last executing test programs: 2.872668542s ago: executing program 1 (id=1711): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r1, {0xffe0}, {0x9, 0xb}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x4, 0xb, 0x1, 0x6, 0x24, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x20, 0x0, 0x1}}) r2 = socket(0x400000010, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x804) write(r2, &(0x7f0000000200)="fc0000001400073eac093a00090007000aab0800080000000400e293210001c000000000060000000100000009000000fa2c1eff8656aaa79bffffffff0000002d00024000036c6c256f1a272fdf0d11512fd633d4400007f60eb8fa2e6b00000016fd368934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040d815b2ccd243f295edbabc7c3f1a5f4e023dd16b176e83df150c3b8829a1ad0a4f41f0d48f6f0000080548deac270e37429f3694dec896592d69d381873cf1582740000000000000001ace36f071d0c22700"/252, 0xfc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) epoll_create1(0x0) r4 = socket(0x11, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @broadcast}, 0x14) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xa0}}, 0x80000) 2.754454575s ago: executing program 2 (id=1712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 2.687356646s ago: executing program 2 (id=1713): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000008000002000000008000300", @ANYRES32=r2, @ANYBLOB="1c0022800500040008000000050001"], 0x38}}, 0x4000800) 2.584960078s ago: executing program 1 (id=1714): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) 2.564922348s ago: executing program 2 (id=1716): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0x0, 0x3, 0x0, 0x3, 0x20001}}, 0x1c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000180)={r3, @in={{0x2, 0x4e20, @empty}}, 0x7, 0x4002}, 0x90) 2.338123923s ago: executing program 0 (id=1719): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x4000, 0x0, 0x5, 0x2}, 0x20) 2.155946316s ago: executing program 0 (id=1721): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) 2.106722167s ago: executing program 0 (id=1722): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r1, {0xffe0}, {0x9, 0xb}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x4, 0xb, 0x1, 0x6, 0x24, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x20, 0x0, 0x1}}) r2 = socket(0x400000010, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x804) write(r2, &(0x7f0000000200)="fc0000001400073eac093a00090007000aab0800080000000400e293210001c000000000060000000100000009000000fa2c1eff8656aaa79bffffffff0000002d00024000036c6c256f1a272fdf0d11512fd633d4400007f60eb8fa2e6b00000016fd368934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040d815b2ccd243f295edbabc7c3f1a5f4e023dd16b176e83df150c3b8829a1ad0a4f41f0d48f6f0000080548deac270e37429f3694dec896592d69d381873cf1582740000000000000001ace36f071d0c22700"/252, 0xfc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) epoll_create1(0x0) r4 = socket(0x11, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @broadcast}, 0x14) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xa0}}, 0x80000) 1.941189331s ago: executing program 0 (id=1724): r0 = socket(0x2, 0x3, 0xfb) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000240)=0x208, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x16}], 0x1, 0x40000122, 0x0) 1.882479222s ago: executing program 3 (id=1725): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x84}}, 0x0) 1.834242443s ago: executing program 3 (id=1726): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000ffdbdf250100000007000700e0000001080002000500000008000800001e01010c0001"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r5 = openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r5, &(0x7f00000001c0), 0x9) 1.777056194s ago: executing program 3 (id=1727): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0xfffffffe}, 0xc) 1.645042497s ago: executing program 1 (id=1728): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000000340)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.624677987s ago: executing program 2 (id=1729): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'gre0\x00', 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r1, &(0x7f0000000240)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @loopback}}}], 0x20}}], 0x1, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x5c, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x5c}}, 0x18) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000840)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000d80)=ANY=[@ANYBLOB="94010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000ffdbdf25150000007400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020076657468315f766c616e000000000000140002006361696630000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="08000300020000003c000180140002000000000000020000000000000000000008000300020000001400020076657468305f74605f0200000000000008000100882b3de2867bcd5cae25d956549602b5a14fc7e2ff3d5b71c0f52accaaa681ccdf25e6c3154ec617d15fd53c49741b71898645fc0a69034589d6d1c665fcb2412026a856b004340f91ccbb2fb10162c41d2d8ad2e13c5e1479d3c506a44d7cda8f158201e6051315c8e5ae24d7", @ANYRES32, @ANYBLOB="2800018008000300010000001400020067656e6576653100000000000000000008000100", @ANYRES32=r4, @ANYBLOB="7800018008000100", @ANYRES32=r7, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="0800030003000000080003000300000014000200626174616476300000000000000000000800030003000000140002006272696467655f736c6176655f31000008000300020000000800030000000000"], 0x194}, 0x1, 0x0, 0x0, 0x880}, 0x40040) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) 1.47557142s ago: executing program 2 (id=1730): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x4000, 0x0, 0x5, 0x2}, 0x20) 757.006115ms ago: executing program 0 (id=1731): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r1, 0x2007ff3) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e459, 0x700000000000000) 715.401655ms ago: executing program 3 (id=1732): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r1, {0xffe0}, {0x9, 0xb}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x4, 0xb, 0x1, 0x6, 0x24, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x20, 0x0, 0x1}}) r2 = socket(0x400000010, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x804) write(r2, &(0x7f0000000200)="fc0000001400073eac093a00090007000aab0800080000000400e293210001c000000000060000000100000009000000fa2c1eff8656aaa79bffffffff0000002d00024000036c6c256f1a272fdf0d11512fd633d4400007f60eb8fa2e6b00000016fd368934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040d815b2ccd243f295edbabc7c3f1a5f4e023dd16b176e83df150c3b8829a1ad0a4f41f0d48f6f0000080548deac270e37429f3694dec896592d69d381873cf1582740000000000000001ace36f071d0c22700"/252, 0xfc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) epoll_create1(0x0) r4 = socket(0x11, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @broadcast}, 0x14) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xa0}}, 0x80000) 577.873358ms ago: executing program 2 (id=1733): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x129042, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r1}, 0x0, 0x0, 0x100000}) read$FUSE(r1, &(0x7f0000000580)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000002c0)={0x17c04, 0xffffffffffffffff, 0x27, 0x100000001, 0x5}) 421.125942ms ago: executing program 3 (id=1734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xd}]}}}]}]}], {0x14}}, 0x84}}, 0x0) 285.372714ms ago: executing program 1 (id=1735): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000ffdbdf250100000007000700e0000001080002000500000008000800001e01010c0001"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r5 = openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r5, &(0x7f00000001c0), 0x9) 265.837525ms ago: executing program 3 (id=1736): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0500000003080000", @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) 111.129248ms ago: executing program 0 (id=1737): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0x0, 0x3, 0x0, 0x3, 0x20001}}, 0x1c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000180)={r3, @in={{0x2, 0x4e20, @empty}}, 0x7, 0x4002}, 0x90) 110.512208ms ago: executing program 1 (id=1738): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'gre0\x00', 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r1, &(0x7f0000000240)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @loopback}}}], 0x20}}], 0x1, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x5c, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x5c}}, 0x18) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000840)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000d80)=ANY=[@ANYBLOB="94010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000ffdbdf25150000007400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020076657468315f766c616e000000000000140002006361696630000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="08000300020000003c000180140002000000000000020000000000000000000008000300020000001400020076657468305f74605f0200000000000008000100882b3de2867bcd5cae25d956549602b5a14fc7e2ff3d5b71c0f52accaaa681ccdf25e6c3154ec617d15fd53c49741b71898645fc0a69034589d6d1c665fcb2412026a856b004340f91ccbb2fb10162c41d2d8ad2e13c5e1479d3c506a44d7cda8f158201e6051315c8e5ae24d7", @ANYRES32, @ANYBLOB="2800018008000300010000001400020067656e6576653100000000000000000008000100", @ANYRES32=r4, @ANYBLOB="7800018008000100", @ANYRES32=r7, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="0800030003000000080003000300000014000200626174616476300000000000000000000800030003000000140002006272696467655f736c6176655f31000008000300020000000800030000000000"], 0x194}, 0x1, 0x0, 0x0, 0x880}, 0x40040) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) 0s ago: executing program 1 (id=1739): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x14008, &(0x7f00000002c0)=ANY=[@ANYBLOB="63726561746f723df9ffffff2c706172743d3078666666666666666666666666666666662c66696c655f756d61736b3d30313737373737373737373737373737373737350037352c71756965742c71756965742c00"], 0x0, 0x302, &(0x7f0000000680)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. [ 81.980799][ T5780] cgroup: Unknown subsys name 'net' [ 82.153230][ T5780] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.875862][ T5780] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.053195][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.065138][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.073122][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.088171][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.106650][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.114201][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.155124][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.163544][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.173722][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.187766][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.216234][ T5799] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.224650][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.315376][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.323816][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.334920][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.344459][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.362322][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.369838][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.396588][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.407500][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.420813][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.435818][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.444512][ T5799] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.453081][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.710427][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 86.820869][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 86.952286][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.962220][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.970412][ T5797] bridge_slave_0: entered allmulticast mode [ 86.978998][ T5797] bridge_slave_0: entered promiscuous mode [ 87.017009][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.024279][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.031887][ T5797] bridge_slave_1: entered allmulticast mode [ 87.039729][ T5797] bridge_slave_1: entered promiscuous mode [ 87.103483][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.129418][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 87.188974][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.199598][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.207635][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.215312][ T5793] bridge_slave_0: entered allmulticast mode [ 87.222665][ T5793] bridge_slave_0: entered promiscuous mode [ 87.295045][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.302267][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.315505][ T5793] bridge_slave_1: entered allmulticast mode [ 87.322978][ T5793] bridge_slave_1: entered promiscuous mode [ 87.367405][ T5797] team0: Port device team_slave_0 added [ 87.403529][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.456101][ T5797] team0: Port device team_slave_1 added [ 87.497082][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.560568][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.568108][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.577470][ T5801] bridge_slave_0: entered allmulticast mode [ 87.585376][ T5801] bridge_slave_0: entered promiscuous mode [ 87.614148][ T5793] team0: Port device team_slave_0 added [ 87.621908][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.629568][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.655797][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.691213][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.698588][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.705941][ T5801] bridge_slave_1: entered allmulticast mode [ 87.713422][ T5801] bridge_slave_1: entered promiscuous mode [ 87.722527][ T5793] team0: Port device team_slave_1 added [ 87.754110][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.761633][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.787988][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.833249][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.840460][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.866865][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.882865][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.890279][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.916480][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.951485][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 87.974140][ T5797] hsr_slave_0: entered promiscuous mode [ 87.981052][ T5797] hsr_slave_1: entered promiscuous mode [ 87.991605][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.003937][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.083087][ T5793] hsr_slave_0: entered promiscuous mode [ 88.090026][ T5793] hsr_slave_1: entered promiscuous mode [ 88.097198][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.106236][ T5793] Cannot create hsr debugfs directory [ 88.145988][ T5801] team0: Port device team_slave_0 added [ 88.155420][ T5795] Bluetooth: hci0: command tx timeout [ 88.203567][ T5801] team0: Port device team_slave_1 added [ 88.288454][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.295548][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.323240][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.327005][ T5795] Bluetooth: hci1: command tx timeout [ 88.336474][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.347365][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.354853][ T5804] bridge_slave_0: entered allmulticast mode [ 88.361877][ T5804] bridge_slave_0: entered promiscuous mode [ 88.375169][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.382483][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.390240][ T5804] bridge_slave_1: entered allmulticast mode [ 88.396397][ T5795] Bluetooth: hci2: command tx timeout [ 88.399018][ T5804] bridge_slave_1: entered promiscuous mode [ 88.415346][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.422327][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.448437][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.520294][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.549220][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.558731][ T5795] Bluetooth: hci3: command tx timeout [ 88.631549][ T5804] team0: Port device team_slave_0 added [ 88.677251][ T5804] team0: Port device team_slave_1 added [ 88.694775][ T5801] hsr_slave_0: entered promiscuous mode [ 88.701546][ T5801] hsr_slave_1: entered promiscuous mode [ 88.709760][ T5801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.717836][ T5801] Cannot create hsr debugfs directory [ 88.799333][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.806683][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.833113][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.874679][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.881694][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.908021][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.042363][ T5797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.061578][ T5804] hsr_slave_0: entered promiscuous mode [ 89.069589][ T5804] hsr_slave_1: entered promiscuous mode [ 89.076271][ T5804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.083905][ T5804] Cannot create hsr debugfs directory [ 89.110083][ T5797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.121550][ T5797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.165808][ T5797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.257948][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.295045][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.339591][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.380783][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.426196][ T5801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.436957][ T5801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.450337][ T5801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.461359][ T5801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.564092][ T5804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.594077][ T5804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.607703][ T5804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.619524][ T5804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.738188][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.832717][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.853486][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.871627][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.909110][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.917646][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.947982][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.957778][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.980891][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.993653][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.038011][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.047375][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.060496][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.070849][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.082552][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.090931][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.107024][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.114332][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.149621][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.245471][ T5795] Bluetooth: hci0: command tx timeout [ 90.287458][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.321139][ T5801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.357863][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.366032][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.395733][ T5795] Bluetooth: hci1: command tx timeout [ 90.453494][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.462203][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.474838][ T5795] Bluetooth: hci2: command tx timeout [ 90.607625][ T5804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.635758][ T5795] Bluetooth: hci3: command tx timeout [ 90.920865][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.940084][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.021084][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.120241][ T5793] veth0_vlan: entered promiscuous mode [ 91.171564][ T5797] veth0_vlan: entered promiscuous mode [ 91.185387][ T5801] veth0_vlan: entered promiscuous mode [ 91.200816][ T5793] veth1_vlan: entered promiscuous mode [ 91.212779][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.236395][ T5797] veth1_vlan: entered promiscuous mode [ 91.268854][ T5801] veth1_vlan: entered promiscuous mode [ 91.343470][ T5793] veth0_macvtap: entered promiscuous mode [ 91.360127][ T5804] veth0_vlan: entered promiscuous mode [ 91.378952][ T5793] veth1_macvtap: entered promiscuous mode [ 91.416488][ T5797] veth0_macvtap: entered promiscuous mode [ 91.437585][ T5804] veth1_vlan: entered promiscuous mode [ 91.449532][ T5797] veth1_macvtap: entered promiscuous mode [ 91.477722][ T5801] veth0_macvtap: entered promiscuous mode [ 91.499152][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.512050][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.528310][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.540860][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.554251][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.574279][ T5801] veth1_macvtap: entered promiscuous mode [ 91.587182][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.599823][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.618081][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.651772][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.662402][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.674200][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.690335][ T5793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.719484][ T5797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.738104][ T5797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.751038][ T5797] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.767938][ T5797] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.816946][ T5804] veth0_macvtap: entered promiscuous mode [ 91.837182][ T5804] veth1_macvtap: entered promiscuous mode [ 91.871390][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.891177][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.903097][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.919860][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.936742][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.949038][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.966046][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.976205][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.991547][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.013891][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.051809][ T5801] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.063729][ T5801] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.074005][ T5801] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.087606][ T5801] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.158114][ T28] cfg80211: failed to load regulatory.db [ 92.214120][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.229481][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.243108][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.255341][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.269693][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.281586][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.306386][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.323309][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.333273][ T5795] Bluetooth: hci0: command tx timeout [ 92.344560][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.372448][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.384535][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.399319][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.412870][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.427249][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.438305][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.453882][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.475419][ T5795] Bluetooth: hci1: command tx timeout [ 92.496764][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.497281][ T5804] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.518528][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.519809][ T5804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.539739][ T5804] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.549029][ T5804] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.560563][ T5795] Bluetooth: hci2: command tx timeout [ 92.612431][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.622663][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.674335][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.717181][ T5795] Bluetooth: hci3: command tx timeout [ 92.718653][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.758885][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.788639][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.852303][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.884790][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.987606][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.020178][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.032182][ T5880] Illegal XDP return value 4294967274 on prog (id 2) dev syz_tun, expect packet loss! [ 93.061818][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.083875][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.044823][ T5902] Zero length message leads to an empty skb [ 94.396383][ T5795] Bluetooth: hci0: command tx timeout [ 94.514556][ T5908] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.561059][ T5795] Bluetooth: hci1: command tx timeout [ 94.635368][ T5795] Bluetooth: hci2: command tx timeout [ 94.794819][ T5795] Bluetooth: hci3: command tx timeout [ 95.471300][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.480921][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.932236][ T5915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.972500][ T5915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.261651][ T5915] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.277226][ T5915] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.295956][ T5915] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.306167][ T5915] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.422452][ T5916] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13'. [ 96.457054][ T5915] syz.1.14 (5915) used greatest stack depth: 20360 bytes left [ 96.769746][ T5964] syz.3.21 uses obsolete (PF_INET,SOCK_PACKET) [ 96.831289][ T5962] netlink: 'syz.2.20': attribute type 3 has an invalid length. [ 96.851346][ T5962] netlink: 'syz.2.20': attribute type 3 has an invalid length. [ 96.968128][ T5961] syz_tun: entered allmulticast mode [ 96.993938][ T5960] syz_tun: left allmulticast mode [ 97.512123][ T5945] IPVS: starting estimator thread 0... [ 97.614764][ T5979] IPVS: using max 15 ests per chain, 36000 per kthread [ 97.988065][ T5992] netlink: 96 bytes leftover after parsing attributes in process `syz.1.31'. [ 98.432502][ T5998] netlink: 'syz.0.34': attribute type 3 has an invalid length. [ 98.461236][ T5998] netlink: 'syz.0.34': attribute type 3 has an invalid length. [ 99.555098][ T5860] IPVS: starting estimator thread 0... [ 99.665187][ T6034] IPVS: using max 16 ests per chain, 38400 per kthread [ 99.923839][ T6038] netlink: 96 bytes leftover after parsing attributes in process `syz.3.50'. [ 100.570241][ T6062] netlink: 96 bytes leftover after parsing attributes in process `syz.0.61'. [ 101.162681][ T6076] netlink: 36 bytes leftover after parsing attributes in process `syz.0.68'. [ 101.366322][ T6082] netlink: 96 bytes leftover after parsing attributes in process `syz.1.71'. [ 101.985527][ T6109] netlink: 36 bytes leftover after parsing attributes in process `syz.1.82'. [ 102.307837][ T6117] netlink: 76 bytes leftover after parsing attributes in process `syz.1.86'. [ 103.106146][ T6136] netlink: 'syz.3.95': attribute type 3 has an invalid length. [ 103.144917][ T6136] netlink: 'syz.3.95': attribute type 3 has an invalid length. [ 103.919442][ T5860] IPVS: starting estimator thread 0... [ 104.034993][ T6166] IPVS: using max 18 ests per chain, 43200 per kthread [ 104.455575][ T5946] IPVS: starting estimator thread 0... [ 104.554610][ T6179] IPVS: using max 18 ests per chain, 43200 per kthread [ 105.385795][ T6212] netlink: 140 bytes leftover after parsing attributes in process `syz.3.128'. [ 105.397407][ T6212] netlink: 'syz.3.128': attribute type 5 has an invalid length. [ 105.420625][ T6212] netlink: 'syz.3.128': attribute type 10 has an invalid length. [ 105.458756][ T6212] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.496572][ T6212] bond0: (slave team0): Enslaving as an active interface with an up link [ 106.245060][ T6237] netlink: 140 bytes leftover after parsing attributes in process `syz.1.139'. [ 106.286763][ T6237] netlink: 'syz.1.139': attribute type 5 has an invalid length. [ 106.311726][ T6237] netlink: 'syz.1.139': attribute type 10 has an invalid length. [ 106.352783][ T6237] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.385215][ T6237] bond0: (slave team0): Enslaving as an active interface with an up link [ 107.072143][ T6262] netlink: 140 bytes leftover after parsing attributes in process `syz.1.151'. [ 107.096464][ T6262] netlink: 'syz.1.151': attribute type 5 has an invalid length. [ 107.110777][ T6262] netlink: 'syz.1.151': attribute type 10 has an invalid length. [ 108.245067][ T6293] netlink: 140 bytes leftover after parsing attributes in process `syz.1.162'. [ 108.282691][ T6293] netlink: 'syz.1.162': attribute type 5 has an invalid length. [ 108.312807][ T6293] netlink: 'syz.1.162': attribute type 10 has an invalid length. [ 109.138082][ T6318] netlink: 140 bytes leftover after parsing attributes in process `syz.1.174'. [ 109.160225][ T6318] netlink: 'syz.1.174': attribute type 5 has an invalid length. [ 109.196467][ T6318] netlink: 'syz.1.174': attribute type 10 has an invalid length. [ 121.661582][ T6716] geneve2: entered promiscuous mode [ 124.160601][ T6802] netlink: 140 bytes leftover after parsing attributes in process `syz.0.388'. [ 124.171512][ T6802] netlink: 'syz.0.388': attribute type 5 has an invalid length. [ 124.183778][ T6802] netlink: 'syz.0.388': attribute type 10 has an invalid length. [ 124.243429][ T6802] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.267841][ T6802] bond0: (slave team0): Enslaving as an active interface with an up link [ 124.671338][ T6815] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.190339][ T6831] netlink: 140 bytes leftover after parsing attributes in process `syz.0.399'. [ 125.216186][ T6831] netlink: 'syz.0.399': attribute type 5 has an invalid length. [ 125.249033][ T6831] netlink: 'syz.0.399': attribute type 10 has an invalid length. [ 125.777847][ T6845] warning: `syz.1.405' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 126.996741][ T6876] netlink: 140 bytes leftover after parsing attributes in process `syz.1.418'. [ 127.086001][ T6876] netlink: 'syz.1.418': attribute type 5 has an invalid length. [ 127.111628][ T6876] netlink: 'syz.1.418': attribute type 10 has an invalid length. [ 127.126254][ T6882] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.413485][ T6890] geneve2: entered promiscuous mode [ 129.446368][ T6947] netlink: set zone limit has 8 unknown bytes [ 130.302918][ T6970] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.324496][ T6970] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.361143][ T6970] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.393982][ T6970] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.419733][ T6970] geneve2: entered promiscuous mode [ 132.425625][ T7025] netlink: 140 bytes leftover after parsing attributes in process `syz.3.482'. [ 132.442552][ T7025] netlink: 'syz.3.482': attribute type 5 has an invalid length. [ 132.521402][ T7025] netlink: 'syz.3.482': attribute type 10 has an invalid length. [ 133.130135][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.141184][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.490653][ T7051] netlink: 140 bytes leftover after parsing attributes in process `syz.0.493'. [ 133.587393][ T7054] netlink: 'syz.0.493': attribute type 5 has an invalid length. [ 133.633878][ T7051] netlink: 'syz.0.493': attribute type 10 has an invalid length. [ 134.647361][ T7086] netlink: 140 bytes leftover after parsing attributes in process `syz.2.508'. [ 134.661657][ T7086] netlink: 'syz.2.508': attribute type 5 has an invalid length. [ 134.674091][ T7086] netlink: 'syz.2.508': attribute type 10 has an invalid length. [ 134.696827][ T7086] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.706102][ T7086] bond0: (slave team0): Enslaving as an active interface with an up link [ 135.348725][ T7107] netlink: 140 bytes leftover after parsing attributes in process `syz.2.518'. [ 135.368472][ T7107] netlink: 'syz.2.518': attribute type 5 has an invalid length. [ 135.380633][ T7107] netlink: 'syz.2.518': attribute type 10 has an invalid length. [ 137.475591][ T7159] netlink: 140 bytes leftover after parsing attributes in process `syz.1.540'. [ 137.535031][ T7159] netlink: 'syz.1.540': attribute type 5 has an invalid length. [ 137.564683][ T7159] netlink: 'syz.1.540': attribute type 10 has an invalid length. [ 137.853849][ T7172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.546'. [ 138.791616][ T7188] netlink: 140 bytes leftover after parsing attributes in process `syz.0.551'. [ 138.813123][ T7188] netlink: 'syz.0.551': attribute type 5 has an invalid length. [ 138.829850][ T7188] netlink: 'syz.0.551': attribute type 10 has an invalid length. [ 140.271057][ T7219] geneve2: entered promiscuous mode [ 142.701184][ T7296] netlink: 140 bytes leftover after parsing attributes in process `syz.0.599'. [ 142.721842][ T7296] netlink: 'syz.0.599': attribute type 5 has an invalid length. [ 142.744254][ T7296] netlink: 'syz.0.599': attribute type 10 has an invalid length. [ 142.903686][ T7303] netlink: 36 bytes leftover after parsing attributes in process `syz.0.600'. [ 143.421155][ T7317] netlink: 140 bytes leftover after parsing attributes in process `syz.2.608'. [ 143.449272][ T7317] netlink: 'syz.2.608': attribute type 5 has an invalid length. [ 143.485390][ T7317] netlink: 'syz.2.608': attribute type 10 has an invalid length. [ 144.392936][ T7345] netlink: 140 bytes leftover after parsing attributes in process `syz.1.619'. [ 144.405473][ T7345] netlink: 'syz.1.619': attribute type 5 has an invalid length. [ 144.423697][ T7345] netlink: 'syz.1.619': attribute type 10 has an invalid length. [ 145.054768][ T7365] netlink: 140 bytes leftover after parsing attributes in process `syz.1.629'. [ 145.107059][ T7365] netlink: 'syz.1.629': attribute type 5 has an invalid length. [ 145.131847][ T7365] netlink: 'syz.1.629': attribute type 10 has an invalid length. [ 145.884033][ T7393] netlink: 140 bytes leftover after parsing attributes in process `syz.3.640'. [ 145.899840][ T7393] netlink: 'syz.3.640': attribute type 5 has an invalid length. [ 145.920631][ T7393] netlink: 'syz.3.640': attribute type 10 has an invalid length. [ 146.705407][ T7414] netlink: 140 bytes leftover after parsing attributes in process `syz.1.649'. [ 147.403420][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.411877][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.035740][ T7417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.121058][ T7417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.275422][ T7417] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.294749][ T7417] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.303675][ T7417] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.313269][ T7417] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.322944][ T7417] geneve2: left promiscuous mode [ 149.346829][ T7444] netlink: 140 bytes leftover after parsing attributes in process `syz.1.659'. [ 149.361640][ T7445] validate_nla: 2 callbacks suppressed [ 149.361656][ T7445] netlink: 'syz.1.659': attribute type 5 has an invalid length. [ 149.385564][ T7446] netlink: 'syz.1.659': attribute type 10 has an invalid length. [ 150.111004][ T7493] netlink: 140 bytes leftover after parsing attributes in process `syz.1.677'. [ 150.121067][ T7493] netlink: 'syz.1.677': attribute type 5 has an invalid length. [ 150.131560][ T7493] netlink: 'syz.1.677': attribute type 10 has an invalid length. [ 152.795134][ T7590] netlink: zone id is out of range [ 152.800323][ T7590] netlink: zone id is out of range [ 152.806157][ T7590] netlink: set zone limit has 4 unknown bytes [ 153.710460][ T7628] netlink: 68 bytes leftover after parsing attributes in process `syz.2.740'. [ 153.741317][ T7628] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 153.763054][ T7628] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.771726][ T7628] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.303593][ T7648] bond0: (slave team0): Releasing backup interface [ 154.315705][ T7648] bridge_slave_0: left allmulticast mode [ 154.321519][ T7648] bridge_slave_0: left promiscuous mode [ 154.327775][ T7648] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.342461][ T7648] bridge_slave_1: left allmulticast mode [ 154.349968][ T7648] bridge_slave_1: left promiscuous mode [ 154.356937][ T7648] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.372276][ T7648] bond0: (slave bond_slave_0): Releasing backup interface [ 154.385945][ T7648] bond0: (slave bond_slave_1): Releasing backup interface [ 154.416601][ T7648] team0: Port device team_slave_0 removed [ 154.438348][ T7648] team0: Port device team_slave_1 removed [ 154.446866][ T7648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.454919][ T7648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.465640][ T7648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.473080][ T7648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.840363][ T7698] netlink: 140 bytes leftover after parsing attributes in process `syz.0.769'. [ 155.851178][ T7698] netlink: 'syz.0.769': attribute type 5 has an invalid length. [ 155.861111][ T7698] netlink: 'syz.0.769': attribute type 10 has an invalid length. [ 156.525632][ T7722] netlink: 140 bytes leftover after parsing attributes in process `syz.3.778'. [ 156.545561][ T7722] netlink: 'syz.3.778': attribute type 5 has an invalid length. [ 156.568309][ T7722] netlink: 'syz.3.778': attribute type 10 has an invalid length. [ 156.588465][ T7722] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.613269][ T7722] bond0: (slave team0): Enslaving as an active interface with an up link [ 157.657114][ T7748] netlink: 'syz.1.789': attribute type 5 has an invalid length. [ 157.668818][ T7748] netlink: 'syz.1.789': attribute type 10 has an invalid length. [ 158.192597][ T7776] netlink: 'syz.2.800': attribute type 5 has an invalid length. [ 158.202827][ T7776] netlink: 'syz.2.800': attribute type 10 has an invalid length. [ 158.946145][ T7798] netlink: 'syz.0.809': attribute type 5 has an invalid length. [ 158.958600][ T7798] netlink: 'syz.0.809': attribute type 10 has an invalid length. [ 159.121230][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 159.600541][ T7826] syz_tun: entered allmulticast mode [ 159.612002][ T7825] syz_tun: left allmulticast mode [ 161.117423][ T7875] validate_nla: 4 callbacks suppressed [ 161.117437][ T7875] netlink: 'syz.3.842': attribute type 5 has an invalid length. [ 161.136055][ T7875] netlink: 'syz.3.842': attribute type 10 has an invalid length. [ 161.861505][ T7896] netlink: 'syz.0.851': attribute type 5 has an invalid length. [ 161.871859][ T7896] netlink: 'syz.0.851': attribute type 10 has an invalid length. [ 162.505550][ T7917] netlink: 'syz.3.860': attribute type 5 has an invalid length. [ 162.520447][ T7917] netlink: 'syz.3.860': attribute type 10 has an invalid length. [ 162.653129][ T7924] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 162.710391][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.863'. [ 163.215710][ T7937] netlink: 'syz.0.869': attribute type 5 has an invalid length. [ 163.226055][ T7937] netlink: 'syz.0.869': attribute type 10 has an invalid length. [ 163.539867][ T7951] syzkaller1: entered promiscuous mode [ 163.548077][ T7951] syzkaller1: entered allmulticast mode [ 167.074566][ T8061] netlink: 'syz.1.923': attribute type 5 has an invalid length. [ 167.091173][ T8061] netlink: 'syz.1.923': attribute type 10 has an invalid length. [ 167.152220][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.921'. [ 167.604002][ T8087] tc_dump_action: action bad kind [ 168.493271][ T8132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.956'. [ 168.508582][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'. [ 170.046933][ T8198] netlink: 'syz.0.978': attribute type 5 has an invalid length. [ 170.073739][ T8198] netlink: 'syz.0.978': attribute type 10 has an invalid length. [ 170.210114][ T8207] netlink: 'syz.0.981': attribute type 26 has an invalid length. [ 170.585126][ T8223] netlink: 'syz.2.989': attribute type 5 has an invalid length. [ 170.607702][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'. [ 170.648749][ T8223] netlink: 'syz.2.989': attribute type 10 has an invalid length. [ 170.788173][ T8232] tc_dump_action: action bad kind [ 171.085828][ T8247] netlink: 96 bytes leftover after parsing attributes in process `syz.3.998'. [ 171.156348][ T8252] netlink: 'syz.1.1000': attribute type 5 has an invalid length. [ 171.178152][ T8252] netlink: 'syz.1.1000': attribute type 10 has an invalid length. [ 171.265410][ T8255] tc_dump_action: action bad kind [ 171.845570][ T8275] netlink: 'syz.0.1012': attribute type 5 has an invalid length. [ 172.387782][ T8304] validate_nla: 1 callbacks suppressed [ 172.387798][ T8304] netlink: 'syz.1.1025': attribute type 27 has an invalid length. [ 172.410237][ T8304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1025'. [ 172.421976][ T8304] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 172.732367][ T8319] netlink: 'syz.2.1032': attribute type 12 has an invalid length. [ 173.186676][ T8339] block nbd0: shutting down sockets [ 173.403292][ T8352] syz.2.1047[8352]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 173.421909][ T8352] loop2: detected capacity change from 0 to 64 [ 173.825860][ T8365] block nbd0: shutting down sockets [ 174.206128][ T8375] loop1: detected capacity change from 0 to 512 [ 174.239653][ T8357] loop3: detected capacity change from 0 to 32768 [ 174.264583][ T8375] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 174.299109][ T8357] ERROR: (device loop3): dtReadFirst: stbl[0] out of bound [ 174.299109][ T8357] [ 174.312436][ T8357] ERROR: (device loop3): remounting filesystem as read-only [ 174.314762][ T8375] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 174.387917][ T8375] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 174.425062][ T8375] EXT4-fs (loop1): 1 truncate cleaned up [ 174.432387][ T8375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.503049][ T5804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.777247][ T8377] loop2: detected capacity change from 0 to 32768 [ 175.872420][ T8377] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 175.955824][ T8377] XFS (loop2): Ending clean mount [ 176.227561][ T5797] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 176.684348][ C0] sched: RT throttling activated [ 177.086637][ T8406] block nbd0: shutting down sockets [ 177.399006][ T8420] loop0: detected capacity change from 0 to 8192 [ 177.430172][ T8420] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 177.460387][ T8420] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 177.485475][ T8420] REISERFS (device loop0): using ordered data mode [ 177.512076][ T8420] reiserfs: using flush barriers [ 177.537876][ T8420] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 177.574270][ T8420] REISERFS (device loop0): checking transaction log (loop0) [ 177.636127][ T8420] REISERFS (device loop0): Using r5 hash to sort names [ 177.649895][ T8420] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 177.706905][ T8435] loop3: detected capacity change from 0 to 1024 [ 177.768455][ T27] audit: type=1800 audit(1757983062.189:2): pid=8435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1079" name=3A1B dev="loop3" ino=26 res=0 errno=0 [ 177.840848][ T1123] hfsplus: b-tree write err: -5, ino 4 [ 179.875990][ T8460] loop3: detected capacity change from 0 to 32768 [ 179.888466][ T8460] [ 179.888466][ T8460] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.888466][ T8460] [ 179.919727][ T8460] [ 179.919727][ T8460] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.919727][ T8460] [ 179.935867][ T8460] [ 179.935867][ T8460] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.935867][ T8460] [ 179.947747][ T8460] [ 179.947747][ T8460] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.947747][ T8460] [ 179.962556][ T112] [ 179.962556][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.962556][ T112] [ 179.992903][ T5801] [ 179.992903][ T5801] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.992903][ T5801] [ 180.006435][ T5801] [ 180.006435][ T5801] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.006435][ T5801] [ 180.415697][ T8472] loop2: detected capacity change from 0 to 1024 [ 180.445660][ T8474] loop3: detected capacity change from 0 to 1024 [ 180.470598][ T27] audit: type=1800 audit(1757983064.889:3): pid=8472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1092" name=3A1B dev="loop2" ino=26 res=0 errno=0 [ 180.472926][ T8474] ======================================================= [ 180.472926][ T8474] WARNING: The mand mount option has been deprecated and [ 180.472926][ T8474] and is ignored by this kernel. Remove the mand [ 180.472926][ T8474] option from the mount to silence this warning. [ 180.472926][ T8474] ======================================================= [ 180.525930][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.602826][ T3548] hfsplus: b-tree write err: -5, ino 4 [ 180.613043][ T8474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.643439][ T8474] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.765053][ T8474] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 180.802213][ T8474] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2983: inode #15: comm syz.3.1093: corrupted xattr block 128: invalid ea_ino [ 180.846345][ T8487] loop0: detected capacity change from 0 to 4096 [ 180.847343][ T8474] EXT4-fs warning (device loop3): ext4_evict_inode:272: xattr delete (err -117) [ 180.855854][ T8487] ntfs: (device loop0): parse_options(): The show_sys_files option requires a boolean argument. [ 180.919578][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.171109][ T8466] loop1: detected capacity change from 0 to 32768 [ 181.189603][ T8466] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 181.203228][ T8466] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 181.263598][ T8466] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 181.280747][ T5949] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 181.288588][ T5949] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 181.375306][ T5949] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 86ms [ 181.392098][ T5949] gfs2: fsid=syz:syz.0: jid=0: Done [ 181.400893][ T8466] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 182.039054][ T8518] loop0: detected capacity change from 0 to 1024 [ 182.094779][ T27] audit: type=1800 audit(1757983066.509:4): pid=8518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1105" name=3A1B dev="loop0" ino=26 res=0 errno=0 [ 182.231429][ T1123] hfsplus: b-tree write err: -5, ino 4 [ 183.608093][ T8547] loop3: detected capacity change from 0 to 8192 [ 183.645542][ T8547] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 183.660067][ T8547] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 183.671281][ T8547] REISERFS (device loop3): using ordered data mode [ 183.678667][ T8547] reiserfs: using flush barriers [ 183.696064][ T8547] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 183.713697][ T8547] REISERFS (device loop3): checking transaction log (loop3) [ 183.724013][ T8547] REISERFS (device loop3): Using r5 hash to sort names [ 183.737136][ T8547] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 183.908138][ T8562] loop0: detected capacity change from 0 to 1024 [ 184.011621][ T12] hfsplus: b-tree write err: -5, ino 4 [ 184.261042][ T8575] loop0: detected capacity change from 0 to 64 [ 185.297987][ T8600] loop3: detected capacity change from 0 to 40427 [ 185.318959][ T8600] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 185.379207][ T8600] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 185.400224][ T8600] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x7ffff [ 185.423796][ T8602] loop2: detected capacity change from 0 to 8192 [ 185.430534][ T8600] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 185.449429][ T8602] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 185.469346][ T8600] F2FS-fs (loop3): invalid crc value [ 185.470361][ T8602] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 185.494859][ T8602] REISERFS (device loop2): using ordered data mode [ 185.518438][ T8600] F2FS-fs (loop3): Found nat_bits in checkpoint [ 185.527024][ T8602] reiserfs: using flush barriers [ 185.546859][ T8602] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 185.583117][ T8612] loop1: detected capacity change from 0 to 64 [ 185.584698][ T8602] REISERFS (device loop2): checking transaction log (loop2) [ 185.603560][ T8602] REISERFS (device loop2): Using r5 hash to sort names [ 185.611374][ T8602] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 185.651595][ T8600] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 185.678305][ T8600] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 185.768577][ T8600] syz.3.1136: attempt to access beyond end of device [ 185.768577][ T8600] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 185.857107][ T5801] syz-executor: attempt to access beyond end of device [ 185.857107][ T5801] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 185.890670][ T5801] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 186.583781][ T8619] loop1: detected capacity change from 0 to 32768 [ 186.866769][ T8635] loop2: detected capacity change from 0 to 64 [ 187.218800][ T8632] loop3: detected capacity change from 0 to 32768 [ 187.580508][ T8647] loop2: detected capacity change from 0 to 4096 [ 187.639575][ T8647] ntfs: volume version 3.1. [ 187.863526][ T8644] loop0: detected capacity change from 0 to 32768 [ 187.880943][ T8644] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1153 (8644) [ 187.928633][ T8644] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 187.941324][ T8644] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 187.951763][ T8644] BTRFS info (device loop0): using free space tree [ 188.010098][ T8644] BTRFS info (device loop0): enabling ssd optimizations [ 188.025635][ T8644] BTRFS info (device loop0): auto enabling async discard [ 188.160028][ T5793] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 188.527619][ T8669] loop3: detected capacity change from 0 to 64 [ 188.700112][ T8672] loop1: detected capacity change from 0 to 8192 [ 188.718044][ T8672] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 188.750818][ T8672] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 188.767519][ T8672] REISERFS (device loop1): using ordered data mode [ 188.777233][ T8672] reiserfs: using flush barriers [ 188.787977][ T8672] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 188.842537][ T8672] REISERFS (device loop1): checking transaction log (loop1) [ 188.874655][ T8672] REISERFS (device loop1): Using r5 hash to sort names [ 188.896187][ T8672] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 189.053273][ T8690] loop0: detected capacity change from 0 to 256 [ 189.062438][ T8690] exfat: Deprecated parameter 'utf8' [ 189.076820][ T8690] exfat: Deprecated parameter 'utf8' [ 189.084069][ T8690] exfat: Deprecated parameter 'utf8' [ 189.097851][ T8690] exfat: Deprecated parameter 'namecase' [ 189.127536][ T8690] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 189.726189][ T8689] loop3: detected capacity change from 0 to 32768 [ 189.838439][ T8696] loop2: detected capacity change from 0 to 8192 [ 189.875724][ T8696] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 189.909970][ T8696] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 189.935796][ T8696] REISERFS (device loop2): using ordered data mode [ 189.954299][ T8696] reiserfs: using flush barriers [ 189.982038][ T8696] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 189.999216][ T8696] REISERFS (device loop2): checking transaction log (loop2) [ 190.015282][ T8696] REISERFS (device loop2): Using r5 hash to sort names [ 190.029778][ T8696] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 190.597911][ T8712] loop0: detected capacity change from 0 to 64 [ 190.725687][ T8698] loop1: detected capacity change from 0 to 32768 [ 190.766235][ T8698] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 190.840221][ T8698] XFS (loop1): Ending clean mount [ 190.878845][ T8698] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 190.993518][ T8698] syz.1.1168 (8698) used greatest stack depth: 20232 bytes left [ 191.041990][ T5804] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 191.060735][ T8727] loop0: detected capacity change from 0 to 8192 [ 191.060917][ T8715] loop3: detected capacity change from 0 to 32768 [ 191.080118][ T8727] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 191.094154][ T8727] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 191.107535][ T8727] REISERFS (device loop0): using ordered data mode [ 191.120694][ T8727] reiserfs: using flush barriers [ 191.130300][ T8727] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 191.148342][ T8727] REISERFS (device loop0): checking transaction log (loop0) [ 191.158266][ T8727] REISERFS (device loop0): Using r5 hash to sort names [ 191.175325][ T8727] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 191.206681][ T8715] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 191.405821][ T5801] ocfs2: Unmounting device (7,3) on (node local) [ 191.930991][ T8734] loop1: detected capacity change from 0 to 32768 [ 192.406372][ T8752] loop0: detected capacity change from 0 to 64 [ 193.459604][ T8738] loop3: detected capacity change from 0 to 32768 [ 193.488904][ T8752] Trying to free block not in datazone [ 193.519414][ T8738] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 193.528233][ T8752] Trying to free block not in datazone [ 193.552063][ T8752] Trying to free block not in datazone [ 193.675791][ T8738] XFS (loop3): Ending clean mount [ 193.707326][ T8738] XFS (loop3): Quotacheck needed: Please wait. [ 193.789167][ T8738] XFS (loop3): Quotacheck: Done. [ 194.018447][ T5801] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 194.615102][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.621513][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.296712][ T8788] loop2: detected capacity change from 0 to 16 [ 195.332256][ T8788] erofs: (device loop2): mounted with root inode @ nid 36. [ 195.359775][ T5795] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 195.377789][ T8788] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 195.404424][ T27] audit: type=1800 audit(1757983079.809:5): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1198" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 196.517747][ T8793] loop1: detected capacity change from 0 to 32768 [ 196.592630][ T8793] JBD2: Ignoring recovery information on journal [ 196.728508][ T8793] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 197.361998][ T8816] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1208'. [ 197.576671][ T8814] loop3: detected capacity change from 0 to 40427 [ 197.613024][ T8814] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 197.621475][ T8814] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 197.645577][ T8816] netlink: 'syz.2.1208': attribute type 10 has an invalid length. [ 197.653964][ T8814] F2FS-fs (loop3): invalid crc value [ 197.685932][ T8814] F2FS-fs (loop3): Found nat_bits in checkpoint [ 198.256872][ T8814] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 198.264011][ T8814] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 198.547696][ T5804] ocfs2: Unmounting device (7,1) on (node local) [ 199.926920][ T8851] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1218'. [ 200.001937][ T8851] netlink: 'syz.3.1218': attribute type 10 has an invalid length. [ 200.838275][ T8878] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1230'. [ 200.881838][ T8878] netlink: 'syz.0.1230': attribute type 10 has an invalid length. [ 201.815460][ T8908] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1242'. [ 201.846088][ T8908] netlink: 'syz.0.1242': attribute type 10 has an invalid length. [ 202.292319][ T8926] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1251'. [ 202.323781][ T8926] netlink: 'syz.0.1251': attribute type 10 has an invalid length. [ 203.330483][ T8957] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1262'. [ 203.359797][ T8957] netlink: 'syz.0.1262': attribute type 10 has an invalid length. [ 203.479037][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1265'. [ 204.205587][ T8981] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1273'. [ 204.244229][ T8981] netlink: 'syz.0.1273': attribute type 10 has an invalid length. [ 204.649711][ T8996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1280'. [ 204.783729][ T9004] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1283'. [ 204.805050][ T9004] netlink: 'syz.2.1283': attribute type 10 has an invalid length. [ 205.376070][ T9024] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1292'. [ 205.388448][ T9024] netlink: 'syz.2.1292': attribute type 10 has an invalid length. [ 205.481581][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1293'. [ 206.003411][ T9048] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1301'. [ 206.028201][ T9048] netlink: 'syz.3.1301': attribute type 10 has an invalid length. [ 206.934206][ T9073] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1312'. [ 206.967586][ T9073] netlink: 'syz.0.1312': attribute type 10 has an invalid length. [ 207.992531][ T9104] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1324'. [ 208.009523][ T9104] netlink: 'syz.3.1324': attribute type 10 has an invalid length. [ 208.702282][ T9128] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1334'. [ 208.735284][ T9128] netlink: 'syz.0.1334': attribute type 10 has an invalid length. [ 209.581900][ T9153] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1345'. [ 209.604791][ T9153] netlink: 'syz.3.1345': attribute type 10 has an invalid length. [ 210.648060][ T9179] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1356'. [ 210.698740][ T9179] netlink: 'syz.0.1356': attribute type 10 has an invalid length. [ 211.278344][ T9203] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1366'. [ 211.300697][ T9203] netlink: 'syz.3.1366': attribute type 10 has an invalid length. [ 211.991764][ T9220] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1375'. [ 212.001299][ T9167] Bluetooth: hci1: command 0x0406 tx timeout [ 212.001415][ T9167] Bluetooth: hci0: command 0x0406 tx timeout [ 212.001508][ T9167] Bluetooth: hci2: command 0x0406 tx timeout [ 212.001558][ T9167] Bluetooth: hci3: command 0x0406 tx timeout [ 212.061090][ T9220] netlink: 'syz.3.1375': attribute type 10 has an invalid length. [ 212.994032][ T9252] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1386'. [ 213.013863][ T9252] netlink: 'syz.0.1386': attribute type 10 has an invalid length. [ 213.660888][ T9270] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1395'. [ 213.697940][ T9270] netlink: 'syz.3.1395': attribute type 10 has an invalid length. [ 214.593733][ T9288] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1404'. [ 214.640172][ T9288] netlink: 'syz.1.1404': attribute type 10 has an invalid length. [ 215.300248][ T9313] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1414'. [ 215.312402][ T9313] netlink: 'syz.0.1414': attribute type 10 has an invalid length. [ 215.926204][ T9332] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1423'. [ 215.956949][ T9332] netlink: 'syz.2.1423': attribute type 10 has an invalid length. [ 216.252285][ T9341] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1427'. [ 217.003183][ T9357] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1434'. [ 217.038092][ T9357] netlink: 'syz.3.1434': attribute type 10 has an invalid length. [ 217.234788][ T9360] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1437'. [ 217.752504][ T9379] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1444'. [ 217.785674][ T9379] netlink: 'syz.0.1444': attribute type 10 has an invalid length. [ 217.789543][ T9374] loop1: detected capacity change from 0 to 8192 [ 217.822575][ T9374] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 217.836444][ T9374] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 217.846206][ T9374] REISERFS (device loop1): using ordered data mode [ 217.852908][ T9374] reiserfs: using flush barriers [ 217.859916][ T9374] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 217.883782][ T9374] REISERFS (device loop1): checking transaction log (loop1) [ 217.914762][ T9374] REISERFS (device loop1): Using r5 hash to sort names [ 217.925557][ T9374] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 217.986219][ T9387] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1447'. [ 218.209785][ T9393] loop1: detected capacity change from 0 to 64 [ 218.434253][ T9402] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1454'. [ 218.450938][ T9402] netlink: 'syz.3.1454': attribute type 10 has an invalid length. [ 218.662830][ T9406] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1456'. [ 219.027028][ T9416] loop0: detected capacity change from 0 to 64 [ 219.047198][ T9410] loop2: detected capacity change from 0 to 8192 [ 219.079342][ T9410] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 219.114789][ T9410] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 219.134699][ T9410] REISERFS (device loop2): using ordered data mode [ 219.141466][ T9410] reiserfs: using flush barriers [ 219.165793][ T9410] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 219.188793][ T9421] loop1: detected capacity change from 0 to 128 [ 219.199258][ T9410] REISERFS (device loop2): checking transaction log (loop2) [ 219.229185][ T9410] REISERFS (device loop2): Using r5 hash to sort names [ 219.260844][ T9410] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 219.331180][ T9425] netlink: 'syz.0.1463': attribute type 10 has an invalid length. [ 220.025293][ T9444] loop1: detected capacity change from 0 to 64 [ 220.256372][ T9451] loop3: detected capacity change from 0 to 256 [ 220.283955][ T9449] loop1: detected capacity change from 0 to 8192 [ 220.303742][ T9449] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 220.309053][ T9451] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 220.326678][ T9449] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 220.340075][ T9449] REISERFS (device loop1): using ordered data mode [ 220.348251][ T9449] reiserfs: using flush barriers [ 220.363737][ T9449] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 220.403837][ T9449] REISERFS (device loop1): checking transaction log (loop1) [ 220.439563][ T9449] REISERFS (device loop1): Using r5 hash to sort names [ 220.483433][ T9449] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 220.491262][ T9454] __nla_validate_parse: 2 callbacks suppressed [ 220.491284][ T9454] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1477'. [ 220.563694][ T9456] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1476'. [ 220.590805][ T9456] netlink: 'syz.0.1476': attribute type 10 has an invalid length. [ 222.325070][ T9486] binder: 9485:9486 ioctl c0306201 200000000080 returned -14 [ 222.373074][ T9488] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1490'. [ 222.397292][ T9488] netlink: 'syz.0.1490': attribute type 10 has an invalid length. [ 222.491924][ T9484] loop3: detected capacity change from 0 to 8192 [ 222.513971][ T9484] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 222.546546][ T9484] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 222.608211][ T9484] REISERFS (device loop3): using ordered data mode [ 222.618270][ T9484] reiserfs: using flush barriers [ 222.655542][ T9484] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 222.695098][ T9484] REISERFS (device loop3): checking transaction log (loop3) [ 222.725757][ T9484] REISERFS (device loop3): Using r5 hash to sort names [ 222.740676][ T9484] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 223.102939][ T9510] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1500'. [ 223.121696][ T9510] netlink: 'syz.1.1500': attribute type 10 has an invalid length. [ 223.769712][ T9528] loop1: detected capacity change from 0 to 256 [ 223.790467][ T9528] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 223.920893][ T9524] loop2: detected capacity change from 0 to 8192 [ 223.946193][ T9524] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 223.988561][ T9524] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 224.029597][ T9524] REISERFS (device loop2): using ordered data mode [ 224.043374][ T9524] reiserfs: using flush barriers [ 224.050836][ T9524] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 224.067865][ T9524] REISERFS (device loop2): checking transaction log (loop2) [ 224.078577][ T9524] REISERFS (device loop2): Using r5 hash to sort names [ 224.088151][ T9524] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 224.154147][ T9537] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1511'. [ 224.192277][ T9537] netlink: 'syz.3.1511': attribute type 10 has an invalid length. [ 225.342513][ T9571] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1525'. [ 225.377717][ T9571] netlink: 'syz.1.1525': attribute type 10 has an invalid length. [ 225.434146][ T9565] loop2: detected capacity change from 0 to 8192 [ 225.495568][ T9565] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 225.514981][ T9565] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 225.544172][ T9565] REISERFS (device loop2): using ordered data mode [ 225.579443][ T9565] reiserfs: using flush barriers [ 225.606987][ T9565] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 225.660899][ T9565] REISERFS (device loop2): checking transaction log (loop2) [ 225.684833][ T9565] REISERFS (device loop2): Using r5 hash to sort names [ 225.706627][ T9565] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 226.334492][ T9597] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1536'. [ 226.347618][ T9597] netlink: 'syz.1.1536': attribute type 10 has an invalid length. [ 226.749491][ T9608] loop0: detected capacity change from 0 to 8192 [ 226.763123][ T9608] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 226.782455][ T9608] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 226.786874][ T9613] loop3: detected capacity change from 0 to 128 [ 226.792456][ T9608] REISERFS (device loop0): using ordered data mode [ 226.807288][ T9608] reiserfs: using flush barriers [ 226.814534][ T9608] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 226.827363][ T9613] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 226.831828][ T9608] REISERFS (device loop0): checking transaction log (loop0) [ 226.852806][ T9608] REISERFS (device loop0): Using r5 hash to sort names [ 226.861436][ T9608] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 226.877915][ T9613] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 227.182275][ T9622] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1545'. [ 227.203253][ T9622] netlink: 'syz.0.1545': attribute type 10 has an invalid length. [ 227.774708][ T9628] loop2: detected capacity change from 0 to 32768 [ 227.787712][ T9628] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1550 (9628) [ 227.805931][ T9639] loop0: detected capacity change from 0 to 8192 [ 227.810916][ T9628] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 227.815431][ T9639] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 227.828477][ T9628] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 227.837303][ T9639] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 227.852493][ T9628] BTRFS info (device loop2): using free space tree [ 227.856130][ T9639] REISERFS (device loop0): using ordered data mode [ 227.870512][ T9639] reiserfs: using flush barriers [ 227.879220][ T9639] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 227.895096][ T9628] BTRFS info (device loop2): enabling ssd optimizations [ 227.896381][ T9639] REISERFS (device loop0): checking transaction log (loop0) [ 227.902625][ T9628] BTRFS info (device loop2): auto enabling async discard [ 227.917839][ T9639] REISERFS (device loop0): Using r5 hash to sort names [ 227.927137][ T9639] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 228.050931][ T5797] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 228.336527][ T9659] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1557'. [ 228.416151][ T9663] loop2: detected capacity change from 0 to 64 [ 228.499457][ T9659] netlink: 'syz.0.1557': attribute type 10 has an invalid length. [ 229.711163][ T9678] loop3: detected capacity change from 0 to 8192 [ 229.739698][ T9678] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 229.753128][ T9678] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 229.763276][ T9678] REISERFS (device loop3): using ordered data mode [ 229.770007][ T9678] reiserfs: using flush barriers [ 229.778391][ T9678] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 229.796508][ T9678] REISERFS (device loop3): checking transaction log (loop3) [ 229.808758][ T9678] REISERFS (device loop3): Using r5 hash to sort names [ 229.818573][ T9678] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 230.107501][ T9694] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1570'. [ 230.126910][ T9694] netlink: 'syz.3.1570': attribute type 10 has an invalid length. [ 231.254004][ T9715] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1579'. [ 231.267138][ T9710] loop1: detected capacity change from 0 to 8192 [ 231.278348][ T9715] netlink: 'syz.0.1579': attribute type 10 has an invalid length. [ 231.288423][ T9710] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 231.317849][ T9710] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 231.335527][ T9710] REISERFS (device loop1): using ordered data mode [ 231.352025][ T9710] reiserfs: using flush barriers [ 231.390646][ T9710] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 231.449863][ T9710] REISERFS (device loop1): checking transaction log (loop1) [ 231.480918][ T9710] REISERFS (device loop1): Using r5 hash to sort names [ 231.502395][ T9710] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 232.168405][ T9738] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1588'. [ 232.179448][ T9738] netlink: 'syz.1.1588': attribute type 5 has an invalid length. [ 232.189963][ T9738] netlink: 'syz.1.1588': attribute type 10 has an invalid length. [ 232.283138][ T5105] Bluetooth: hci2: unknown advertising packet type: 0x1c [ 232.511052][ T9741] loop1: detected capacity change from 0 to 32768 [ 232.529303][ T9741] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.1589 (9741) [ 232.548705][ T9741] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 232.559815][ T9741] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 232.569981][ T9741] BTRFS info (device loop1): enabling ssd optimizations [ 232.578737][ T9741] BTRFS info (device loop1): not using ssd optimizations [ 232.587399][ T9741] BTRFS info (device loop1): turning off barriers [ 232.594581][ T9741] BTRFS info (device loop1): using free space tree [ 232.701123][ T5804] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 233.060759][ T9772] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1597'. [ 233.085291][ T9772] netlink: 'syz.3.1597': attribute type 5 has an invalid length. [ 233.116797][ T9772] netlink: 'syz.3.1597': attribute type 10 has an invalid length. [ 233.199016][ T9770] loop0: detected capacity change from 0 to 8192 [ 233.236629][ T9770] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 233.255026][ T9770] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 233.281385][ T9770] REISERFS (device loop0): using ordered data mode [ 233.295601][ T9770] reiserfs: using flush barriers [ 233.308718][ T9770] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 233.346295][ T9770] REISERFS (device loop0): checking transaction log (loop0) [ 233.362579][ T9770] REISERFS (device loop0): Using r5 hash to sort names [ 233.370196][ T9770] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 234.878823][ T9797] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1607'. [ 234.919939][ T9797] netlink: 'syz.3.1607': attribute type 5 has an invalid length. [ 234.963265][ T9797] netlink: 'syz.3.1607': attribute type 10 has an invalid length. [ 235.675875][ T9801] loop1: detected capacity change from 0 to 32768 [ 235.706770][ T9801] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 235.781969][ T9801] XFS (loop1): Ending clean mount [ 235.830250][ T5804] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 236.138443][ T9833] loop1: detected capacity change from 0 to 8192 [ 236.146958][ T9833] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 236.160562][ T9833] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 236.173298][ T9833] REISERFS (device loop1): using ordered data mode [ 236.180008][ T9833] reiserfs: using flush barriers [ 236.190517][ T9833] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 236.223521][ T9833] REISERFS (device loop1): checking transaction log (loop1) [ 236.252413][ T9833] REISERFS (device loop1): Using r5 hash to sort names [ 236.262237][ T9833] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 236.306300][ T9836] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1620'. [ 236.316906][ T9836] netlink: 'syz.2.1620': attribute type 5 has an invalid length. [ 236.327496][ T9836] netlink: 'syz.2.1620': attribute type 10 has an invalid length. [ 237.872463][ T9865] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1630'. [ 237.888645][ T9865] netlink: 'syz.1.1630': attribute type 5 has an invalid length. [ 237.900367][ T9865] netlink: 'syz.1.1630': attribute type 10 has an invalid length. [ 238.462001][ T9869] loop0: detected capacity change from 0 to 32768 [ 238.516904][ T9869] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 238.544670][ T9880] loop2: detected capacity change from 0 to 8192 [ 238.555795][ T9880] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 238.570203][ T9880] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 238.583398][ T9880] REISERFS (device loop2): using ordered data mode [ 238.602225][ T9880] reiserfs: using flush barriers [ 238.613138][ T9880] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 238.655764][ T9880] REISERFS (device loop2): checking transaction log (loop2) [ 238.677695][ T9880] REISERFS (device loop2): Using r5 hash to sort names [ 238.689283][ T9880] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 238.978269][ T5793] ocfs2: Unmounting device (7,0) on (node local) [ 238.989449][ T9893] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1644'. [ 239.002392][ T9893] netlink: 'syz.1.1644': attribute type 5 has an invalid length. [ 239.160623][ T9893] netlink: 'syz.1.1644': attribute type 10 has an invalid length. [ 240.132674][ T9901] loop0: detected capacity change from 0 to 4096 [ 240.140410][ T9901] ntfs: (device loop0): parse_options(): The errors option requires an argument. [ 240.530084][ T9918] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1653'. [ 240.542298][ T9918] netlink: 'syz.1.1653': attribute type 5 has an invalid length. [ 240.703539][ T9921] loop0: detected capacity change from 0 to 8192 [ 240.718713][ T9921] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 240.733685][ T9921] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 240.744811][ T9921] REISERFS (device loop0): using ordered data mode [ 240.751604][ T9921] reiserfs: using flush barriers [ 240.760672][ T9921] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 240.780350][ T9921] REISERFS (device loop0): checking transaction log (loop0) [ 240.797719][ T9921] REISERFS (device loop0): Using r5 hash to sort names [ 240.810512][ T9921] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 241.514066][ T9926] loop2: detected capacity change from 0 to 32768 [ 241.569403][ T9926] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 241.678609][ T9926] XFS (loop2): Ending clean mount [ 241.701886][ T9926] XFS (loop2): Quotacheck needed: Please wait. [ 241.782917][ T9926] XFS (loop2): Quotacheck: Done. [ 241.902959][ T5797] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 242.031487][ T9944] loop3: detected capacity change from 0 to 4096 [ 242.370034][ T9948] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1663'. [ 242.381688][ T9948] netlink: 'syz.2.1663': attribute type 5 has an invalid length. [ 242.841845][ T9923] loop1: detected capacity change from 0 to 131072 [ 242.854278][ T9923] F2FS-fs (loop1): Wrong NAT boundary, start(2560) end(3584) blocks(0) [ 242.869386][ T9923] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 242.888601][ T9923] F2FS-fs (loop1): invalid crc value [ 242.903575][ T9923] F2FS-fs (loop1): Found nat_bits in checkpoint [ 243.009440][ T9923] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 243.019051][ T9923] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 243.053540][ T9923] F2FS-fs (loop1): f2fs_unlink: inode (ino=7) has zero i_nlink [ 243.102608][ T5804] F2FS-fs (loop1): f2fs_remove_inode_page: inconsistent i_blocks, ino:7, iblocks:1407713280 [ 243.279043][ T9969] loop0: detected capacity change from 0 to 8192 [ 243.289406][ T9969] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 243.308369][ T9969] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 243.318503][ T9969] REISERFS (device loop0): using ordered data mode [ 243.326443][ T9969] reiserfs: using flush barriers [ 243.334121][ T9969] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 243.363830][ T9969] REISERFS (device loop0): checking transaction log (loop0) [ 243.379772][ T9969] REISERFS (device loop0): Using r5 hash to sort names [ 243.387634][ T9969] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 243.573949][ T9974] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1673'. [ 243.590754][ T9974] netlink: 'syz.3.1673': attribute type 5 has an invalid length. [ 244.508179][T10002] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1683'. [ 244.518608][T10002] netlink: 'syz.3.1683': attribute type 5 has an invalid length. [ 244.576544][T10000] loop2: detected capacity change from 0 to 8192 [ 244.589241][T10000] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 244.602726][T10000] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 244.612936][T10000] REISERFS (device loop2): using ordered data mode [ 244.620317][T10000] reiserfs: using flush barriers [ 244.632078][T10000] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 244.654111][T10000] REISERFS (device loop2): checking transaction log (loop2) [ 244.664024][T10000] REISERFS (device loop2): Using r5 hash to sort names [ 244.673267][T10000] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 244.931846][ T5105] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 245.507132][T10026] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1692'. [ 245.530824][T10026] netlink: 'syz.1.1692': attribute type 5 has an invalid length. [ 245.700543][T10027] loop2: detected capacity change from 0 to 8192 [ 245.727440][T10027] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 245.744989][T10027] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 245.774868][T10027] REISERFS (device loop2): using ordered data mode [ 245.781456][T10027] reiserfs: using flush barriers [ 245.821773][T10027] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 245.886496][T10027] REISERFS (device loop2): checking transaction log (loop2) [ 245.911464][T10027] REISERFS (device loop2): Using r5 hash to sort names [ 245.931681][T10027] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 246.421726][T10048] loop2: detected capacity change from 0 to 4096 [ 246.621443][T10052] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1702'. [ 246.635512][T10052] netlink: 'syz.3.1702': attribute type 5 has an invalid length. [ 246.912409][T10057] loop3: detected capacity change from 0 to 8192 [ 246.929507][T10057] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 246.950753][T10057] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 246.962431][T10057] REISERFS (device loop3): using ordered data mode [ 246.973953][T10057] reiserfs: using flush barriers [ 246.983087][T10057] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 247.005669][T10057] REISERFS (device loop3): checking transaction log (loop3) [ 247.020020][T10057] REISERFS (device loop3): Using r5 hash to sort names [ 247.029145][T10057] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 247.330874][T10064] Bluetooth: MGMT ver 1.22 [ 248.204856][T10062] loop2: detected capacity change from 0 to 40427 [ 248.447578][T10071] loop3: detected capacity change from 0 to 4096 [ 248.470187][T10071] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 248.500423][T10071] ntfs: (device loop3): ntfs_read_inode_mount(): MST fixup failed. $MFT is corrupt. [ 248.523203][T10071] ntfs: (device loop3): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 248.533175][T10071] ntfs: (device loop3): ntfs_fill_super(): Failed to load essential metadata. [ 248.635758][T10075] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1711'. [ 248.689949][T10075] netlink: 'syz.1.1711': attribute type 5 has an invalid length. [ 249.247536][T10097] loop3: detected capacity change from 0 to 8192 [ 249.263023][T10097] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 249.276552][ T5799] Bluetooth: hci0: command tx timeout [ 249.291850][T10097] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 249.306791][T10097] REISERFS (device loop3): using ordered data mode [ 249.313518][T10097] reiserfs: using flush barriers [ 249.323242][T10097] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 249.340759][T10097] REISERFS (device loop3): checking transaction log (loop3) [ 249.349659][T10097] REISERFS (device loop3): Using r5 hash to sort names [ 249.349801][T10102] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1722'. [ 249.363048][T10097] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 249.368014][T10102] netlink: 'syz.0.1722': attribute type 5 has an invalid length. [ 250.036275][ T5105] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 250.848030][T10126] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1732'. [ 250.894243][T10126] netlink: 'syz.3.1732': attribute type 5 has an invalid length. [ 250.967103][T10124] loop0: detected capacity change from 0 to 8192 [ 250.995922][T10124] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 251.024418][T10124] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 251.033835][T10124] REISERFS (device loop0): using ordered data mode [ 251.044588][T10124] reiserfs: using flush barriers [ 251.066948][T10124] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 251.116268][T10124] REISERFS (device loop0): checking transaction log (loop0) [ 251.180623][T10124] REISERFS (device loop0): Using r5 hash to sort names [ 251.197704][T10124] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 251.342118][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1738'. [ 251.355776][ T5105] Bluetooth: hci0: command tx timeout [ 251.450821][T10141] loop1: detected capacity change from 0 to 64 [ 251.458517][T10141] hfs: file_umask requires a value [ 251.471235][T10141] hfs: unable to parse mount options [ 251.512622][T10129] loop2: detected capacity change from 0 to 32768 [ 251.542404][T10129] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 251.583953][T10129] [ 251.586355][T10129] ====================================================== [ 251.593494][T10129] WARNING: possible circular locking dependency detected [ 251.600654][T10129] syzkaller #0 Not tainted [ 251.605102][T10129] ------------------------------------------------------ [ 251.612127][T10129] syz.2.1733/10129 is trying to acquire lock: [ 251.618279][T10129] ffff88805c3b4e38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x2fa/0x720 [ 251.627629][T10129] [ 251.627629][T10129] but task is already holding lock: [ 251.635005][T10129] ffff8880787e4990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e7d/0x20c0 [ 251.644589][T10129] [ 251.644589][T10129] which lock already depends on the new lock. [ 251.644589][T10129] [ 251.655269][T10129] [ 251.655269][T10129] the existing dependency chain (in reverse order) is: [ 251.664470][T10129] [ 251.664470][T10129] -> #2 (jbd2_handle){++++}-{0:0}: [ 251.671805][T10129] jbd2_journal_lock_updates+0xab/0x380 [ 251.677981][T10129] __ocfs2_flush_truncate_log+0x2b8/0x10b0 [ 251.684695][T10129] ocfs2_flush_truncate_log+0x4f/0x60 [ 251.690631][T10129] ocfs2_sync_fs+0x117/0x310 [ 251.695882][T10129] sync_filesystem+0x1c2/0x220 [ 251.701207][T10129] generic_shutdown_super+0x6f/0x2b0 [ 251.707214][T10129] kill_block_super+0x44/0x90 [ 251.712461][T10129] deactivate_locked_super+0x97/0x100 [ 251.718383][T10129] cleanup_mnt+0x429/0x4c0 [ 251.723341][T10129] task_work_run+0x1ce/0x250 [ 251.728480][T10129] exit_to_user_mode_loop+0xe6/0x110 [ 251.734337][T10129] exit_to_user_mode_prepare+0xf6/0x180 [ 251.740441][T10129] syscall_exit_to_user_mode+0x1a/0x50 [ 251.746438][T10129] do_syscall_64+0x61/0xb0 [ 251.751411][T10129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.757977][T10129] [ 251.757977][T10129] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 251.768598][T10129] down_write+0x97/0x1f0 [ 251.773484][T10129] ocfs2_xattr_set+0xada/0x11f0 [ 251.779106][T10129] __vfs_setxattr+0x431/0x470 [ 251.784365][T10129] __vfs_setxattr_noperm+0x12d/0x5e0 [ 251.790211][T10129] vfs_setxattr+0x16c/0x2f0 [ 251.795269][T10129] path_setxattr+0x362/0x550 [ 251.800500][T10129] __x64_sys_setxattr+0xbb/0xd0 [ 251.805884][T10129] do_syscall_64+0x55/0xb0 [ 251.810866][T10129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.817408][T10129] [ 251.817408][T10129] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 251.825270][T10129] __lock_acquire+0x2ddb/0x7c80 [ 251.830696][T10129] lock_acquire+0x197/0x410 [ 251.835792][T10129] down_read+0x46/0x2e0 [ 251.840780][T10129] ocfs2_init_acl+0x2fa/0x720 [ 251.846017][T10129] ocfs2_mknod+0x12e5/0x20f0 [ 251.851145][T10129] ocfs2_create+0x196/0x410 [ 251.856203][T10129] path_openat+0x1277/0x3190 [ 251.861354][T10129] do_filp_open+0x1c5/0x3d0 [ 251.866417][T10129] do_sys_openat2+0x12c/0x1c0 [ 251.871651][T10129] __x64_sys_openat+0x139/0x160 [ 251.877061][T10129] do_syscall_64+0x55/0xb0 [ 251.882058][T10129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.888514][T10129] [ 251.888514][T10129] other info that might help us debug this: [ 251.888514][T10129] [ 251.898861][T10129] Chain exists of: [ 251.898861][T10129] &oi->ip_xattr_sem --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> jbd2_handle [ 251.898861][T10129] [ 251.914996][T10129] Possible unsafe locking scenario: [ 251.914996][T10129] [ 251.922485][T10129] CPU0 CPU1 [ 251.928154][T10129] ---- ---- [ 251.933644][T10129] rlock(jbd2_handle); [ 251.937859][T10129] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 251.948907][T10129] lock(jbd2_handle); [ 251.956107][T10129] rlock(&oi->ip_xattr_sem); [ 251.960809][T10129] [ 251.960809][T10129] *** DEADLOCK *** [ 251.960809][T10129] [ 251.968986][T10129] 8 locks held by syz.2.1733/10129: [ 251.974197][T10129] #0: ffff8880218a4418 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 251.983553][T10129] #1: ffff88805c3b5118 (&type->i_mutex_dir_key#15){+.+.}-{3:3}, at: path_openat+0x7c6/0x3190 [ 251.993946][T10129] #2: ffff88807833ed98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 252.007746][T10129] #3: ffff88805c3ca658 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 252.021801][T10129] #4: ffff8880783389d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 252.036464][T10129] #5: ffff8880218a4608 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_mknod+0xe47/0x20f0 [ 252.045930][T10129] #6: ffff88801aeb5ce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x36a/0x6c0 [ 252.056840][T10129] #7: ffff8880787e4990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e7d/0x20c0 [ 252.069436][T10129] [ 252.069436][T10129] stack backtrace: [ 252.075829][T10129] CPU: 1 PID: 10129 Comm: syz.2.1733 Not tainted syzkaller #0 [ 252.084788][T10129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.095063][T10129] Call Trace: [ 252.098533][T10129] [ 252.101589][T10129] dump_stack_lvl+0x16c/0x230 [ 252.106395][T10129] ? load_image+0x3b0/0x3b0 [ 252.110923][T10129] ? show_regs_print_info+0x20/0x20 [ 252.116208][T10129] ? print_circular_bug+0x12b/0x1a0 [ 252.121444][T10129] check_noncircular+0x2bd/0x3c0 [ 252.126529][T10129] ? print_deadlock_bug+0x5d0/0x5d0 [ 252.131990][T10129] ? lockdep_lock+0xe0/0x220 [ 252.136620][T10129] ? _find_first_zero_bit+0xd3/0x100 [ 252.142072][T10129] __lock_acquire+0x2ddb/0x7c80 [ 252.147651][T10129] ? verify_lock_unused+0x140/0x140 [ 252.153230][T10129] ? __ocfs2_mknod_locked+0xbd2/0x1440 [ 252.158751][T10129] ? __lock_acquire+0x7c80/0x7c80 [ 252.163802][T10129] ? do_raw_spin_lock+0x121/0x2c0 [ 252.169025][T10129] ? __rwlock_init+0x150/0x150 [ 252.174120][T10129] lock_acquire+0x197/0x410 [ 252.178755][T10129] ? ocfs2_init_acl+0x2fa/0x720 [ 252.183635][T10129] ? __might_sleep+0xe0/0xe0 [ 252.188264][T10129] ? read_lock_is_recursive+0x20/0x20 [ 252.193742][T10129] ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0 [ 252.200357][T10129] ? mark_lock+0x94/0x320 [ 252.204702][T10129] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 252.210702][T10129] down_read+0x46/0x2e0 [ 252.214880][T10129] ? ocfs2_init_acl+0x2fa/0x720 [ 252.219759][T10129] ocfs2_init_acl+0x2fa/0x720 [ 252.224492][T10129] ? ocfs2_mknod_locked+0x149/0x250 [ 252.229714][T10129] ? ocfs2_acl_chmod+0x320/0x320 [ 252.234672][T10129] ? dquot_alloc_inode+0x211/0xa40 [ 252.239818][T10129] ? ocfs2_block_signals+0x95/0xd0 [ 252.245045][T10129] ? ocfs2_free_mem_caches+0x50/0x50 [ 252.250376][T10129] ? ocfs2_init_security_get+0x139/0x1a0 [ 252.256123][T10129] ocfs2_mknod+0x12e5/0x20f0 [ 252.260739][T10129] ? ocfs2_mkdir+0x410/0x410 [ 252.265356][T10129] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 252.271710][T10129] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 252.277726][T10129] ? ocfs2_inode_unlock+0xa5/0x140 [ 252.282941][T10129] ? __lock_acquire+0x7c80/0x7c80 [ 252.288118][T10129] ? __rwlock_init+0x150/0x150 [ 252.292918][T10129] ? do_raw_spin_unlock+0x121/0x230 [ 252.298150][T10129] ? rcu_is_watching+0x15/0xb0 [ 252.303029][T10129] ? ocfs2_lookup+0x495/0x940 [ 252.307748][T10129] ocfs2_create+0x196/0x410 [ 252.312300][T10129] ? ocfs2_update_inode_fsync_trans+0x240/0x240 [ 252.318581][T10129] ? from_kgid+0x15d/0x680 [ 252.323044][T10129] ? ocfs2_lookup+0x940/0x940 [ 252.327762][T10129] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 252.332755][T10129] ? inode_permission+0xf3/0x480 [ 252.337780][T10129] ? bpf_lsm_inode_create+0x9/0x10 [ 252.342947][T10129] ? security_inode_create+0xb7/0x100 [ 252.348369][T10129] ? ocfs2_lookup+0x940/0x940 [ 252.353089][T10129] path_openat+0x1277/0x3190 [ 252.357853][T10129] ? do_filp_open+0x3d0/0x3d0 [ 252.362685][T10129] do_filp_open+0x1c5/0x3d0 [ 252.367253][T10129] ? vfs_tmpfile+0x490/0x490 [ 252.371912][T10129] ? _raw_spin_unlock+0x28/0x40 [ 252.376807][T10129] ? alloc_fd+0x58f/0x630 [ 252.381285][T10129] do_sys_openat2+0x12c/0x1c0 [ 252.386005][T10129] ? do_sys_open+0xe0/0xe0 [ 252.390463][T10129] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 252.396486][T10129] ? lock_chain_count+0x20/0x20 [ 252.401381][T10129] __x64_sys_openat+0x139/0x160 [ 252.406280][T10129] do_syscall_64+0x55/0xb0 [ 252.411009][T10129] ? clear_bhb_loop+0x40/0x90 [ 252.415731][T10129] ? clear_bhb_loop+0x40/0x90 [ 252.420546][T10129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.426583][T10129] RIP: 0033:0x7f738f38eba9 [ 252.427329][T10155] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1742'. [ 252.431191][T10129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.431211][T10129] RSP: 002b:00007f7390241038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 252.441870][T10155] netlink: 'syz.0.1742': attribute type 5 has an invalid length. [ 252.460702][T10129] RAX: ffffffffffffffda RBX: 00007f738f5d5fa0 RCX: 00007f738f38eba9 [ 252.460724][T10129] RDX: 0000000000000042 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 252.460736][T10129] RBP: 00007f738f411e19 R08: 0000000000000000 R09: 0000000000000000 [ 252.460747][T10129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.460758][T10129] R13: 00007f738f5d6038 R14: 00007f738f5d5fa0 R15: 00007fffd2dbf4c8 [ 252.460781][T10129] [ 252.666938][ T5797] ocfs2: Unmounting device (7,2) on (node local) [ 255.997948][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.004405][ T1283] ieee802154 phy1 wpan1: encryption failed: -22