs directory [ 775.503223][ T1530] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 775.726094][T13079] Flush: task=syz-executor[13079] dev=loop8 state=2 [ 775.917989][T13079] Teardown: task=syz-executor[13079] dev=loop8 state=2 [ 776.046798][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2779'. [ 776.175541][T15062] loop8: detected capacity change from 0 to 256 [ 776.181527][T15062] exfat: Deprecated parameter 'namecase' [ 776.181595][T15062] exfat: Deprecated parameter 'namecase' [ 776.285942][T15062] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 776.368387][T15065] loop9: detected capacity change from 0 to 4096 [ 776.369642][T15065] EXT4-fs: Ignoring removed mblk_io_submit option [ 776.372429][T15065] EXT4-fs (loop9): Test dummy encryption mode enabled [ 776.406889][ T61] Bluetooth: hci3: command tx timeout [ 776.608772][T15065] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 777.461599][T13079] Flush: task=syz-executor[13079] dev=loop8 state=2 [ 777.523738][T15065] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 777.615946][T13079] Teardown: task=syz-executor[13079] dev=loop8 state=2 [ 777.689777][T14664] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.745397][T14664] Flush: task=syz-executor[14664] dev=loop9 state=2 [ 777.953312][T14664] Teardown: task=syz-executor[14664] dev=loop9 state=2 [ 778.534821][T15095] ieee802154 phy0 wpan0: encryption failed: -22 [ 779.860833][T15116] loop3: detected capacity change from 0 to 4096 [ 780.509773][T15113] loop8: detected capacity change from 0 to 131072 [ 780.605528][T15113] F2FS-fs (loop8): invalid crc value [ 780.737454][T15113] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 780.858950][T15113] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 781.287636][ T5813] Flush: task=udevd[5813] dev=loop3 state=2 [ 781.454903][ T5813] Teardown: task=udevd[5813] dev=loop3 state=2 [ 782.009206][ T61] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 782.336144][T15146] binder: 15145:15146 ioctl c0306201 200000000640 returned -22 [ 782.603172][T15148] loop3: detected capacity change from 0 to 512 [ 782.606833][T15148] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 782.725441][T15148] EXT4-fs (loop3): 1 truncate cleaned up [ 782.821097][T15148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.482017][T15150] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.577001][T15150] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.141750][ T5592] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.183268][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 784.347089][T13079] Flush: task=syz-executor[13079] dev=loop8 state=2 [ 784.399734][T15154] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.448743][T15154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.449197][T15154] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.449400][T15154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.454812][T15154] bridge0: entered promiscuous mode [ 784.454845][T15154] bridge0: entered allmulticast mode [ 784.459897][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 784.553048][T13079] Teardown: task=syz-executor[13079] dev=loop8 state=2 [ 787.362080][T15212] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2822'. [ 787.362109][T15212] netlink: 35 bytes leftover after parsing attributes in process `syz.7.2822'. [ 787.362127][T15212] netlink: 'syz.7.2822': attribute type 5 has an invalid length. [ 787.362143][T15212] netlink: 'syz.7.2822': attribute type 6 has an invalid length. [ 787.362156][T15212] netlink: 35 bytes leftover after parsing attributes in process `syz.7.2822'. [ 787.758859][T15237] loop9: detected capacity change from 0 to 256 [ 787.874770][T15237] FAT-fs (loop9): bogus number of FAT sectors [ 787.874793][T15237] FAT-fs (loop9): Can't find a valid FAT filesystem [ 788.081688][ T5813] Flush: task=udevd[5813] dev=loop9 state=2 [ 788.195013][ T5813] Teardown: task=udevd[5813] dev=loop9 state=2 [ 789.359090][T15265] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2839'. [ 791.096201][T15294] loop9: detected capacity change from 0 to 64 [ 792.145857][T15294] syz.9.2846: attempt to access beyond end of device [ 792.145857][T15294] loop9: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 792.164613][T15294] Buffer I/O error on dev loop9, logical block 512, async page read [ 792.263948][T15294] syz.9.2846: attempt to access beyond end of device [ 792.263948][T15294] loop9: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 792.264049][T15294] Buffer I/O error on dev loop9, logical block 56576, async page read [ 792.807306][T14902] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 792.882225][T14902] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 792.891911][T14902] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 793.009808][T14902] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 793.011516][T14902] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 793.094083][T14902] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 793.095189][T14902] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 793.210663][T14902] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 793.283629][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.442007][T14664] Flush: task=syz-executor[14664] dev=loop9 state=2 [ 793.603400][T14664] Teardown: task=syz-executor[14664] dev=loop9 state=2 [ 794.173303][T14902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.339201][T14902] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.413380][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.414161][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.440959][T15338] loop9: detected capacity change from 0 to 128 [ 794.454420][T15338] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 794.495957][T15338] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 794.535562][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.535746][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.553317][T15340] loop3: detected capacity change from 0 to 512 [ 794.596771][T15340] EXT4-fs (loop3): Test dummy encryption mode enabled [ 794.857490][T15340] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.2855: corrupted in-inode xattr: invalid ea_ino [ 794.857530][T15340] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 794.863652][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 794.863678][ C0] EXT4-fs (loop3): initial error at time 1784279850: ext4_iget_extra_inode:5180: inode 15 [ 794.863711][ C0] EXT4-fs (loop3): last error at time 1784279850: ext4_iget_extra_inode:5180: inode 15 [ 794.911753][T15340] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2855: couldn't read orphan inode 15 (err -117) [ 794.911790][T15340] loop3: lost filesystem error report for type 5 error -117 [ 794.974305][T15340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 795.324695][T14664] Flush: task=syz-executor[14664] dev=loop9 state=2 [ 795.599380][T14664] Teardown: task=syz-executor[14664] dev=loop9 state=2 [ 795.832250][ T5592] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.061901][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 796.257210][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 797.545994][T15386] loop9: detected capacity change from 0 to 256 [ 797.686523][T13079] do_umount: task=syz-executor[13079] propagate_mount_busy()!=0 [ 797.686793][T13079] do_umount: task=syz-executor[13079] propagate_mount_busy()!=0 [ 798.139193][T14664] Flush: task=syz-executor[14664] dev=loop9 state=2 [ 798.190151][T14902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.315797][T14664] Teardown: task=syz-executor[14664] dev=loop9 state=2 [ 798.488085][T10057] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 798.646963][T10057] usb 4-1: Using ep0 maxpacket: 16 [ 798.649781][T10057] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.649809][T10057] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 798.649859][T10057] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 798.649884][T10057] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.769011][T10057] usb 4-1: config 0 descriptor?? [ 799.034838][T15403] loop8: detected capacity change from 0 to 7 [ 799.053096][ T5581] usb 4-1: USB disconnect, device number 31 [ 799.117731][T15403] Dev loop8: unable to read RDB block 7 [ 799.117778][T15403] loop8: unable to read partition table [ 799.117999][T15403] loop8: partition table beyond EOD, truncated [ 799.118041][T15403] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 799.232220][ T5813] Flush: task=udevd[5813] dev=loop8 state=2 [ 799.433318][ T5813] Teardown: task=udevd[5813] dev=loop8 state=2 [ 799.510017][T14902] veth0_vlan: entered promiscuous mode [ 799.869244][T14902] veth1_vlan: entered promiscuous mode [ 801.268782][ T5598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 801.341885][ T5598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 801.360378][ T5598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 801.404312][ T5598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 801.434652][ T5598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 801.913292][ T5716] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 802.090474][ T1530] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.090512][ T1530] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.099512][ T5716] usb 4-1: Using ep0 maxpacket: 8 [ 802.159240][ T5716] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 802.159272][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.159294][ T5716] usb 4-1: Product: syz [ 802.159309][ T5716] usb 4-1: Manufacturer: syz [ 802.159323][ T5716] usb 4-1: SerialNumber: syz [ 802.220329][ T5716] usb 4-1: config 0 descriptor?? [ 802.439679][ T5716] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 802.652070][ T5716] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 802.673685][ T5716] usb 4-1: USB disconnect, device number 32 [ 802.992937][ T32] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 803.134845][T14902] veth0_macvtap: entered promiscuous mode [ 803.166523][ T32] usb 10-1: Using ep0 maxpacket: 32 [ 803.189703][ T32] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 803.189733][ T32] usb 10-1: config 0 has no interface number 0 [ 803.220337][ T32] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 803.220372][ T32] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.220395][ T32] usb 10-1: Product: syz [ 803.220411][ T32] usb 10-1: Manufacturer: syz [ 803.220426][ T32] usb 10-1: SerialNumber: syz [ 803.293634][ T32] usb 10-1: config 0 descriptor?? [ 803.430122][T14902] veth1_macvtap: entered promiscuous mode [ 803.732926][ T32] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 803.732960][ T32] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 803.925717][ T61] Bluetooth: hci5: command tx timeout [ 804.279155][ T32] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 804.279475][ T32] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 804.335468][T14902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.361514][ T32] usb 10-1: USB disconnect, device number 3 [ 804.582541][T14902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.854637][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.855347][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.856349][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.887547][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.424372][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2894'. [ 805.577404][ T1530] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.577444][ T1530] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.002727][ T61] Bluetooth: hci5: command tx timeout [ 806.016751][ T38] audit: type=1326 audit(1784279861.859:53): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15521 comm="syz.3.2896" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45557de99 code=0x7ffc0000 [ 806.018884][ T38] audit: type=1326 audit(1784279861.859:54): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15521 comm="syz.3.2896" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45557de99 code=0x7ffc0000 [ 806.019027][ T38] audit: type=1326 audit(1784279861.859:55): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15521 comm="syz.3.2896" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45557de99 code=0x7ffc0000 [ 806.019729][ T38] audit: type=1326 audit(1784279861.859:56): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15521 comm="syz.3.2896" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45557de99 code=0x7ffc0000 [ 806.020485][ T38] audit: type=1326 audit(1784279861.859:57): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15521 comm="syz.3.2896" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff45557de99 code=0x7ffc0000 [ 806.075399][ T38] audit: type=1326 audit(1784279861.859:58): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15521 comm="syz.3.2896" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45557de99 code=0x7ffc0000 [ 806.075545][ T38] audit: type=1326 audit(1784279861.919:59): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15521 comm="syz.3.2896" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45557de99 code=0x7ffc0000 [ 806.076572][ T38] audit: type=1326 audit(1784279861.919:60): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15521 comm="syz.3.2896" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45557de99 code=0x7ffc0000 [ 806.078148][ T38] audit: type=1326 audit(1784279861.919:61): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15521 comm="syz.3.2896" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45557de99 code=0x7ffc0000 [ 806.078871][ T38] audit: type=1326 audit(1784279861.919:62): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15521 comm="syz.3.2896" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff45557de99 code=0x7ffc0000 [ 807.091909][ T1530] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.091946][ T1530] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.087658][ T61] Bluetooth: hci5: command tx timeout [ 808.273781][T15550] sit0: entered promiscuous mode [ 808.342479][T15550] netlink: 'syz.3.2902': attribute type 1 has an invalid length. [ 808.342506][T15550] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2902'. [ 808.681247][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.681365][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.397703][ T1530] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.397743][ T1530] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.177293][ T61] Bluetooth: hci5: command tx timeout [ 810.298022][T15005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.298045][T15005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.749272][T15606] loop3: detected capacity change from 0 to 128 [ 810.966966][T15606] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 810.967003][T15606] hpfs: filesystem error: improperly stopped [ 810.967018][T15606] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 810.967034][T15606] hpfs: You really don't want any checks? You are crazy... [ 810.967048][T15606] hpfs: Code page index out of array [ 810.967057][T15606] hpfs: code page support is disabled [ 810.967173][T15606] hpfs: hpfs_map_4sectors(): unaligned read [ 810.967278][T15606] hpfs: hpfs_map_4sectors(): unaligned read [ 810.967290][T15606] hpfs: filesystem error: unable to find root dir [ 811.107061][T15606] hpfs: hpfs_map_4sectors(): unaligned read [ 811.472303][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 811.551675][T13820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.551697][T13820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.744317][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 812.361530][T15627] loop3: detected capacity change from 0 to 4096 [ 812.711107][T15627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.984809][T15639] loop1: detected capacity change from 0 to 128 [ 813.588205][T15639] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 813.591556][T15639] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 813.663255][T15627] EXT4-fs error (device loop3): ext4_empty_dir:3101: inode #12: block 80: comm syz.3.2918: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 813.786326][T15627] EXT4-fs warning (device loop3): ext4_empty_dir:3104: inode #12: comm syz.3.2918: directory missing '..' [ 813.982479][T14902] do_umount: task=syz-executor[14902] propagate_mount_busy()!=0 [ 813.985040][T14902] do_umount: task=syz-executor[14902] propagate_mount_busy()!=0 [ 814.080885][ T5592] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.366234][T14902] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 814.369503][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 814.778818][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 815.064175][ T1530] bridge_slave_1: left allmulticast mode [ 815.064215][ T1530] bridge_slave_1: left promiscuous mode [ 815.085806][ T1530] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.404448][ T1530] bridge_slave_0: left allmulticast mode [ 815.404528][ T1530] bridge_slave_0: left promiscuous mode [ 815.404814][ T1530] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.489206][ T38] kauditd_printk_skb: 126 callbacks suppressed [ 815.489227][ T38] audit: type=1800 audit(1784279871.309:189): pid=15674 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.3.2932" name="file1" dev="overlay" ino=3871 res=0 errno=0 [ 816.154278][ T32] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 816.223224][T15682] loop9: detected capacity change from 0 to 40427 [ 816.257404][T15682] F2FS-fs (loop9): Image doesn't support compression [ 816.257432][T15682] F2FS-fs (loop9): build fault injection rate: 690 [ 816.261619][T15682] F2FS-fs (loop9): invalid crc value [ 816.420549][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.420585][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.420686][ T32] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 816.420712][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.497514][ T32] usb 4-1: config 0 descriptor?? [ 816.528085][T15682] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 816.562056][T15682] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 816.659643][ T38] audit: type=1800 audit(1784279872.509:190): pid=15682 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.9.2936" name="file1" dev="loop9" ino=10 res=0 errno=0 [ 817.106723][T15682] syz.9.2936: attempt to access beyond end of device [ 817.106723][T15682] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 817.107447][T15682] CPU: 0 UID: 0 PID: 15682 Comm: syz.9.2936 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 817.107483][T15682] Tainted: [L]=SOFTLOCKUP [ 817.107492][T15682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 817.107508][T15682] Call Trace: [ 817.107517][T15682] [ 817.107525][T15682] dump_stack_lvl+0xe8/0x150 [ 817.107563][T15682] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 817.107593][T15682] f2fs_write_end_io+0x124b/0x1710 [ 817.107642][T15682] __submit_merged_bio+0x258/0x6a0 [ 817.107666][T15682] ? rcu_is_watching+0x15/0xb0 [ 817.107699][T15682] __submit_merged_write_cond+0x3c9/0x4e0 [ 817.107731][T15682] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 817.107777][T15682] f2fs_write_data_pages+0x2a27/0x36f0 [ 817.107838][T15682] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 817.107909][T15682] ? do_raw_spin_lock+0x12b/0x2f0 [ 817.107945][T15682] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 817.107977][T15682] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 817.108002][T15682] ? reacquire_held_locks+0x117/0x1a0 [ 817.108027][T15682] ? rt_spin_lock+0x1e0/0x400 [ 817.108058][T15682] ? rt_spin_unlock+0x157/0x200 [ 817.108085][T15682] ? rt_spin_unlock+0x163/0x200 [ 817.108107][T15682] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 817.108138][T15682] do_writepages+0x338/0x560 [ 817.108170][T15682] ? rt_spin_unlock+0x157/0x200 [ 817.108216][T15682] filemap_fdatawrite+0x1ec/0x2f0 [ 817.108249][T15682] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 817.108275][T15682] ? do_raw_spin_lock+0x12b/0x2f0 [ 817.108332][T15682] ? rt_spin_unlock+0x157/0x200 [ 817.108362][T15682] ? rt_spin_unlock+0x163/0x200 [ 817.108387][T15682] f2fs_sync_dirty_inodes+0x30e/0x830 [ 817.108434][T15682] f2fs_write_checkpoint+0x999/0x26b0 [ 817.108502][T15682] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 817.108594][T15682] f2fs_gc+0x1f3a/0x2610 [ 817.108614][T15682] ? __lock_acquire+0x6df/0x2e40 [ 817.108665][T15682] ? __pfx_f2fs_gc+0x10/0x10 [ 817.108700][T15682] ? do_raw_spin_lock+0x12b/0x2f0 [ 817.108747][T15682] ? rcu_is_watching+0x15/0xb0 [ 817.108781][T15682] f2fs_balance_fs+0x61c/0x810 [ 817.108811][T15682] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 817.108831][T15682] ? f2fs_map_blocks+0x3b60/0x46d0 [ 817.108856][T15682] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 817.108898][T15682] ? trace_lock_elapsed_time_end+0xf1/0xbc0 [ 817.108923][T15682] ? restore_priority+0x1af/0x450 [ 817.108957][T15682] f2fs_map_blocks+0x3b60/0x46d0 [ 817.109028][T15682] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 817.109061][T15682] ? invalidate_inode_pages2_range+0xa7e/0xb30 [ 817.109093][T15682] ? __pfx_stack_trace_save+0x10/0x10 [ 817.109119][T15682] ? stack_depot_save_flags+0x33/0x800 [ 817.109156][T15682] ? filemap_check_errors+0xd2/0x120 [ 817.109198][T15682] ? filemap_write_and_wait_range+0x1e9/0x3f0 [ 817.109227][T15682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.109256][T15682] f2fs_iomap_begin+0x3c4/0x8f0 [ 817.109291][T15682] ? __pfx_f2fs_iomap_begin+0x10/0x10 [ 817.109348][T15682] ? __pfx_f2fs_iomap_begin+0x10/0x10 [ 817.109376][T15682] iomap_iter+0x5f5/0xf80 [ 817.109407][T15682] ? blk_start_plug+0x6e/0x1b0 [ 817.109434][T15682] __iomap_dio_rw+0xc8a/0x1c40 [ 817.109490][T15682] ? __pfx___iomap_dio_rw+0x10/0x10 [ 817.109519][T15682] ? do_raw_spin_lock+0x12b/0x2f0 [ 817.109572][T15682] ? __pfx_down_read+0x10/0x10 [ 817.109614][T15682] f2fs_file_write_iter+0x17bb/0x27d0 [ 817.109670][T15682] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 817.109726][T15682] vfs_write+0x61e/0xbb0 [ 817.109771][T15682] ? __pfx_vfs_write+0x10/0x10 [ 817.109809][T15682] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 817.109845][T15682] ? lockdep_hardirqs_on+0x7a/0x110 [ 817.109884][T15682] ? mutex_lock_nested+0x152/0x1d0 [ 817.109911][T15682] ? fdget_pos+0x252/0x320 [ 817.109954][T15682] ksys_write+0x156/0x270 [ 817.109990][T15682] ? __pfx_ksys_write+0x10/0x10 [ 817.110036][T15682] do_syscall_64+0x17b/0x530 [ 817.110073][T15682] ? irqentry_exit+0x10f/0x8f0 [ 817.110109][T15682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.110132][T15682] ? clear_bhb_loop+0x40/0x90 [ 817.110164][T15682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.110185][T15682] RIP: 0033:0x7fd918acde99 [ 817.110212][T15682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.110229][T15682] RSP: 002b:00007fd916d26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 817.110252][T15682] RAX: ffffffffffffffda RBX: 00007fd918d55fa0 RCX: 00007fd918acde99 [ 817.110266][T15682] RDX: 000000000000000d RSI: 0000200000000400 RDI: 0000000000000004 [ 817.110278][T15682] RBP: 00007fd918b63eaf R08: 0000000000000000 R09: 0000000000000000 [ 817.110289][T15682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.110300][T15682] R13: 00007fd918d56038 R14: 00007fd918d55fa0 R15: 00007ffcdcf83968 [ 817.110335][T15682] [ 817.110345][T15682] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 817.812283][ T32] hid-led 0003:27B8:01ED.000C: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 818.358575][T14664] Flush: task=syz-executor[14664] dev=loop9 state=2 [ 818.465530][ T32] hid-led 0003:27B8:01ED.000C: ThingM blink(1) v1 initialized [ 818.485921][ T32] usb 4-1: USB disconnect, device number 33 [ 818.501577][T14664] Teardown: task=syz-executor[14664] dev=loop9 state=2 [ 818.572998][ T1530] gretap0 (unregistering): left promiscuous mode [ 819.402863][ T1530] bond0 (unregistering): left promiscuous mode [ 819.402889][ T1530] bond_slave_0: left promiscuous mode [ 819.403143][ T1530] bond_slave_1: left promiscuous mode [ 819.555970][ T1530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 819.613827][ T1530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.752545][ T1530] bond0 (unregistering): Released all slaves [ 820.311092][ T9] libceph: connect (1)[c::]:6789 error -101 [ 820.312266][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 820.425457][ T32] libceph: connect (1)[c::]:6789 error -101 [ 820.425645][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 820.452174][T15718] ceph: No mds server is up or the cluster is laggy [ 820.453720][ T32] libceph: connect (1)[c::]:6789 error -101 [ 820.504052][T15713] ceph: No mds server is up or the cluster is laggy [ 820.528585][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 820.721033][ T9] libceph: connect (1)[c::]:6789 error -101 [ 820.752385][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 820.786524][ T5713] libceph: connect (1)[c::]:6789 error -101 [ 821.098543][T15444] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.098897][T15444] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.099259][T15444] bridge_slave_0: entered allmulticast mode [ 821.109249][T15444] bridge_slave_0: entered promiscuous mode [ 821.156764][T15444] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.157088][T15444] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.161852][T15444] bridge_slave_1: entered allmulticast mode [ 821.191149][ T5713] libceph: mon0 (1)[c::]:6789 connect error [ 821.211438][T15444] bridge_slave_1: entered promiscuous mode [ 821.258686][ T9] libceph: connect (1)[c::]:6789 error -101 [ 821.258899][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 821.530123][T15444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.632540][T15444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.697962][ T5713] libceph: connect (1)[c::]:6789 error -101 [ 821.724023][ T5713] libceph: mon0 (1)[c::]:6789 connect error [ 823.269205][ T5598] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 823.489688][ T5598] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 823.513924][ T5598] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 823.553051][ T5598] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 823.567438][ T5598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 824.337200][T15444] team0: Port device team_slave_0 added [ 824.347076][ T5253] 8021q: adding VLAN 0 to HW filter on device eth1 [ 824.442230][T15444] team0: Port device team_slave_1 added [ 824.769468][T15444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.769485][T15444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.769512][T15444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.777921][T15444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.777939][T15444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.777966][T15444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.981458][T15769] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2959'. [ 825.423795][T15779] overlayfs: failed to resolve 'cgroup': -2 [ 826.003213][ T5598] Bluetooth: hci3: command tx timeout [ 826.134704][T15444] hsr_slave_0: entered promiscuous mode [ 826.140994][T15444] hsr_slave_1: entered promiscuous mode [ 826.157784][T15444] debugfs: 'hsr0' already exists in 'hsr' [ 826.157813][T15444] Cannot create hsr debugfs directory [ 826.612800][ T1530] hsr_slave_0: left promiscuous mode [ 826.652794][ T1530] hsr_slave_1: left promiscuous mode [ 826.654092][ T1530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.654120][ T1530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.695179][ T1530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.695208][ T1530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.839865][ T1530] veth1_macvtap: left promiscuous mode [ 826.839943][ T1530] veth0_macvtap: left promiscuous mode [ 826.840095][ T1530] veth1_vlan: left promiscuous mode [ 826.840238][ T1530] veth0_vlan: left promiscuous mode [ 828.083040][ T5598] Bluetooth: hci3: command tx timeout [ 829.421373][T15833] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2978'. [ 829.696640][ T1530] team0 (unregistering): Port device team_slave_1 removed [ 829.930841][ T1530] team0 (unregistering): Port device team_slave_0 removed [ 830.162982][ T5598] Bluetooth: hci3: command tx timeout [ 830.848935][ T5253] 8021q: adding VLAN 0 to HW filter on device eth2 [ 831.030397][T15847] loop3: detected capacity change from 0 to 64 [ 831.485880][ T5592] hfs: node 4:3 still has 1 user(s)! [ 831.491122][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 831.573512][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 832.243036][ T5598] Bluetooth: hci3: command tx timeout [ 833.739816][T15877] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2991'. [ 835.081509][ T5253] 8021q: adding VLAN 0 to HW filter on device eth3 [ 835.724403][ T824] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 835.882779][ T824] usb 4-1: Using ep0 maxpacket: 32 [ 835.889222][ T824] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 835.889252][ T824] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 835.889279][ T824] usb 4-1: config 0 interface 0 has no altsetting 0 [ 835.963604][ T824] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 835.963636][ T824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.963657][ T824] usb 4-1: Product: syz [ 835.963673][ T824] usb 4-1: Manufacturer: syz [ 835.963688][ T824] usb 4-1: SerialNumber: syz [ 835.969963][ T824] usb 4-1: config 0 descriptor?? [ 836.423594][T15921] loop9: detected capacity change from 0 to 32768 [ 836.424954][T15921] btrfs: Deprecated parameter 'usebackuproot' [ 836.424978][T15921] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 836.458747][T15921] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3004 (15921) [ 836.562185][T15921] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 836.562223][T15921] BTRFS info (device loop9): using crc32c checksum algorithm [ 836.771731][ T824] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 836.989281][ T1043] BTRFS warning (device loop9): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 836.993621][T15921] BTRFS error (device loop9): failed to load root extent [ 836.993671][T15921] BTRFS warning (device loop9): try to load backup roots slot 1 [ 837.006883][ T1043] BTRFS warning (device loop9): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 837.007030][T15921] BTRFS warning (device loop9): couldn't read tree root [ 837.007054][T15921] BTRFS warning (device loop9): try to load backup roots slot 2 [ 837.009017][ T1043] BTRFS error (device loop9): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 837.009144][T15921] BTRFS warning (device loop9): couldn't read tree root [ 837.009167][T15921] BTRFS warning (device loop9): try to load backup roots slot 3 [ 837.136791][T15921] BTRFS info (device loop9): rebuilding free space tree [ 837.305041][ T824] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 837.489380][ T824] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 837.542212][T15921] BTRFS info (device loop9): checking UUID tree [ 837.546759][T15921] BTRFS info (device loop9): enabling ssd optimizations [ 837.546829][T15921] BTRFS info (device loop9): turning on async discard [ 837.546869][T15921] BTRFS info (device loop9): enabling free space tree [ 837.546919][T15921] BTRFS info (device loop9): force clearing of disk cache [ 837.546964][T15921] BTRFS info (device loop9): enabling auto defrag [ 837.547014][T15921] BTRFS info (device loop9): trying to use backup root at mount time [ 837.547066][T15921] BTRFS info (device loop9): use zstd compression, level 3 [ 837.815026][ T824] usb 4-1: USB disconnect, device number 34 [ 838.338820][ T5253] 8021q: adding VLAN 0 to HW filter on device eth4 [ 838.473992][T15954] loop3: detected capacity change from 0 to 512 [ 838.511654][T14664] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 838.565548][T15954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 838.565696][T15954] ext4 filesystem being mounted at /756/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 839.594299][ T5813] Flush: task=udevd[5813] dev=loop9 state=2 [ 839.699059][T15957] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 840.044868][ T5813] Teardown: task=udevd[5813] dev=loop9 state=2 [ 840.301904][ T5592] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.438222][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 840.666403][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 840.898619][ T1530] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.469526][T15977] Flush: task=syz.3.3016[15977] dev=loop3 state=2 [ 841.641183][T15977] Teardown: task=syz.3.3016[15977] dev=loop3 state=2 [ 842.032307][T15988] loop3: detected capacity change from 0 to 4096 [ 843.017203][T15749] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.017659][T15749] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.017997][T15749] bridge_slave_0: entered allmulticast mode [ 843.070137][T15749] bridge_slave_0: entered promiscuous mode [ 843.106902][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 843.210913][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 843.638800][ T1530] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.697125][T15749] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.697572][T15749] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.697897][T15749] bridge_slave_1: entered allmulticast mode [ 843.724195][T15749] bridge_slave_1: entered promiscuous mode [ 844.401536][T15749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.118859][T16026] netlink: 260 bytes leftover after parsing attributes in process `syz.9.3033'. [ 845.253839][T16028] loop3: detected capacity change from 0 to 1764 [ 845.582454][ T1530] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.751449][T16035] loop8: detected capacity change from 0 to 8 [ 845.789431][T16035] Dev loop8: unable to read RDB block 8 [ 845.789487][T16035] loop8: unable to read partition table [ 845.789709][T16035] loop8: partition table beyond EOD, truncated [ 845.789752][T16035] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 845.882400][ T5813] Flush: task=udevd[5813] dev=loop8 state=2 [ 846.203488][T15749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.303314][ T5813] Teardown: task=udevd[5813] dev=loop8 state=2 [ 846.588176][T15749] team0: Port device team_slave_0 added [ 846.639273][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 846.657185][T15749] team0: Port device team_slave_1 added [ 846.730295][T16051] loop9: detected capacity change from 0 to 8192 [ 846.837983][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 847.124159][ T5713] IPVS: starting estimator thread 0... [ 847.487695][T16060] IPVS: using max 12 ests per chain, 28800 per kthread [ 847.750536][ T1530] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.891463][T14664] Flush: task=syz-executor[14664] dev=loop9 state=2 [ 847.955943][T14664] Teardown: task=syz-executor[14664] dev=loop9 state=2 [ 848.143855][T15749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.143875][T15749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.143909][T15749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.220593][T15749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.220613][T15749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.220643][T15749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.534652][T10057] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 848.686803][T10057] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 848.686838][T10057] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 848.686883][T10057] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 848.686909][T10057] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.853000][T15749] hsr_slave_0: entered promiscuous mode [ 848.856325][T15749] hsr_slave_1: entered promiscuous mode [ 849.031992][T10057] usb 4-1: usb_control_msg returned -32 [ 849.032047][T10057] usbtmc 4-1:16.0: can't read capabilities [ 849.975929][ T44] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 850.150042][ T44] usb 10-1: Using ep0 maxpacket: 16 [ 850.153168][ T44] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.153218][ T44] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 850.153344][ T44] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 850.153369][ T44] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 850.153394][ T44] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 850.154857][ T44] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 850.154883][ T44] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 850.154903][ T44] usb 10-1: Manufacturer: syz [ 850.277740][ T44] usb 10-1: config 0 descriptor?? [ 850.782761][ T44] rc_core: IR keymap rc-hauppauge not found [ 850.782784][ T44] Registered IR keymap rc-empty [ 850.783799][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 850.813199][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 851.067843][ T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 851.071333][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input30 [ 851.118634][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 851.142398][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 851.179185][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 851.211139][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 851.222909][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 851.263615][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 851.285835][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 851.302854][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 851.323902][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 851.342808][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 851.381880][ T44] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 851.413387][ T44] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 851.413415][ T44] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 851.526981][ T5713] usb 4-1: USB disconnect, device number 35 [ 851.639367][ T44] usb 10-1: USB disconnect, device number 4 [ 852.423685][T15444] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 852.497226][T15444] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 852.968742][T15444] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 853.009351][T15444] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 853.069431][ T44] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 853.113145][T15444] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 853.229705][ T44] usb 10-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 853.229740][ T44] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.326913][ T44] pwc: Logitech/Cisco VT Camera webcam detected. [ 853.622723][T15444] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 853.939013][ T44] pwc: Failed to set LED on/off time (-71) [ 853.939641][ T44] pwc: send_video_command error -71 [ 853.939656][ T44] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 853.939785][ T44] Philips webcam 10-1:127.0: probe with driver Philips webcam failed with error -71 [ 853.985945][ T44] usb 10-1: USB disconnect, device number 5 [ 854.063828][T15444] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 854.133191][T15444] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 856.265666][ T1530] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.783767][ T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 857.946741][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 857.959368][ T9] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 857.959398][ T9] usb 10-1: config 0 has no interface number 0 [ 857.995040][ T9] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 857.995075][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.995097][ T9] usb 10-1: Product: syz [ 857.995114][ T9] usb 10-1: Manufacturer: syz [ 857.995130][ T9] usb 10-1: SerialNumber: syz [ 858.048764][ T9] usb 10-1: config 0 descriptor?? [ 858.083191][T16256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3093'. [ 858.477258][ T1530] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.486561][ T9] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 858.486594][ T9] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 859.095424][ T9] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 859.095749][ T9] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 859.180797][ T9] usb 10-1: USB disconnect, device number 6 [ 859.656453][T16277] loop3: detected capacity change from 0 to 512 [ 859.676080][T16277] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 859.771591][T16277] EXT4-fs (loop3): 1 truncate cleaned up [ 860.096512][T16277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 860.418670][ T5592] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.629057][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 860.724307][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 860.962313][ T1530] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.141416][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 861.191862][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 861.212777][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 861.239151][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 861.256715][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 862.154318][T16307] geneve2: entered promiscuous mode [ 862.713371][ T68] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 42160 - 0 [ 862.714052][ T68] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 42160 - 0 [ 862.845078][ T68] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 42160 - 0 [ 863.452428][ T1530] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.527756][ T68] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 42160 - 0 [ 863.829219][ T5598] Bluetooth: hci6: command tx timeout [ 865.842811][ T5598] Bluetooth: hci6: command tx timeout [ 865.934864][ T1530] bridge_slave_1: left allmulticast mode [ 865.934894][ T1530] bridge_slave_1: left promiscuous mode [ 865.935120][ T1530] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.054544][ T1530] bridge_slave_0: left allmulticast mode [ 866.054586][ T1530] bridge_slave_0: left promiscuous mode [ 866.054872][ T1530] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.274274][ T1530] bridge_slave_1: left allmulticast mode [ 866.274326][ T1530] bridge_slave_1: left promiscuous mode [ 866.274746][ T1530] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.393961][ T1530] bridge_slave_0: left allmulticast mode [ 866.393992][ T1530] bridge_slave_0: left promiscuous mode [ 866.394208][ T1530] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.463464][ T1530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.525498][ T1530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.566447][ T1530] bond0 (unregistering): Released all slaves [ 867.923910][ T5598] Bluetooth: hci6: command tx timeout [ 868.283767][ T1530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.364295][ T1530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.393673][ T1530] bond0 (unregistering): Released all slaves [ 868.611829][T15749] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 868.647473][T15749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 868.745731][T15749] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 868.868474][T15749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 868.903283][T15749] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 869.000258][T15749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 869.089970][T15749] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 869.181246][T15749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 869.369233][T16304] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.369526][T16304] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.369761][T16304] bridge_slave_0: entered allmulticast mode [ 869.372408][T16304] bridge_slave_0: entered promiscuous mode [ 869.501665][T16304] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.502022][T16304] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.502335][T16304] bridge_slave_1: entered allmulticast mode [ 869.529549][T16304] bridge_slave_1: entered promiscuous mode [ 869.895760][T16304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.930418][T16304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.004408][ T5598] Bluetooth: hci6: command tx timeout [ 870.088812][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.088953][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.419581][T16304] team0: Port device team_slave_0 added [ 870.440346][T16304] team0: Port device team_slave_1 added [ 870.848548][ T5253] 8021q: adding VLAN 0 to HW filter on device eth5 [ 870.856758][T16304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.856809][T16304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.856901][T16304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.141549][T16304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.141564][T16304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.141587][T16304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.513350][T16304] hsr_slave_0: entered promiscuous mode [ 871.515631][T16304] hsr_slave_1: entered promiscuous mode [ 871.517445][T16304] debugfs: 'hsr0' already exists in 'hsr' [ 871.517472][T16304] Cannot create hsr debugfs directory [ 872.172734][ T5598] Bluetooth: hci1: command 0x0406 tx timeout [ 872.422981][ T1530] hsr_slave_0: left promiscuous mode [ 872.453520][ T1530] hsr_slave_1: left promiscuous mode [ 872.455270][ T1530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.455290][ T1530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.485322][ T1530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.485343][ T1530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.652746][ T1530] hsr_slave_0: left promiscuous mode [ 872.692727][ T1530] hsr_slave_1: left promiscuous mode [ 872.694020][ T1530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.694043][ T1530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.726486][ T1530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.726510][ T1530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.825731][ T1530] veth1_macvtap: left promiscuous mode [ 872.825810][ T1530] veth0_macvtap: left promiscuous mode [ 872.826026][ T1530] veth1_vlan: left promiscuous mode [ 872.826169][ T1530] veth0_vlan: left promiscuous mode [ 872.973291][ T1530] veth1_macvtap: left promiscuous mode [ 872.973364][ T1530] veth0_macvtap: left promiscuous mode [ 872.973584][ T1530] veth1_vlan: left promiscuous mode [ 872.973725][ T1530] veth0_vlan: left promiscuous mode [ 873.945284][ T1530] team0 (unregistering): Port device team_slave_1 removed [ 874.003890][ T1530] team0 (unregistering): Port device team_slave_0 removed [ 874.713538][ T1530] team0 (unregistering): Port device team_slave_1 removed [ 874.773432][ T1530] team0 (unregistering): Port device team_slave_0 removed [ 875.211706][T15749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.418051][T15749] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.277944][ T5253] 8021q: adding VLAN 0 to HW filter on device eth6 [ 876.303172][ T8593] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.303449][ T8593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.357615][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.357884][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 877.797503][ T5253] 8021q: adding VLAN 0 to HW filter on device eth7 [ 879.586638][ T5253] 8021q: adding VLAN 0 to HW filter on device eth8 [ 879.700592][ T1530] IPVS: stop unused estimator thread 0... [ 879.763201][T15749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.231395][T16304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 880.317545][T16304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 880.484918][ T8593] bridge_slave_1: left allmulticast mode [ 880.484947][ T8593] bridge_slave_1: left promiscuous mode [ 880.485160][ T8593] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.644491][ T8593] bridge_slave_0: left allmulticast mode [ 880.644530][ T8593] bridge_slave_0: left promiscuous mode [ 880.644837][ T8593] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.503635][ T8593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.633452][ T8593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.694477][ T8593] bond0 (unregistering): Released all slaves [ 881.716323][T16304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 881.830928][T16304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 881.998071][T16304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 882.135866][T16304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 882.140722][T16304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 882.182900][T16304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 882.362928][ T8593] hsr_slave_0: left promiscuous mode [ 882.402799][ T8593] hsr_slave_1: left promiscuous mode [ 882.404514][ T8593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.443630][ T8593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.769934][ T5598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 882.860437][ T5598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 882.981617][ T5598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 882.992384][ T5598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 883.002816][ T5598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 883.534845][ T8593] team0 (unregistering): Port device team_slave_1 removed [ 883.633404][ T8593] team0 (unregistering): Port device team_slave_0 removed [ 884.880319][T16304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.058140][T16304] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.107932][ T9393] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.108188][ T9393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.183129][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.183275][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.231171][ T5598] Bluetooth: hci5: command tx timeout [ 887.362872][ T5598] Bluetooth: hci5: command tx timeout [ 888.549788][T16532] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.551709][T16532] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.551982][T16532] bridge_slave_0: entered allmulticast mode [ 888.578406][T16532] bridge_slave_0: entered promiscuous mode [ 888.614010][T16532] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.614403][T16532] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.614694][T16532] bridge_slave_1: entered allmulticast mode [ 888.625691][T16532] bridge_slave_1: entered promiscuous mode [ 889.088384][T16532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.111796][T16532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.137492][T16304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 889.231384][T16532] team0: Port device team_slave_0 added [ 889.388747][T16532] team0: Port device team_slave_1 added [ 889.443854][ T5598] Bluetooth: hci5: command tx timeout [ 890.027395][T16532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.027415][T16532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.027446][T16532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.091530][T16532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.091543][T16532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.091565][T16532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.250876][T16532] hsr_slave_0: entered promiscuous mode [ 890.259744][T16532] hsr_slave_1: entered promiscuous mode [ 890.261655][T16532] debugfs: 'hsr0' already exists in 'hsr' [ 890.261683][T16532] Cannot create hsr debugfs directory [ 891.309249][T16304] veth0_vlan: entered promiscuous mode [ 891.531648][ T5598] Bluetooth: hci5: command tx timeout [ 891.644823][T16304] veth1_vlan: entered promiscuous mode [ 891.802934][ T8593] bridge_slave_1: left allmulticast mode [ 891.802972][ T8593] bridge_slave_1: left promiscuous mode [ 891.807426][ T8593] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.925319][ T8593] bridge_slave_0: left allmulticast mode [ 891.925347][ T8593] bridge_slave_0: left promiscuous mode [ 891.925558][ T8593] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.853765][ T8593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 892.913580][ T8593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.955300][ T8593] bond0 (unregistering): Released all slaves [ 893.320991][T16304] veth0_macvtap: entered promiscuous mode [ 893.904232][ T8593] hsr_slave_0: left promiscuous mode [ 893.943100][ T8593] hsr_slave_1: left promiscuous mode [ 893.944986][ T8593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 893.983930][ T8593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 894.494458][ T8593] team0 (unregistering): Port device team_slave_1 removed [ 894.536115][ T8593] team0 (unregistering): Port device team_slave_0 removed [ 894.745398][T16304] veth1_macvtap: entered promiscuous mode [ 894.758839][ T5253] 8021q: adding VLAN 0 to HW filter on device eth9 [ 894.985290][T16304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.016611][T16304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.083626][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.084769][ T9397] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.111894][T13820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.125843][T13820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.426763][ T5253] 8021q: adding VLAN 0 to HW filter on device eth10 [ 897.648436][T14733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.648460][T14733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.748727][T14733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.748752][T14733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.534967][T16723] Invalid argument reading file caps for ./file0 [ 899.018951][T16740] netlink: 65047 bytes leftover after parsing attributes in process `syz.7.3106'. [ 899.061436][T16739] loop9: detected capacity change from 0 to 1024 [ 899.353978][T14664] Flush: task=syz-executor[14664] dev=loop9 state=2 [ 899.543377][T14664] Teardown: task=syz-executor[14664] dev=loop9 state=2 [ 899.996321][T16756] netlink: 'syz.3.3112': attribute type 8 has an invalid length. [ 899.996342][T16756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3112'. [ 900.084224][ T5253] 8021q: adding VLAN 0 to HW filter on device eth11 [ 900.111537][T16757] loop9: detected capacity change from 0 to 512 [ 900.121628][T16757] EXT4-fs: Ignoring removed mblk_io_submit option [ 900.207002][T16757] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 900.775230][T16757] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.3111: attempt to clear invalid blocks 2 len 1 [ 900.776936][T16757] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 900.778443][T16757] EXT4-fs (loop9): Remounting filesystem read-only [ 900.790787][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 900.790814][ C1] EXT4-fs (loop9): initial error at time 1784279956: ext4_clear_blocks:876: inode 13 [ 900.790849][ C1] EXT4-fs (loop9): last error at time 1784279956: ext4_clear_blocks:876: inode 13 [ 900.796814][T16757] EXT4-fs (loop9): 1 truncate cleaned up [ 900.892050][T16757] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 901.069125][T14664] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 901.331791][T16532] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 901.352912][T14664] Flush: task=syz-executor[14664] dev=loop9 state=2 [ 901.598137][T16532] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 901.621418][T14664] Teardown: task=syz-executor[14664] dev=loop9 state=2 [ 901.659798][T16532] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 901.920536][T16532] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 901.922433][T16532] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 901.980400][T16532] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 901.991961][T16532] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 902.187840][T16532] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 903.147335][T16532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.417864][T16532] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.564027][T14996] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.564155][T14996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.697978][T14996] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.698132][T14996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 905.223654][ T5253] 8021q: adding VLAN 0 to HW filter on device eth12 [ 905.923201][ T39] INFO: task syz.4.2657:14708 blocked for more than 143 seconds. [ 905.923230][ T39] Tainted: G L syzkaller #0 [ 905.923243][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 905.923254][ T39] task:syz.4.2657 state:D stack:25544 pid:14708 tgid:14695 ppid:5599 task_flags:0x400140 flags:0x00080002 [ 905.923326][ T39] Call Trace: [ 905.923335][ T39] [ 905.923350][ T39] __schedule+0x1709/0x5530 [ 905.923387][ T39] ? __lock_acquire+0x6df/0x2e40 [ 905.923440][ T39] ? __pfx___schedule+0x10/0x10 [ 905.923469][ T39] ? lock_acquire+0x115/0x350 [ 905.923506][ T39] ? schedule+0x90/0x2b0 [ 905.923542][ T39] schedule+0x164/0x2b0 [ 905.923576][ T39] __wait_on_freeing_inode+0x166/0x3b0 [ 905.923614][ T39] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 905.923646][ T39] ? rt_spin_lock+0x2ce/0x400 [ 905.923675][ T39] ? __pfx_var_wake_function+0x10/0x10 [ 905.923713][ T39] ? kasan_save_track+0x4f/0x80 [ 905.923746][ T39] find_inode_fast+0x3e0/0x740 [ 905.923775][ T39] ? find_inode_fast+0xd2/0x740 [ 905.923814][ T39] iget_locked+0xd0/0x6a0 [ 905.923848][ T39] __ext4_iget+0x242/0x45b0 [ 905.923892][ T39] ? rcu_is_watching+0x15/0xb0 [ 905.923923][ T39] ? ext4_xattr_inode_lookup_create+0x414/0x1d20 [ 905.923950][ T39] ? trace_kmalloc+0x2a/0xf0 [ 905.923974][ T39] ? ext4_xattr_inode_lookup_create+0x414/0x1d20 [ 905.924002][ T39] ? __pfx___ext4_iget+0x10/0x10 [ 905.924025][ T39] ? ext4_xattr_inode_lookup_create+0x414/0x1d20 [ 905.924062][ T39] ? ext4_xattr_inode_lookup_create+0x414/0x1d20 [ 905.924098][ T39] ext4_xattr_inode_lookup_create+0x492/0x1d20 [ 905.924144][ T39] ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10 [ 905.924170][ T39] ? bdev_getblk+0xbd/0x6e0 [ 905.924199][ T39] ? __pfx_check_xattrs+0x10/0x10 [ 905.924220][ T39] ? ext4_inode_journal_mode+0x18d/0x470 [ 905.924255][ T39] ext4_xattr_ibody_set+0x212/0x710 [ 905.924290][ T39] ext4_xattr_set_handle+0xd44/0x1540 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 905.924338][ T39] ? __pfx_ext4_xattr_set_handle+0x10/0x10 [ 905.924363][ T39] ? ext4_journal_check_start+0x1c/0x2b0 [ 905.924398][ T39] ? __ext4_journal_start_sb+0x259/0x5d0 [ 905.924428][ T39] ext4_xattr_set+0x257/0x340 [ 905.924465][ T39] ? __pfx_ext4_xattr_set+0x10/0x10 [ 905.924498][ T39] ? __pfx_evm_protect_xattr+0x10/0x10 [ 905.924552][ T39] ? safesetid_security_capable+0xa9/0x1a0 [ 905.924591][ T39] ? __pfx_ext4_xattr_trusted_set+0x10/0x10 [ 905.924621][ T39] __vfs_setxattr+0x442/0x480 [ 905.924663][ T39] __vfs_setxattr_noperm+0x12a/0x660 [ 905.924702][ T39] vfs_setxattr+0x163/0x360 [ 905.924820][ T39] ? __pfx_vfs_setxattr+0x10/0x10 [ 905.924858][ T39] filename_setxattr+0x296/0x630 [ 905.924896][ T39] ? __pfx_filename_setxattr+0x10/0x10 [ 905.924930][ T39] ? do_getname+0x151/0x250 [ 905.924960][ T39] path_setxattrat+0x408/0x450 [ 905.925006][ T39] ? __pfx_path_setxattrat+0x10/0x10 [ 905.925083][ T39] ? __pfx_kcov_ioctl+0x10/0x10 [ 905.925113][ T39] __x64_sys_setxattr+0xbc/0xe0 [ 905.925147][ T39] do_syscall_64+0x17b/0x530 [ 905.925181][ T39] ? irqentry_exit+0x10f/0x8f0 [ 905.925214][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.925238][ T39] ? clear_bhb_loop+0x40/0x90 [ 905.925267][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.925291][ T39] RIP: 0033:0x7f974557de99 [ 905.925312][ T39] RSP: 002b:00007f97437b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 905.925338][ T39] RAX: ffffffffffffffda RBX: 00007f9745806090 RCX: 00007f974557de99 [ 905.925355][ T39] RDX: 0000200000001400 RSI: 00002000000001c0 RDI: 0000200000000380 [ 905.925372][ T39] RBP: 00007f9745613eaf R08: 0000000000000000 R09: 0000000000000000 [ 905.925386][ T39] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000000 [ 905.925400][ T39] R13: 00007f9745806128 R14: 00007f9745806090 R15: 00007fff06e0e088 [ 905.925437][ T39] [ 905.925448][ T39] INFO: task syz.4.2657:14709 blocked for more than 143 seconds. [ 905.925469][ T39] Tainted: G L syzkaller #0 [ 905.925482][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 905.925493][ T39] task:syz.4.2657 state:D stack:26184 pid:14709 tgid:14695 ppid:5599 task_flags:0x400140 flags:0x00080002 [ 905.925561][ T39] Call Trace: [ 905.925569][ T39] [ 905.925583][ T39] __schedule+0x1709/0x5530 [ 905.925616][ T39] ? __lock_acquire+0x6df/0x2e40 [ 905.925648][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 905.925687][ T39] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 905.925713][ T39] ? preempt_schedule_common+0x82/0xd0 [ 905.925757][ T39] ? __pfx___schedule+0x10/0x10 [ 905.925785][ T39] ? lock_acquire+0x115/0x350 [ 905.925819][ T39] ? schedule+0x90/0x2b0 [ 905.925852][ T39] schedule+0x164/0x2b0 [ 905.925885][ T39] mb_cache_entry_wait_unused+0x17d/0x280 [ 905.925919][ T39] ? __pfx_mb_cache_entry_wait_unused+0x10/0x10 [ 905.925950][ T39] ? __pfx_var_wake_function+0x10/0x10 [ 905.925995][ T39] ? mb_cache_entry_delete_or_get+0x153/0x1e0 [ 905.926028][ T39] ext4_evict_ea_inode+0x14d/0x2f0 [ 905.926075][ T39] ext4_evict_inode+0x169/0x10c0 [ 905.926112][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 905.926147][ T39] ? __pfx_ext4_evict_inode+0x10/0x10 [ 905.926178][ T39] ? rt_spin_unlock+0x157/0x200 [ 905.926210][ T39] ? rt_spin_unlock+0x163/0x200 [ 905.926239][ T39] ? __pfx_ext4_evict_inode+0x10/0x10 [ 905.926271][ T39] evict+0x624/0xb50 [ 905.926363][ T39] ? __pfx_evict+0x10/0x10 [ 905.926404][ T39] ? __rcu_read_unlock+0x83/0xe0 [ 905.926432][ T39] ? iput+0xb84/0xf00 [ 905.926465][ T39] ext4_xattr_set_entry+0x179a/0x1ed0 [ 905.926517][ T39] ext4_xattr_ibody_set+0x262/0x710 [ 905.926549][ T39] ext4_xattr_set_handle+0xd44/0x1540 [ 905.926597][ T39] ? __pfx_ext4_xattr_set_handle+0x10/0x10 [ 905.926621][ T39] ? ext4_journal_check_start+0x1c/0x2b0 [ 905.926656][ T39] ? __ext4_journal_start_sb+0x259/0x5d0 [ 905.926686][ T39] ext4_xattr_set+0x257/0x340 [ 905.926723][ T39] ? __pfx_ext4_xattr_set+0x10/0x10 [ 905.926753][ T39] ? __pfx_evm_protect_xattr+0x10/0x10 [ 905.926779][ T39] ? safesetid_security_capable+0xa9/0x1a0 [ 905.926816][ T39] ? __pfx_ext4_xattr_trusted_set+0x10/0x10 [ 905.926845][ T39] __vfs_setxattr+0x442/0x480 [ 905.926887][ T39] __vfs_setxattr_noperm+0x12a/0x660 [ 905.926923][ T39] vfs_setxattr+0x163/0x360 [ 905.926959][ T39] ? __pfx_vfs_setxattr+0x10/0x10 [ 905.926998][ T39] filename_setxattr+0x296/0x630 [ 905.927037][ T39] ? __pfx_filename_setxattr+0x10/0x10 [ 905.927079][ T39] ? do_getname+0x151/0x250 [ 905.927107][ T39] path_setxattrat+0x408/0x450 [ 905.927152][ T39] ? __pfx_path_setxattrat+0x10/0x10 [ 905.927224][ T39] ? __pfx_kcov_ioctl+0x10/0x10 [ 905.927253][ T39] __x64_sys_setxattr+0xbc/0xe0 [ 905.927288][ T39] do_syscall_64+0x17b/0x530 [ 905.927322][ T39] ? irqentry_exit+0x10f/0x8f0 [ 905.927355][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.927379][ T39] ? clear_bhb_loop+0x40/0x90 [ 905.927407][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.927430][ T39] RIP: 0033:0x7f974557de99 [ 905.927450][ T39] RSP: 002b:00007f9743794028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 905.927474][ T39] RAX: ffffffffffffffda RBX: 00007f9745806180 RCX: 00007f974557de99 [ 905.927491][ T39] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000200000000080 [ 905.927509][ T39] RBP: 00007f9745613eaf R08: 0000000000000002 R09: 0000000000000000 [ 905.927524][ T39] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000000 [ 905.927539][ T39] R13: 00007f9745806218 R14: 00007f9745806180 R15: 00007fff06e0e088 [ 905.927576][ T39] [ 905.927629][ T39] [ 905.927629][ T39] Showing all locks held in the system: [ 905.927647][ T39] locks held by khungtaskd/39: 1, last CPU#0: [ 905.927664][ T39] #0: ffffffff8e1c3880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 905.927722][ T39] locks held by kworker/u8:3/50: 2, on CPU#0: [ 905.927738][ T39] #0: ffff88813fe5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 905.927796][ T39] #1: ffffc90000bc7c60 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 905.927857][ T39] locks held by kworker/u8:4/68: 4, last CPU#0: [ 905.927873][ T39] #0: ffff88813fe5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 905.927932][ T39] #1: ffffc9000153fc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 905.927992][ T39] #2: ffff88802a26a310 (&devlink->lock_key#22){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 905.928069][ T39] #3: ffff88806eaf6520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 905.928156][ T39] locks held by getty/5344: 2, on CPU#0: [ 905.928173][ T39] #0: ffff8880361d30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 905.928228][ T39] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 905.928290][ T39] locks held by syz-executor/5592: 9, last CPU#0: [ 905.928306][ T39] #0: ffffffff8e297010 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 905.928363][ T39] #1: ffff888040490430 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x16e/0x1d30 [ 905.928417][ T39] #2: ffff88802b9011b0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x256/0x1d30 [ 905.928477][ T39] #3: ffffffff8e1c3880 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 905.928540][ T39] #4: ffff888042a62718 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 905.928611][ T39] #5: ffffffff8e1c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 905.928666][ T39] #6: ffffffff8e1c3880 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 905.928729][ T39] #7: ffff888035ef8718 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x541/0x57f0 [ 905.928793][ T39] #8: ffffffff8e1c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock_nested+0x1de/0x3f0 [ 905.928857][ T39] locks held by kworker/0:6/5788: 3, last CPU#0: [ 905.928873][ T39] #0: ffff88813fe1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 905.928932][ T39] #1: ffffc90006267c60 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 905.928993][ T39] #2: ffff888034f37280 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x222/0x3e0 [ 905.929068][ T39] locks held by kworker/u8:5/8593: 6, last CPU#0: [ 905.929085][ T39] #0: ffff88801be9b138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 905.929144][ T39] #1: ffffc9000561fc60 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 905.929204][ T39] #2: ffff8880360d20e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 905.929267][ T39] #3: ffff8880365e4cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 905.929325][ T39] #4: ffff8880342e36a0 (&mapping->i_mmap_rwsem){++++}-{4:4}, at: __rmap_walk_file+0x1a6/0x610 [ 905.929379][ T39] #5: ffffffff8e1c3880 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 905.929444][ T39] locks held by kworker/u8:0/13820: 2, on CPU#0: [ 905.929461][ T39] #0: ffff88813fe5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 905.929519][ T39] #1: ffffc90005327c60 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 905.929579][ T39] locks held by syz.4.2657/14708: 3, on CPU#0: [ 905.929596][ T39] #0: ffff8880265a8510 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 905.929665][ T39] #1: ffff88805e755710 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: vfs_setxattr+0x13e/0x360 [ 905.929728][ T39] #2: ffff88805e7553a0 (&ei->xattr_sem){++++}-{4:4}, at: ext4_xattr_set_handle+0x194/0x1540 [ 905.929786][ T39] locks held by syz.4.2657/14709: 3, on CPU#0: [ 905.929802][ T39] #0: ffff8880265a8510 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 905.929870][ T39] #1: ffff88806ad20428 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: vfs_setxattr+0x13e/0x360 [ 905.929935][ T39] #2: ffff88806ad200b8 (&ei->xattr_sem){++++}-{4:4}, at: ext4_xattr_set_handle+0x194/0x1540 [ 905.929990][ T39] locks held by kworker/u8:7/14996: 2, on CPU#1: [ 905.930007][ T39] #0: ffff88813fe5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 905.930073][ T39] #1: ffffc9000f5a7c60 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 905.930136][ T39] locks held by udevd/16770: 2, last CPU#1: [ 905.930152][ T39] #0: ffffffff8e1c3880 (rcu_read_lock){....}-{1:3}, at: path_init+0x12d/0x14b0 [ 905.930211][ T39] #1: ffffffff8e1c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 905.930267][ T39] locks held by syz.2.3140/16853: 4, last CPU#0: [ 905.930284][ T39] #0: ffff88803b1247b0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 905.930335][ T39] #1: ffffffff8e1c3880 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 905.930399][ T39] #2: ffff888034fd4658 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 905.930469][ T39] #3: ffffffff8e1c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 905.930525][ T39] locks held by syz.9.3141/16854: 4, last CPU#1: [ 905.930542][ T39] #0: ffff88802b9062b0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 905.930595][ T39] #1: ffffffff8e1c3880 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 905.930657][ T39] #2: ffff88805f742598 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 905.930728][ T39] #3: ffffffff8e1c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 905.930785][ T39] locks held by syz.7.3142/16858: 1, last CPU#1: [ 905.930802][ T39] #0: ffff88802b903a30 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 905.930853][ T39] locks held by dhcpcd-run-hook/16859: 1, last CPU#1: [ 905.930870][ T39] #0: ffff88803b1211b0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 905.930931][ T39] locks held by modprobe/16860: 1, last CPU#1: [ 905.930948][ T39] #0: ffff888037025530 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 905.931009][ T39] [ 905.931016][ T39] ============================================= [ 905.931016][ T39] [ 905.931038][ T39] NMI backtrace for cpu 0 [ 905.931066][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 905.931097][ T39] Tainted: [L]=SOFTLOCKUP [ 905.931105][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 905.931119][ T39] Call Trace: [ 905.931128][ T39] [ 905.931138][ T39] dump_stack_lvl+0xe8/0x150 [ 905.931174][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 905.931203][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 905.931240][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 905.931271][ T39] sys_info+0x135/0x170 [ 905.931295][ T39] watchdog+0xfd7/0x1030 [ 905.931328][ T39] ? watchdog+0x1c7/0x1030 [ 905.931361][ T39] kthread+0x388/0x470 [ 905.931395][ T39] ? __pfx_watchdog+0x10/0x10 [ 905.931419][ T39] ? __pfx_kthread+0x10/0x10 [ 905.931456][ T39] ret_from_fork+0x514/0xb70 [ 905.931495][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 905.931530][ T39] ? __switch_to+0xc89/0x1420 [ 905.931564][ T39] ? __pfx_kthread+0x10/0x10 [ 905.931601][ T39] ret_from_fork_asm+0x1a/0x30 [ 905.931640][ T39] [ 905.931649][ T39] Sending NMI from CPU 0 to CPUs 1: [ 905.931682][ C1] NMI backtrace for cpu 1 [ 905.931706][ C1] CPU: 1 UID: 0 PID: 16854 Comm: syz.9.3141 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 905.931732][ C1] Tainted: [L]=SOFTLOCKUP [ 905.931739][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 905.931751][ C1] RIP: 0010:__lock_acquire+0x14a0/0x2e40 [ 905.931776][ C1] Code: 90 0f 0b 90 31 ed 65 48 8b 05 2c 4b fd 10 48 3b 84 24 e0 00 00 00 0f 85 21 17 00 00 89 e8 48 81 c4 e8 00 00 00 5b 41 5c 41 5d <41> 5e 41 5f 5d e9 86 5b a9 09 cc 4d 85 ff 0f 84 5d 11 00 00 e8 87 [ 905.931794][ C1] RSP: 0000:ffffc900058ef470 EFLAGS: 00000082 [ 905.931810][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 905.931822][ C1] RDX: 000000002d778953 RSI: 00000000be9f61d5 RDI: ffff88802fc18000 [ 905.931836][ C1] RBP: 0000000000000001 R08: a600000000000000 R09: 0000000000000000 [ 905.931849][ C1] R10: 0000000000000000 R11: ffffffff8e1c3940 R12: ffffffff8e1c3940 [ 905.931863][ C1] R13: 0000000000000002 R14: ffff88802fc18cb8 R15: 0000000000000004 [ 905.931876][ C1] FS: 0000000000000000(0000) GS:ffff888125d3c000(0000) knlGS:0000000000000000 [ 905.931897][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 905.931915][ C1] CR2: 00007f2377748a10 CR3: 0000000037392000 CR4: 00000000003526f0 [ 905.931933][ C1] Call Trace: [ 905.931940][ C1] [ 905.931948][ C1] lock_acquire+0x115/0x350 [ 905.931970][ C1] ? pfn_valid+0xba/0x480 [ 905.931994][ C1] ? pfn_valid+0xba/0x480 [ 905.932013][ C1] pfn_valid+0xd6/0x480 [ 905.932031][ C1] ? pfn_valid+0xba/0x480 [ 905.932052][ C1] page_table_check_clear+0x21/0x500 [ 905.932071][ C1] ? vm_normal_page+0xf9/0x210 [ 905.932095][ C1] __zap_vma_range+0x34e3/0x4a50 [ 905.932143][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 905.932173][ C1] ? mas_find+0x6ef/0xca0 [ 905.932203][ C1] unmap_vmas+0x390/0x550 [ 905.932229][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 905.932264][ C1] exit_mmap+0x293/0x9f0 [ 905.932283][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 905.932299][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 905.932341][ C1] ? __pfx_exit_aio+0x10/0x10 [ 905.932376][ C1] ? uprobe_clear_state+0x2a7/0x3e0 [ 905.932398][ C1] __mmput+0xcb/0x3e0 [ 905.932420][ C1] exit_mm+0x186/0x240 [ 905.932437][ C1] do_exit+0x6cd/0x2360 [ 905.932456][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 905.932484][ C1] ? __pfx_do_exit+0x10/0x10 [ 905.932512][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x81f/0xc10 [ 905.932552][ C1] do_group_exit+0x22d/0x2f0 [ 905.932575][ C1] __x64_sys_exit_group+0x3f/0x40 [ 905.932593][ C1] x64_sys_call+0x18bf/0x18c0 [ 905.932611][ C1] do_syscall_64+0x17b/0x530 [ 905.932640][ C1] ? irqentry_exit+0x10f/0x8f0 [ 905.932668][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.932687][ C1] ? clear_bhb_loop+0x40/0x90 [ 905.932709][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.932728][ C1] RIP: 0033:0x7fd918acde99 [ 905.932743][ C1] Code: Unable to access opcode bytes at 0x7fd918acde6f. [ 905.932753][ C1] RSP: 002b:00007ffcdcf83ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 905.932772][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd918acde99 [ 905.932785][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 905.932797][ C1] RBP: 00007ffcdcf83d0c R08: 0000000000000000 R09: 00000000000927c0 [ 905.932809][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000086 [ 905.932821][ C1] R13: 00000000000927c0 R14: 00000000000dcff4 R15: 00007ffcdcf83d60 [ 905.932843][ C1] [ 906.227260][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 906.227288][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 906.227318][ T39] Tainted: [L]=SOFTLOCKUP [ 906.227327][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 906.227341][ T39] Call Trace: [ 906.227351][ T39] [ 906.227361][ T39] vpanic+0x56c/0xa60 [ 906.227387][ T39] ? __pfx___schedule+0x10/0x10 [ 906.227418][ T39] ? __pfx_vpanic+0x10/0x10 [ 906.227450][ T39] panic+0xc5/0xd0 [ 906.227475][ T39] ? __pfx_panic+0x10/0x10 [ 906.227494][ T39] ? preempt_schedule_common+0x82/0xd0 [ 906.227528][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 906.227558][ T39] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 906.227589][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 906.227621][ T39] watchdog+0x1030/0x1030 [ 906.227655][ T39] ? watchdog+0x1c7/0x1030 [ 906.227686][ T39] kthread+0x388/0x470 [ 906.227722][ T39] ? __pfx_watchdog+0x10/0x10 [ 906.227746][ T39] ? __pfx_kthread+0x10/0x10 [ 906.227783][ T39] ret_from_fork+0x514/0xb70 [ 906.227822][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 906.227856][ T39] ? __switch_to+0xc89/0x1420 [ 906.227891][ T39] ? __pfx_kthread+0x10/0x10 [ 906.227927][ T39] ret_from_fork_asm+0x1a/0x30 [ 906.227966][ T39] [ 906.228591][ T39] Kernel Offset: disabled