last executing test programs: 11.559106231s ago: executing program 0 (id=284): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e1e, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 11.296206085s ago: executing program 0 (id=287): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 11.03141423s ago: executing program 0 (id=289): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x34b9, 0x2, 0x2}, 0x38, 0x0) landlock_restrict_self(r0, 0x5) landlock_create_ruleset(0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 10.483998841s ago: executing program 0 (id=291): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) 9.950802283s ago: executing program 0 (id=293): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 9.664948867s ago: executing program 0 (id=294): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000000)=""/30, 0x1e}], 0x2}, 0x0) 9.143399915s ago: executing program 32 (id=294): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000000)=""/30, 0x1e}], 0x2}, 0x0) 7.097531639s ago: executing program 4 (id=307): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 6.249332501s ago: executing program 4 (id=311): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") gettid() timer_settime(0x0, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") 5.718452574s ago: executing program 3 (id=316): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r1, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) 5.043120254s ago: executing program 4 (id=319): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.92952012s ago: executing program 1 (id=321): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r3, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 4.548434032s ago: executing program 1 (id=322): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 4.467567845s ago: executing program 4 (id=323): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 4.261245794s ago: executing program 3 (id=324): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x6}, {}, {0xd645d28e815807f6}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x9c}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) 3.931851802s ago: executing program 2 (id=325): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x7e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.810908307s ago: executing program 2 (id=326): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffffc000, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40498060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004680)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x8, {0xffffffffffffffff, 0x2, 0x16, 0x0, 0x1, 0x4, {0x6, 0x80, 0x3, 0x6, 0x0, 0x8, 0x8, 0x800, 0x6, 0xc000, 0x7fffffff, r2, r3, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.685830027s ago: executing program 4 (id=327): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r2, &(0x7f0000001f40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000000)={0x50, 0x0, r4, {0x7, 0x28, 0x5, 0x0, 0x0, 0x0, 0x8, 0x1}}, 0x50) 3.651146451s ago: executing program 2 (id=328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x5}]}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="04a62d67", 0x4, 0x4c0c0, 0x0, 0x0) close(r0) 3.60175498s ago: executing program 5 (id=329): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x3}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40805) 3.44720333s ago: executing program 2 (id=330): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$bind(0x0, 0x0, 0x0, 0x109041, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x81105a, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"766cace9c303653f121a2d892000", 0x0, 0x0, {0x81, 0x50000a}, {0x7, 0x8}, 0x5, [0x3, 0x3, 0x4, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x8, 0x7, 0x80000000, 0x81, 0x10, 0x522586f, 0xfffffffffffffffb, 0x7]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3.219749614s ago: executing program 2 (id=331): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 3.201860575s ago: executing program 4 (id=332): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 3.174579877s ago: executing program 3 (id=333): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) 2.935514147s ago: executing program 3 (id=334): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffe61, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000240)={0x0, 0x49cb, 0x10100, 0x1, 0x193}, &(0x7f0000000300)=0x0, &(0x7f0000000540)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.647080572s ago: executing program 1 (id=335): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @rand_addr=0x64010102}}, 0x24) 2.576201246s ago: executing program 5 (id=336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000002c0)={0xc, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r2, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 2.364374592s ago: executing program 3 (id=337): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.697634923s ago: executing program 5 (id=338): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000f00)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "00180a10", "bb10000000000001"}, 0x28) recvfrom$inet6(r0, &(0x7f0000000040)=""/19, 0xfa, 0x40000041, 0x0, 0x0) 1.410689749s ago: executing program 1 (id=339): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 1.295968646s ago: executing program 5 (id=340): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001940)=@newtfilter={0x30, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0x10}, {0xffe0}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 1.000949332s ago: executing program 3 (id=341): gettid() socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) waitid(0x1, 0x0, 0x0, 0xffffff, 0x0) 860.968137ms ago: executing program 1 (id=342): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {0x0, 0x0, 0x180, 0xfffc}, 0x7, [0x0, 0x80000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x3d, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x200, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x401, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x95e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x1, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_io_uring_setup(0x3cf5, &(0x7f0000000200)={0x0, 0x7d4b, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x79a5, 0x2, 0x46, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001340)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 582.684326ms ago: executing program 5 (id=343): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa1000000000000070100"], 0x0, 0x1fffffe, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000180)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 269.63283ms ago: executing program 1 (id=344): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000002680)='3', 0x1}], 0x1) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) 99.252696ms ago: executing program 5 (id=345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x40800c8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 0s ago: executing program 2 (id=346): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000300), 0xf3, 0x48e, &(0x7f0000000dc0)="$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") syz_emit_ethernet(0x4a, &(0x7f0000000640)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. [ 83.517977][ T5815] cgroup: Unknown subsys name 'net' [ 83.678368][ T5815] cgroup: Unknown subsys name 'cpuset' [ 83.687780][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.181031][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.739343][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.745185][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.748298][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.762529][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.769958][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.778536][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.786042][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.787537][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.794074][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.810185][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.817815][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.826550][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.827190][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.844087][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.856669][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.871876][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.872475][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.887277][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.891232][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.902254][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.909521][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.925388][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.933131][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.933227][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.941956][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.976516][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.001339][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.017735][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.030766][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.039025][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.789718][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 90.958952][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 90.975245][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 91.119694][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 91.129583][ T3073] cfg80211: failed to load regulatory.db [ 91.163064][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 91.239528][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.248125][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.256071][ T5846] bridge_slave_0: entered allmulticast mode [ 91.264390][ T5846] bridge_slave_0: entered promiscuous mode [ 91.279617][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.287144][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.294977][ T5846] bridge_slave_1: entered allmulticast mode [ 91.302695][ T5846] bridge_slave_1: entered promiscuous mode [ 91.376367][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 91.474473][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.487819][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.527543][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.534826][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.542670][ T5843] bridge_slave_0: entered allmulticast mode [ 91.550100][ T5843] bridge_slave_0: entered promiscuous mode [ 91.567831][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.575449][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.582689][ T5843] bridge_slave_1: entered allmulticast mode [ 91.590114][ T5843] bridge_slave_1: entered promiscuous mode [ 91.636448][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.643670][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.651547][ T5829] bridge_slave_0: entered allmulticast mode [ 91.658923][ T5829] bridge_slave_0: entered promiscuous mode [ 91.760068][ T5846] team0: Port device team_slave_0 added [ 91.774065][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.781655][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.789294][ T5829] bridge_slave_1: entered allmulticast mode [ 91.798072][ T5829] bridge_slave_1: entered promiscuous mode [ 91.805072][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.812540][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.819699][ T5839] bridge_slave_0: entered allmulticast mode [ 91.828296][ T5839] bridge_slave_0: entered promiscuous mode [ 91.846355][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.857759][ T5846] team0: Port device team_slave_1 added [ 91.909419][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.916877][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.925025][ T5842] Bluetooth: hci0: command tx timeout [ 91.925031][ T51] Bluetooth: hci2: command tx timeout [ 91.925178][ T51] Bluetooth: hci1: command tx timeout [ 91.932324][ T5839] bridge_slave_1: entered allmulticast mode [ 91.949388][ T5839] bridge_slave_1: entered promiscuous mode [ 91.965347][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.001740][ T51] Bluetooth: hci3: command tx timeout [ 92.011284][ T51] Bluetooth: hci4: command tx timeout [ 92.012967][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.029248][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.081217][ T51] Bluetooth: hci5: command tx timeout [ 92.126867][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.134227][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.141926][ T5832] bridge_slave_0: entered allmulticast mode [ 92.149413][ T5832] bridge_slave_0: entered promiscuous mode [ 92.176024][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.205749][ T5843] team0: Port device team_slave_0 added [ 92.214749][ T5843] team0: Port device team_slave_1 added [ 92.236198][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.243600][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.269808][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.283407][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.290364][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.316407][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.328638][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.336005][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.343568][ T5832] bridge_slave_1: entered allmulticast mode [ 92.351311][ T5832] bridge_slave_1: entered promiscuous mode [ 92.375255][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.438412][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.445718][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.472469][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.501347][ T5829] team0: Port device team_slave_0 added [ 92.523379][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.530637][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.538757][ T5844] bridge_slave_0: entered allmulticast mode [ 92.546391][ T5844] bridge_slave_0: entered promiscuous mode [ 92.556356][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.563460][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.589442][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.619334][ T5829] team0: Port device team_slave_1 added [ 92.645070][ T5839] team0: Port device team_slave_0 added [ 92.651480][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.658665][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.666350][ T5844] bridge_slave_1: entered allmulticast mode [ 92.674749][ T5844] bridge_slave_1: entered promiscuous mode [ 92.733063][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.749620][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.775804][ T5839] team0: Port device team_slave_1 added [ 92.843480][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.850471][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.876884][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.933743][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.950141][ T5843] hsr_slave_0: entered promiscuous mode [ 92.957737][ T5843] hsr_slave_1: entered promiscuous mode [ 92.981669][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.988638][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.015317][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.033139][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.040093][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.067061][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.085037][ T5846] hsr_slave_0: entered promiscuous mode [ 93.092454][ T5846] hsr_slave_1: entered promiscuous mode [ 93.098613][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.106494][ T5846] Cannot create hsr debugfs directory [ 93.114928][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.143887][ T5832] team0: Port device team_slave_0 added [ 93.154568][ T5832] team0: Port device team_slave_1 added [ 93.162224][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.169166][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.195889][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.268474][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.275563][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.301567][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.326628][ T5844] team0: Port device team_slave_0 added [ 93.336060][ T5844] team0: Port device team_slave_1 added [ 93.365682][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.372762][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.399034][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.499765][ T5829] hsr_slave_0: entered promiscuous mode [ 93.507163][ T5829] hsr_slave_1: entered promiscuous mode [ 93.513631][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.521471][ T5829] Cannot create hsr debugfs directory [ 93.537621][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.544952][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.570961][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.667730][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.674814][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.701334][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.748516][ T5839] hsr_slave_0: entered promiscuous mode [ 93.755340][ T5839] hsr_slave_1: entered promiscuous mode [ 93.762015][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.769576][ T5839] Cannot create hsr debugfs directory [ 93.781621][ T5832] hsr_slave_0: entered promiscuous mode [ 93.788490][ T5832] hsr_slave_1: entered promiscuous mode [ 93.794933][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.802610][ T5832] Cannot create hsr debugfs directory [ 94.007318][ T5848] Bluetooth: hci2: command tx timeout [ 94.009939][ T51] Bluetooth: hci0: command tx timeout [ 94.013226][ T5842] Bluetooth: hci1: command tx timeout [ 94.081737][ T5842] Bluetooth: hci4: command tx timeout [ 94.082054][ T5848] Bluetooth: hci3: command tx timeout [ 94.129892][ T5844] hsr_slave_0: entered promiscuous mode [ 94.136674][ T5844] hsr_slave_1: entered promiscuous mode [ 94.143053][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.150723][ T5844] Cannot create hsr debugfs directory [ 94.171593][ T5848] Bluetooth: hci5: command tx timeout [ 94.645555][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.670685][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.690661][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.709785][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.758506][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.775405][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.787021][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.799615][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.885997][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.911431][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.927876][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.939206][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.074174][ T5832] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.107026][ T5832] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.132387][ T5832] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.145549][ T5832] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.213277][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.275480][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.308776][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.340870][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.356900][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.385771][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.404989][ T1337] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.412322][ T1337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.435404][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.448516][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.480072][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.487242][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.568740][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.576611][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.613521][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.639280][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.646477][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.656089][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.663256][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.674118][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.708558][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.715731][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.727124][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.734256][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.748262][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.759663][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.916102][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.026696][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.082620][ T5848] Bluetooth: hci2: command tx timeout [ 96.084583][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.088053][ T5848] Bluetooth: hci0: command tx timeout [ 96.095169][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.101038][ T5848] Bluetooth: hci1: command tx timeout [ 96.162313][ T51] Bluetooth: hci4: command tx timeout [ 96.167834][ T5848] Bluetooth: hci3: command tx timeout [ 96.214930][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.222184][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.243987][ T5848] Bluetooth: hci5: command tx timeout [ 96.266402][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.430395][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.449497][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.509265][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.516484][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.592769][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.599920][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.624500][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.654223][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.700776][ T1337] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.707996][ T1337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.774889][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.789081][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.796362][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.820405][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.068044][ T5843] veth0_vlan: entered promiscuous mode [ 97.137039][ T5843] veth1_vlan: entered promiscuous mode [ 97.237195][ T5846] veth0_vlan: entered promiscuous mode [ 97.268047][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.354422][ T5843] veth0_macvtap: entered promiscuous mode [ 97.404773][ T5846] veth1_vlan: entered promiscuous mode [ 97.422226][ T5843] veth1_macvtap: entered promiscuous mode [ 97.593244][ T5846] veth0_macvtap: entered promiscuous mode [ 97.609814][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.635224][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.650151][ T5846] veth1_macvtap: entered promiscuous mode [ 97.683494][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.756622][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.768878][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.778235][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.788358][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.804792][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.817656][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.859330][ T5829] veth0_vlan: entered promiscuous mode [ 97.874017][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.896291][ T5829] veth1_vlan: entered promiscuous mode [ 97.933365][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.948640][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.957742][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.966949][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.088248][ T5966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.105904][ T5966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.129809][ T5839] veth0_vlan: entered promiscuous mode [ 98.161268][ T5848] Bluetooth: hci0: command tx timeout [ 98.166863][ T5848] Bluetooth: hci2: command tx timeout [ 98.173639][ T51] Bluetooth: hci1: command tx timeout [ 98.230677][ T5844] veth0_vlan: entered promiscuous mode [ 98.242432][ T5848] Bluetooth: hci3: command tx timeout [ 98.247866][ T5848] Bluetooth: hci4: command tx timeout [ 98.264349][ T4207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.291412][ T4207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.297283][ T5829] veth0_macvtap: entered promiscuous mode [ 98.308122][ T5839] veth1_vlan: entered promiscuous mode [ 98.322553][ T5848] Bluetooth: hci5: command tx timeout [ 98.338441][ T5829] veth1_macvtap: entered promiscuous mode [ 98.360866][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.369085][ T5832] veth0_vlan: entered promiscuous mode [ 98.398765][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.424292][ T5844] veth1_vlan: entered promiscuous mode [ 98.442776][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.450705][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.466334][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.469542][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.518049][ T5832] veth1_vlan: entered promiscuous mode [ 98.602809][ T5839] veth0_macvtap: entered promiscuous mode [ 98.624190][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.657302][ T5839] veth1_macvtap: entered promiscuous mode [ 98.686825][ T5829] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.710552][ T5829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.740452][ T5829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.761325][ T5829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.790551][ T5844] veth0_macvtap: entered promiscuous mode [ 98.887903][ T5844] veth1_macvtap: entered promiscuous mode [ 98.983826][ T30] audit: type=1326 audit(1749780816.935:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.0.8" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fd2d8e929 code=0x0 [ 99.036666][ T5832] veth0_macvtap: entered promiscuous mode [ 99.056868][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.075165][ T5984] loop2: detected capacity change from 0 to 1024 [ 99.085113][ T5986] netlink: 'syz.0.8': attribute type 39 has an invalid length. [ 99.093659][ T4207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.101910][ T4207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.113837][ T5832] veth1_macvtap: entered promiscuous mode [ 99.133524][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.222633][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.246534][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.262592][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.276224][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.279476][ T5984] EXT4-fs (loop2): Test dummy encryption mode enabled [ 99.286414][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.309614][ T5984] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 99.328542][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.343320][ T5984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.384886][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.391532][ T5984] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 99.398664][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.410558][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.423922][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.435158][ T5984] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 99.435246][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.453295][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.462112][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.486052][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.511963][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.536666][ T5832] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.547009][ T5832] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.565503][ T5832] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.575302][ T5832] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.806312][ T5966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.860281][ T5966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.035884][ T6000] trusted_key: syz.0.12 sent an empty control message without MSG_MORE. [ 100.041576][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.094335][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.268581][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.298762][ T6007] process 'syz.4.14' launched './file0' with NULL argv: empty string added [ 100.307756][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.406779][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.449866][ T6007] loop4: detected capacity change from 0 to 1024 [ 100.472518][ T6007] journal_path: not usable as path [ 100.491802][ T6007] EXT4-fs: error: could not find journal device path [ 100.726867][ T6010] loop0: detected capacity change from 0 to 32768 [ 100.741572][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.784527][ T6010] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.866708][ T6010] XFS (loop0): Ending clean mount [ 100.937049][ T6010] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 [ 100.948465][ T6010] XFS (loop0): Unmount and run xfs_repair [ 100.954399][ T6010] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 100.961976][ T6010] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 100.970836][ T6010] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 100.981227][ T6010] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 100.990096][ T6010] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 100.999986][ T6010] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 101.008973][ T6010] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 101.017874][ T6010] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 101.026738][ T6010] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 101.026871][ T6010] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x14 len 4 error 74 [ 101.037519][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.082793][ T6010] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 101.097486][ T6010] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 101.144060][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.165074][ T5846] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.167035][ T6020] loop3: detected capacity change from 0 to 2048 [ 101.270407][ T6020] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 101.291136][ T6020] UDF-fs: Scanning with blocksize 512 failed [ 101.343711][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.362605][ T6029] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.388720][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.394240][ T6020] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.461259][ T5834] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.583196][ T30] audit: type=1800 audit(1749780819.535:3): pid=6020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="file2" dev="loop3" ino=839 res=0 errno=0 [ 101.670497][ T6033] IPv4: Oversized IP packet from 172.20.20.24 [ 101.678019][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 101.684631][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 101.701284][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 101.738194][ T5834] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 101.768609][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.812752][ T5834] usb 3-1: config 0 descriptor?? [ 101.913964][ T5834] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 102.088955][ T6040] loop1: detected capacity change from 0 to 128 [ 102.169556][ T6043] loop5: detected capacity change from 0 to 1024 [ 102.226303][ T6043] EXT4-fs: Ignoring removed i_version option [ 102.263505][ T6040] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.327556][ T6043] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.397915][ T6040] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.438074][ T6043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.549075][ T30] audit: type=1800 audit(1749780820.505:4): pid=6040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 102.586708][ T6043] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.24: bg 0: block 260: invalid block bitmap [ 102.654336][ T6056] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.24: bg 0: block 260: invalid block bitmap [ 102.705775][ T6043] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 102.778934][ T6056] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 102.865029][ T6058] EXT4-fs error (device loop5): __ext4_new_inode:1073: comm syz.5.24: reserved inode found cleared - inode=1 [ 102.868120][ T6056] EXT4-fs error (device loop5): ext4_free_inode:354: comm syz.5.24: bit already cleared for inode 15 [ 102.940190][ T5844] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.151535][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.341019][ T5834] gspca_sonixj: i2c_w8 err -71 [ 103.363891][ T5834] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 103.435214][ T5834] usb 3-1: USB disconnect, device number 2 [ 103.538684][ T6049] loop0: detected capacity change from 0 to 32768 [ 103.578878][ T6049] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.25 (6049) [ 103.695783][ T6049] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.722353][ T6049] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm [ 103.781069][ T6049] BTRFS info (device loop0): disk space caching is enabled [ 103.788569][ T6049] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 104.094416][ T6060] loop4: detected capacity change from 0 to 32768 [ 104.109639][ T6049] BTRFS info (device loop0): rebuilding free space tree [ 104.163598][ T6060] BTRFS: device /dev/loop4 (7:4) using temp-fsid 92e55391-b21f-4341-9ccf-d6205d11c812 [ 104.215955][ T6049] BTRFS info (device loop0): disabling free space tree [ 104.232196][ T6060] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.27 (6060) [ 104.248925][ T6049] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 104.317208][ T6049] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 104.349298][ T6060] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 104.409455][ T6060] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 104.447721][ T6060] BTRFS info (device loop4): using free-space-tree [ 104.461140][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 104.568279][ T6108] block nbd1: shutting down sockets [ 104.642559][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 104.666854][ T10] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 104.685707][ T10] usb 6-1: config 0 has no interface number 0 [ 104.693852][ T6060] BTRFS info (device loop4): rebuilding free space tree [ 104.711552][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.741683][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 104.785372][ T10] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.800444][ T10] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 104.867827][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 104.898494][ T30] audit: type=1800 audit(1749780822.855:5): pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.27" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 104.930308][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.003048][ T10] usb 6-1: config 0 descriptor?? [ 105.037145][ T10] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 106.600092][ T5846] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 106.650472][ T5829] BTRFS info (device loop4): last unmount of filesystem 92e55391-b21f-4341-9ccf-d6205d11c812 [ 107.176997][ T24] usb 6-1: USB disconnect, device number 2 [ 107.253975][ T24] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 108.461509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.521608][ T6165] loop3: detected capacity change from 0 to 128 [ 108.563750][ T6165] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 108.589451][ T6165] System zones: 1-3, 19-19, 35-36 [ 108.667747][ T6165] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 108.682102][ T6165] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.788649][ T6165] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 108.811386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.923885][ T5839] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.926624][ T6169] loop1: detected capacity change from 0 to 2048 [ 109.244457][ T6169] loop1: detected capacity change from 0 to 4096 [ 109.289903][ T30] audit: type=1326 audit(1749780827.245:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.0.57" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fd2d8e929 code=0x0 [ 109.290776][ T6169] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 109.747344][ T6180] Zero length message leads to an empty skb [ 110.194983][ T6193] loop2: detected capacity change from 0 to 256 [ 110.274934][ T6194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.333002][ T6194] bond0: (slave rose0): Enslaving as an active interface with an up link [ 110.369176][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.66'. [ 110.406609][ T6193] FAT-fs (loop2): Directory bread(block 64) failed [ 110.435681][ T6193] FAT-fs (loop2): Directory bread(block 65) failed [ 110.456520][ T6197] bridge_slave_0: left allmulticast mode [ 110.471060][ T6197] bridge_slave_0: left promiscuous mode [ 110.476125][ T6193] FAT-fs (loop2): Directory bread(block 66) failed [ 110.484156][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.527540][ T6193] FAT-fs (loop2): Directory bread(block 67) failed [ 110.536608][ T6193] FAT-fs (loop2): Directory bread(block 68) failed [ 110.555843][ T6197] bridge_slave_1: left allmulticast mode [ 110.561074][ T6193] FAT-fs (loop2): Directory bread(block 69) failed [ 110.569833][ T6197] bridge_slave_1: left promiscuous mode [ 110.576884][ T6193] FAT-fs (loop2): Directory bread(block 70) failed [ 110.589345][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.621638][ T6193] FAT-fs (loop2): Directory bread(block 71) failed [ 110.635101][ T6193] FAT-fs (loop2): Directory bread(block 72) failed [ 110.651749][ T5920] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.666324][ T6197] bond0: (slave bond_slave_0): Releasing backup interface [ 110.669480][ T6193] FAT-fs (loop2): Directory bread(block 73) failed [ 110.693749][ T6197] bond0: (slave bond_slave_1): Releasing backup interface [ 110.811208][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 110.825142][ T5920] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.844007][ T5920] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.870123][ T5920] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.898669][ T5920] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.937311][ T5920] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.965203][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.196797][ T5920] usb 1-1: GET_CAPABILITIES returned 0 [ 111.217777][ T5920] usbtmc 1-1:16.0: can't read capabilities [ 111.756095][ T6197] team0: Port device team_slave_0 removed [ 111.905495][ T6197] team0: Port device team_slave_1 removed [ 111.930887][ T6197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.045091][ T6197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.081286][ T5834] usb 1-1: USB disconnect, device number 2 [ 112.146314][ T6197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.188658][ T6197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.419381][ T6198] bond0: (slave rose0): Releasing backup interface [ 112.793640][ T6238] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 112.819787][ T6237] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 112.961687][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.053423][ T6248] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.78'. [ 113.145352][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 113.169335][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.206287][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.243273][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.288984][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 113.320104][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 113.342999][ T24] usb 2-1: Product: syz [ 113.354929][ T24] usb 2-1: Manufacturer: syz [ 113.409772][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 113.431071][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 113.451700][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 113.480432][ T6197] syz.5.66 (6197) used greatest stack depth: 19992 bytes left [ 113.509028][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 113.612920][ T24] usb 2-1: USB disconnect, device number 2 [ 113.753651][ T6269] netlink: 'syz.4.83': attribute type 1 has an invalid length. [ 113.913088][ T6271] loop3: detected capacity change from 0 to 128 [ 113.936305][ T6271] EXT4-fs: Ignoring removed nobh option [ 114.010271][ T6271] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.106800][ T6271] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.201441][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.454847][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 114.536476][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.659500][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 114.682564][ T5839] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.751484][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.870818][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 114.962729][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 114.970761][ T24] usb 2-1: Product: syz [ 115.077867][ T24] usb 2-1: Manufacturer: syz [ 115.205256][ T6276] loop2: detected capacity change from 0 to 131072 [ 115.226186][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 115.244377][ T6276] F2FS-fs (loop2): Test dummy encryption mode enabled [ 115.271040][ T6276] F2FS-fs (loop2): invalid crc value [ 115.296425][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 115.350799][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 115.430440][ T6276] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 115.447130][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 115.986536][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 115.993260][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 115.994770][ T971] usb 2-1: USB disconnect, device number 3 [ 115.999319][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 116.836893][ T6316] loop5: detected capacity change from 0 to 64 [ 116.848369][ T6314] Bluetooth: MGMT ver 1.23 [ 117.768892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 118.035210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.091283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.099854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.384387][ T6389] netlink: 'syz.2.93': attribute type 10 has an invalid length. [ 120.449061][ T6347] loop3: detected capacity change from 0 to 40427 [ 120.459154][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.467221][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.515534][ T6347] F2FS-fs (loop3): invalid crc value [ 120.559923][ T6389] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.567185][ T6389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.574786][ T6389] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.581987][ T6389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.603975][ T6389] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 120.680100][ T6393] bond0: (slave bridge0): Releasing backup interface [ 120.699396][ T6393] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.706723][ T6393] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.765550][ T6393] bridge_slave_0: left allmulticast mode [ 120.771774][ T6393] bridge_slave_0: left promiscuous mode [ 120.801741][ T6393] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.855273][ T6393] bridge_slave_1: left allmulticast mode [ 120.861740][ T6393] bridge_slave_1: left promiscuous mode [ 120.867554][ T6393] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.924464][ T6347] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 120.926027][ T6393] bond0: (slave bond_slave_0): Releasing backup interface [ 121.013082][ T6393] bond0: (slave bond_slave_1): Releasing backup interface [ 121.087865][ T6393] team0: Port device team_slave_0 removed [ 121.128074][ T6393] team0: Port device team_slave_1 removed [ 121.138856][ T6393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.154490][ T6393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.166698][ T6393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.180108][ T6393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.373911][ T5839] syz-executor: attempt to access beyond end of device [ 121.373911][ T5839] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 121.479035][ T6410] loop4: detected capacity change from 0 to 32768 [ 121.531253][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 121.531289][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.531303][ T5839] Call Trace: [ 121.531312][ T5839] [ 121.531322][ T5839] dump_stack_lvl+0x189/0x250 [ 121.531370][ T5839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.531406][ T5839] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 121.531441][ T5839] ? __pfx_queue_work_on+0x10/0x10 [ 121.531463][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.531491][ T5839] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 121.531521][ T5839] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 121.531557][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.531585][ T5839] ? f2fs_hw_is_readonly+0x39b/0x470 [ 121.531620][ T5839] f2fs_handle_critical_error+0x37c/0x540 [ 121.531658][ T5839] f2fs_write_end_io+0x495/0x810 [ 121.531691][ T5839] ? blkg_put+0x22/0x240 [ 121.531736][ T5839] __submit_merged_bio+0x27a/0x6a0 [ 121.531777][ T5839] __submit_merged_write_cond+0x255/0x530 [ 121.531814][ T5839] f2fs_write_data_pages+0x261d/0x3000 [ 121.531892][ T5839] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 121.531941][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.532002][ T5839] ? __mod_zone_page_state+0xd7/0x140 [ 121.532052][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.532080][ T5839] ? folios_put_refs+0x560/0x640 [ 121.532126][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.532154][ T5839] ? __lock_acquire+0xab9/0xd20 [ 121.532198][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.532226][ T5839] ? do_raw_spin_lock+0x121/0x290 [ 121.532261][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.532293][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.532321][ T5839] ? do_raw_spin_unlock+0x122/0x240 [ 121.532350][ T5839] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 121.532384][ T5839] do_writepages+0x32e/0x550 [ 121.532429][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.532459][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.532486][ T5839] ? do_raw_spin_unlock+0x122/0x240 [ 121.532520][ T5839] filemap_fdatawrite+0x191/0x230 [ 121.532545][ T5839] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 121.532616][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.532650][ T5839] ? do_raw_spin_unlock+0x122/0x240 [ 121.532683][ T5839] f2fs_sync_dirty_inodes+0x31f/0x830 [ 121.532737][ T5839] f2fs_write_checkpoint+0x94a/0x1de0 [ 121.532799][ T5839] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 121.532879][ T5839] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 121.532909][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.532932][ T5839] ? kfree+0x18e/0x440 [ 121.532967][ T5839] ? kill_f2fs_super+0x298/0x6c0 [ 121.533006][ T5839] kill_f2fs_super+0x2c3/0x6c0 [ 121.533044][ T5839] ? __pfx_kill_f2fs_super+0x10/0x10 [ 121.533075][ T5839] ? radix_tree_delete_item+0x2b6/0x400 [ 121.533119][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.533144][ T5839] ? shrinker_free+0x2ce/0x3e0 [ 121.533178][ T5839] deactivate_locked_super+0xbc/0x130 [ 121.533217][ T5839] cleanup_mnt+0x425/0x4c0 [ 121.533249][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.533274][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.533314][ T5839] task_work_run+0x1d4/0x260 [ 121.533346][ T5839] ? __pfx_task_work_run+0x10/0x10 [ 121.533372][ T5839] ? __x64_sys_umount+0x122/0x160 [ 121.533400][ T5839] ? exit_to_user_mode_loop+0x40/0x110 [ 121.533439][ T5839] exit_to_user_mode_loop+0xec/0x110 [ 121.533475][ T5839] do_syscall_64+0x2bd/0x3b0 [ 121.533498][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.533532][ T5839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.533554][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.533581][ T5839] ? exc_page_fault+0x9f/0xf0 [ 121.533621][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.533645][ T5839] RIP: 0033:0x7fd9f978fc57 [ 121.533666][ T5839] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 121.533686][ T5839] RSP: 002b:00007ffd6b9534f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 121.533712][ T5839] RAX: 0000000000000000 RBX: 00007fd9f9810925 RCX: 00007fd9f978fc57 [ 121.533729][ T5839] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6b9535b0 [ 121.533744][ T5839] RBP: 00007ffd6b9535b0 R08: 0000000000000000 R09: 0000000000000000 [ 121.533759][ T5839] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd6b954640 [ 121.533776][ T5839] R13: 00007fd9f9810925 R14: 000000000001d97b R15: 00007ffd6b954680 [ 121.533813][ T5839] [ 121.533837][ T6410] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 121.631166][ T5839] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 121.631363][ T6410] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 122.119880][ T6410] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 122.134679][ T43] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 122.141866][ T6422] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.153668][ T43] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 122.518934][ T43] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 365ms [ 122.583463][ T43] gfs2: fsid=syz:syz.0: jid=0: Done [ 122.615201][ T6410] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 123.045687][ T6440] loop0: detected capacity change from 0 to 128 [ 123.139908][ T6440] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.341548][ T6440] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.507850][ T6440] syz.0.133 (pid 6440) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 124.304377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 124.350503][ T5846] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.109442][ T6476] loop0: detected capacity change from 0 to 131072 [ 126.137172][ T6476] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 126.145699][ T6476] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 126.205782][ T6476] F2FS-fs (loop0): invalid crc value [ 126.229029][ T6469] loop1: detected capacity change from 0 to 32768 [ 126.301368][ T6469] ======================================================= [ 126.301368][ T6469] WARNING: The mand mount option has been deprecated and [ 126.301368][ T6469] and is ignored by this kernel. Remove the mand [ 126.301368][ T6469] option from the mount to silence this warning. [ 126.301368][ T6469] ======================================================= [ 126.391749][ T6500] Illegal XDP return value 4294967274 on prog (id 26) dev N/A, expect packet loss! [ 126.421157][ T6469] ocfs2: Unknown parameter '18446744073709551615ÿ¾:äÈ• [ 126.421157][ T6469] gä¡#‘Ã>›–<ðrmÎÐÆÜÄðE' [ 126.433352][ T6476] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 126.440396][ T6476] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 126.514708][ T6504] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 126.523750][ T30] audit: type=1800 audit(1749780844.485:7): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.146" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 127.052276][ T6507] loop5: detected capacity change from 0 to 32768 [ 127.061958][ T6507] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.156 (6507) [ 127.130633][ T6507] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 127.140878][ T6507] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 127.359420][ T6507] BTRFS info (device loop5): rebuilding free space tree [ 127.376666][ T6507] BTRFS info (device loop5): disabling free space tree [ 127.384244][ T6507] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 127.396654][ T6507] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 127.411799][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.626963][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.692639][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.734022][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.790326][ T5832] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 127.817497][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.859101][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.925156][ T10] usb 4-1: config 0 descriptor?? [ 128.266127][ T6538] loop4: detected capacity change from 0 to 65536 [ 128.352289][ T6538] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 128.407073][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x1 [ 128.432349][ T10] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 128.473328][ T10] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 128.483410][ T6538] XFS (loop4): Ending clean mount [ 128.696747][ T10] usb 4-1: USB disconnect, device number 2 [ 128.727761][ T6553] syz.2.168 uses obsolete (PF_INET,SOCK_PACKET) [ 129.080644][ T6555] fido_id[6555]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 129.107651][ T5829] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 129.191054][ T3073] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 129.376959][ T3073] usb 6-1: config 0 has no interfaces? [ 129.390977][ T3073] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.438502][ T3073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.461131][ T6564] loop2: detected capacity change from 0 to 128 [ 129.525378][ T3073] usb 6-1: config 0 descriptor?? [ 129.812596][ T6567] syz.2.172: attempt to access beyond end of device [ 129.812596][ T6567] loop2: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 129.836672][ T10] usb 6-1: USB disconnect, device number 3 [ 129.917060][ T6567] syz.2.172: attempt to access beyond end of device [ 129.917060][ T6567] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 129.971424][ T6567] syz.2.172: attempt to access beyond end of device [ 129.971424][ T6567] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 130.031212][ T6567] syz.2.172: attempt to access beyond end of device [ 130.031212][ T6567] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 130.121151][ T6567] syz.2.172: attempt to access beyond end of device [ 130.121151][ T6567] loop2: rw=2049, sector=313, nr_sectors = 5 limit=128 [ 130.397969][ T5962] kworker/u8:8: attempt to access beyond end of device [ 130.397969][ T5962] loop2: rw=1, sector=153, nr_sectors = 16 limit=128 [ 130.437054][ T5962] kworker/u8:8: attempt to access beyond end of device [ 130.437054][ T5962] loop2: rw=1, sector=177, nr_sectors = 40 limit=128 [ 130.483044][ T5962] kworker/u8:8: attempt to access beyond end of device [ 130.483044][ T5962] loop2: rw=1, sector=225, nr_sectors = 16 limit=128 [ 130.517043][ T5962] kworker/u8:8: attempt to access beyond end of device [ 130.517043][ T5962] loop2: rw=1, sector=249, nr_sectors = 16 limit=128 [ 130.573387][ T5962] kworker/u8:8: attempt to access beyond end of device [ 130.573387][ T5962] loop2: rw=1, sector=273, nr_sectors = 16 limit=128 [ 130.716207][ T6566] loop3: detected capacity change from 0 to 32768 [ 130.834192][ T6566] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 131.005027][ T6566] XFS (loop3): Ending clean mount [ 131.300649][ T5839] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 131.796460][ T6617] loop1: detected capacity change from 0 to 1024 [ 131.822139][ T6617] EXT4-fs: Ignoring removed nobh option [ 131.858157][ T6617] EXT4-fs: Ignoring removed bh option [ 131.979271][ T6617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.085744][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.093850][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.118215][ T6623] loop3: detected capacity change from 0 to 128 [ 132.140841][ T6623] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.164664][ T6623] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.320049][ T6617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.434846][ T5839] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.603494][ T30] audit: type=1326 audit(1749780850.555:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.1.187" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ae7d8e929 code=0x0 [ 132.694378][ T6632] mmap: syz.5.189 (6632) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 134.200999][ T43] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 134.411396][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 134.428548][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 134.450382][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 134.479459][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 134.495560][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.530957][ T43] usb 4-1: Product: syz [ 134.548492][ T43] usb 4-1: Manufacturer: syz [ 134.560382][ T43] usb 4-1: SerialNumber: syz [ 134.602049][ T43] usb 4-1: config 0 descriptor?? [ 134.620123][ T43] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 134.647512][ T43] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 134.881186][ T51] Bluetooth: hci6: command 0x1003 tx timeout [ 134.881261][ T5848] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 135.221185][ T43] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 135.230752][ T43] em28xx 4-1:0.0: Config register raw data: 0x2f [ 135.258363][ T43] em28xx 4-1:0.0: I2S Audio (1 sample rate(s)) [ 135.279674][ T6696] loop0: detected capacity change from 0 to 1764 [ 135.282753][ T43] em28xx 4-1:0.0: No AC97 audio processor [ 135.347672][ T6701] loop2: detected capacity change from 0 to 512 [ 135.406239][ T6701] EXT4-fs: Ignoring removed bh option [ 135.445294][ T6701] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 135.516917][ T6701] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.582835][ T6701] EXT4-fs (loop2): 1 truncate cleaned up [ 135.607067][ T6701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.926621][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.019639][ T6698] loop4: detected capacity change from 0 to 32768 [ 136.070507][ T43] usb 4-1: USB disconnect, device number 3 [ 136.220852][ T6716] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 136.498457][ T6720] loop6: detected capacity change from 0 to 74 [ 136.934369][ T6731] overlayfs: failed to decode file handle (len=5, type=32698, flags=0, err=-22) [ 137.548690][ T6730] loop3: detected capacity change from 0 to 32768 [ 137.574029][ T6730] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.226 (6730) [ 137.659030][ T6730] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 137.677769][ T6730] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 137.693155][ T6730] BTRFS info (device loop3): using free-space-tree [ 138.129724][ T6739] loop1: detected capacity change from 0 to 32768 [ 138.130404][ T5839] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 138.250697][ T6739] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 138.439292][ T6739] XFS (loop1): Ending clean mount [ 138.456903][ T5846] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 138.490438][ T6739] XFS (loop1): Quotacheck needed: Please wait. [ 138.529651][ T5846] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 138.575821][ T6739] XFS (loop1): Quotacheck: Done. [ 138.749075][ T6786] loop0: detected capacity change from 0 to 2048 [ 138.826476][ T6786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.888329][ T5844] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.192238][ T6785] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 139.276999][ T6785] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 139.343098][ T6785] EXT4-fs (loop0): This should not happen!! Data will be lost [ 139.343098][ T6785] [ 139.366041][ T6798] loop3: detected capacity change from 0 to 4096 [ 139.375956][ T6785] EXT4-fs (loop0): Total free blocks count 0 [ 139.406607][ T6785] EXT4-fs (loop0): Free/Dirty block details [ 139.468586][ T6785] EXT4-fs (loop0): free_blocks=2415919504 [ 139.518588][ T6798] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 139.532677][ T6785] EXT4-fs (loop0): dirty_blocks=16 [ 139.537823][ T6785] EXT4-fs (loop0): Block reservation details [ 139.731101][ T6785] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 139.944094][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.592949][ T6816] loop1: detected capacity change from 0 to 32768 [ 140.622860][ T6816] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 140.631081][ T6816] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 140.683856][ T6816] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 140.696916][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 140.732688][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 141.157221][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 424ms [ 141.221228][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 141.244986][ T6816] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 141.275782][ T6836] xt_CT: No such helper "snmp" [ 141.424953][ T6816] gfs2: fsid=syz:syz.0: found 1 quota changes [ 141.491029][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 141.674064][ T43] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 141.699593][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.785192][ T43] usb 5-1: config 0 descriptor?? [ 142.789537][ T30] audit: type=1804 audit(1749780860.745:9): pid=6862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.266" name="/newroot/37/file0" dev="tmpfs" ino=211 res=1 errno=0 [ 143.474642][ T43] usb 5-1: Cannot set autoneg [ 143.495709][ T43] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 143.547205][ T6849] loop2: detected capacity change from 0 to 262144 [ 143.569131][ T6849] F2FS-fs (loop2): invalid crc value [ 143.633850][ T43] usb 5-1: USB disconnect, device number 2 [ 143.728897][ T6849] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 143.947130][ T6860] loop3: detected capacity change from 0 to 32768 [ 144.025262][ T6860] (syz.3.265,6860,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 144.131284][ T6860] (syz.3.265,6860,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 144.280300][ T6860] (syz.3.265,6860,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 144.377470][ T6860] JBD2: Ignoring recovery information on journal [ 144.427996][ T6869] loop5: detected capacity change from 0 to 32768 [ 144.436384][ T6869] XFS: ikeep mount option is deprecated. [ 144.470844][ T6869] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 144.485234][ T43] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 144.570263][ T6860] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 144.649621][ T6869] XFS (loop5): Ending clean mount [ 144.687237][ T6869] XFS (loop5): Quotacheck needed: Please wait. [ 144.709564][ T43] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 144.758328][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.780948][ T43] usb 5-1: Product: syz [ 144.785244][ T43] usb 5-1: Manufacturer: syz [ 144.786512][ T6868] loop1: detected capacity change from 0 to 40427 [ 144.797189][ T43] usb 5-1: SerialNumber: syz [ 144.815972][ T43] usb 5-1: config 0 descriptor?? [ 144.842103][ T6868] F2FS-fs (loop1): build fault injection rate: 771 [ 144.873420][ T43] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 144.887527][ T5839] ocfs2: Unmounting device (7,3) on (node local) [ 144.894533][ T6869] XFS (loop5): Quotacheck: Done. [ 144.924225][ T6868] F2FS-fs (loop1): invalid crc value [ 145.107373][ T5832] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.355059][ T6868] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 145.574733][ T6902] bio_check_eod: 5 callbacks suppressed [ 145.574754][ T6902] syz.1.263: attempt to access beyond end of device [ 145.574754][ T6902] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 145.716859][ T6904] loop5: detected capacity change from 0 to 512 [ 145.753263][ T5844] syz-executor: attempt to access beyond end of device [ 145.753263][ T5844] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 145.771799][ T6904] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.791264][ T5844] CPU: 0 UID: 0 PID: 5844 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 145.791297][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.791312][ T5844] Call Trace: [ 145.791322][ T5844] [ 145.791333][ T5844] dump_stack_lvl+0x189/0x250 [ 145.791383][ T5844] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.791420][ T5844] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 145.791459][ T5844] ? __pfx_queue_work_on+0x10/0x10 [ 145.791485][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.791513][ T5844] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 145.791545][ T5844] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 145.791579][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.791606][ T5844] ? f2fs_hw_is_readonly+0x39b/0x470 [ 145.791640][ T5844] f2fs_handle_critical_error+0x37c/0x540 [ 145.791675][ T5844] f2fs_write_end_io+0x495/0x810 [ 145.791704][ T5844] ? blkg_put+0x22/0x240 [ 145.791751][ T5844] __submit_merged_bio+0x27a/0x6a0 [ 145.791787][ T5844] __submit_merged_write_cond+0x255/0x530 [ 145.791822][ T5844] f2fs_write_data_pages+0x261d/0x3000 [ 145.791850][ T5844] ? __lock_acquire+0xab9/0xd20 [ 145.791926][ T5844] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 145.792012][ T5844] ? __mod_zone_page_state+0xd7/0x140 [ 145.792061][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.792091][ T5844] ? folios_put_refs+0x560/0x640 [ 145.792136][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.792163][ T5844] ? __lock_acquire+0xab9/0xd20 [ 145.792205][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.792229][ T5844] ? do_raw_spin_lock+0x121/0x290 [ 145.792262][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.792293][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.792319][ T5844] ? do_raw_spin_unlock+0x122/0x240 [ 145.792346][ T5844] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 145.792378][ T5844] do_writepages+0x32e/0x550 [ 145.792419][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.792452][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.792477][ T5844] ? do_raw_spin_unlock+0x122/0x240 [ 145.792509][ T5844] filemap_fdatawrite+0x191/0x230 [ 145.792531][ T5844] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 145.792607][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.792639][ T5844] ? do_raw_spin_unlock+0x122/0x240 [ 145.792671][ T5844] f2fs_sync_dirty_inodes+0x31f/0x830 [ 145.792725][ T5844] f2fs_write_checkpoint+0x94a/0x1de0 [ 145.792788][ T5844] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 145.792876][ T5844] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 145.792907][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.792932][ T5844] ? kfree+0x18e/0x440 [ 145.792967][ T5844] ? kill_f2fs_super+0x298/0x6c0 [ 145.793009][ T5844] kill_f2fs_super+0x2c3/0x6c0 [ 145.793050][ T5844] ? __pfx_kill_f2fs_super+0x10/0x10 [ 145.793085][ T5844] ? radix_tree_delete_item+0x2b6/0x400 [ 145.793129][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.793155][ T5844] ? shrinker_free+0x2ce/0x3e0 [ 145.793187][ T5844] deactivate_locked_super+0xbc/0x130 [ 145.793222][ T5844] cleanup_mnt+0x425/0x4c0 [ 145.793252][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.793279][ T5844] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.793317][ T5844] task_work_run+0x1d4/0x260 [ 145.793350][ T5844] ? __pfx_task_work_run+0x10/0x10 [ 145.793376][ T5844] ? __x64_sys_umount+0x122/0x160 [ 145.793405][ T5844] ? exit_to_user_mode_loop+0x40/0x110 [ 145.793444][ T5844] exit_to_user_mode_loop+0xec/0x110 [ 145.793477][ T5844] do_syscall_64+0x2bd/0x3b0 [ 145.793497][ T5844] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.793530][ T5844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.793553][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.793579][ T5844] ? exc_page_fault+0x9f/0xf0 [ 145.793616][ T5844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.793637][ T5844] RIP: 0033:0x7f6ae7d8fc57 [ 145.793656][ T5844] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 145.793674][ T5844] RSP: 002b:00007ffd3615a7d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 145.793699][ T5844] RAX: 0000000000000000 RBX: 00007f6ae7e10925 RCX: 00007f6ae7d8fc57 [ 145.793714][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3615a890 [ 145.793727][ T5844] RBP: 00007ffd3615a890 R08: 0000000000000000 R09: 0000000000000000 [ 145.793741][ T5844] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd3615b920 [ 145.793755][ T5844] R13: 00007f6ae7e10925 R14: 0000000000023902 R15: 00007ffd3615b960 [ 145.793793][ T5844] [ 145.794096][ T5844] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 145.846109][ T6904] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.271734][ T6904] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 146.314139][ T6901] loop3: detected capacity change from 0 to 32768 [ 146.348691][ T6904] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c11c, mo2=0002] [ 146.388731][ T6904] System zones: 1-12 [ 146.399630][ T6910] bridge1: entered promiscuous mode [ 146.418904][ T6904] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.274: corrupted in-inode xattr: e_value size too large [ 146.472630][ T6901] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.548492][ T6904] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.274: couldn't read orphan inode 15 (err -117) [ 146.598072][ T6904] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.752167][ T6901] XFS (loop3): Ending clean mount [ 146.754122][ T5938] usb 5-1: USB disconnect, device number 3 [ 146.763474][ T6919] loop0: detected capacity change from 0 to 1024 [ 146.799325][ T6919] EXT4-fs: Ignoring removed nobh option [ 146.800062][ T6901] XFS (loop3): Quotacheck needed: Please wait. [ 146.824347][ T6904] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.274: Unrecognised inode hash code 4 [ 146.846921][ T6919] EXT4-fs: Ignoring removed bh option [ 146.891990][ T6919] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.278: bad orphan inode 32767 [ 146.921784][ T6904] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.274: Corrupt directory, running e2fsck is recommended [ 146.939914][ T6919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.060151][ T6901] XFS (loop3): Quotacheck: Done. [ 147.119034][ T30] audit: type=1804 audit(1749780865.075:10): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.272" name="/newroot/38/file0/bus" dev="loop3" ino=9292 res=1 errno=0 [ 147.179815][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.219241][ T5839] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 147.416781][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.519991][ T6928] bridge_slave_0: left allmulticast mode [ 147.566130][ T6928] bridge_slave_0: left promiscuous mode [ 147.568287][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.281'. [ 147.607254][ T6928] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.684116][ T6928] bridge_slave_1: left allmulticast mode [ 147.698305][ T6928] bridge_slave_1: left promiscuous mode [ 147.744051][ T6928] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.850660][ T6928] bond0: (slave bond_slave_0): Releasing backup interface [ 147.916289][ T6928] bond0: (slave bond_slave_1): Releasing backup interface [ 148.039547][ T6928] team0: Port device team_slave_0 removed [ 148.092527][ T6938] block device autoloading is deprecated and will be removed. [ 148.134344][ T6928] team0: Port device team_slave_1 removed [ 148.162226][ T6928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.202135][ T5834] IPVS: starting estimator thread 0... [ 148.220992][ T6928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.286167][ T6928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.304783][ T6928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.323100][ T6946] IPVS: using max 24 ests per chain, 57600 per kthread [ 148.400479][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 148.483270][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.288'. [ 148.601436][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 148.611965][ T10] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 148.625591][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.658453][ T10] usb 2-1: Product: syz [ 148.670488][ T10] usb 2-1: Manufacturer: syz [ 148.686542][ T10] usb 2-1: SerialNumber: syz [ 149.093038][ T10] usb 2-1: config 0 descriptor?? [ 149.327572][ T10] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 149.671458][ T5834] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 150.225072][ T6969] loop2: detected capacity change from 0 to 32768 [ 150.240647][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 150.247641][ T6969] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 150.255849][ T6969] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 150.267732][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.340023][ T5834] usb 4-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 150.364486][ T6969] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 150.374792][ T3073] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 150.401688][ T3073] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 150.412515][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.443640][ T5834] usb 4-1: config 0 descriptor?? [ 150.517795][ T6976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.298'. [ 150.635786][ T3073] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 234ms [ 150.675562][ T5834] usbhid 4-1:0.0: can't add hid device: -71 [ 150.685142][ T3073] gfs2: fsid=syz:syz.0: jid=0: Done [ 150.691236][ T5834] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 150.709812][ T6969] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 150.769876][ T10] gspca_sunplus: reg_r err -71 [ 150.770017][ T5834] usb 4-1: USB disconnect, device number 4 [ 150.788062][ T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 150.868729][ T10] usb 2-1: USB disconnect, device number 4 [ 151.273834][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.287112][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.297625][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.306371][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.315615][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.997231][ T7004] loop5: detected capacity change from 0 to 131072 [ 153.024561][ T7004] F2FS-fs (loop5): invalid crc value [ 153.133609][ T7004] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 153.149963][ T7004] F2FS-fs (loop5): Corrupted max_depth of 3: 16842753 [ 153.312492][ T7024] loop4: detected capacity change from 0 to 2048 [ 153.337668][ T6984] chnl_net:caif_netlink_parms(): no params data found [ 153.361015][ T5848] Bluetooth: hci4: command tx timeout [ 153.377025][ T7024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 153.404905][ T7027] netlink: 'syz.1.313': attribute type 1 has an invalid length. [ 153.656335][ T7024] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 153.763646][ T7024] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 210 with error 28 [ 153.774678][ T7027] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.790659][ T7024] EXT4-fs (loop4): This should not happen!! Data will be lost [ 153.790659][ T7024] [ 153.842049][ T7024] EXT4-fs (loop4): Total free blocks count 0 [ 153.848436][ T7024] EXT4-fs (loop4): Free/Dirty block details [ 153.876464][ T7024] EXT4-fs (loop4): free_blocks=2415919104 [ 153.919468][ T7024] EXT4-fs (loop4): dirty_blocks=224 [ 153.934035][ T7024] EXT4-fs (loop4): Block reservation details [ 153.954831][ T7024] EXT4-fs (loop4): i_reserved_data_blocks=14 [ 153.995118][ T7030] bond1: (slave veth3): Enslaving as an active interface with a down link [ 154.096132][ T7033] bond1: (slave syz_tun): making interface the new active one [ 154.115743][ T7033] syz_tun: entered promiscuous mode [ 154.151514][ T7033] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 154.221971][ T7033] syz.1.313 (7033) used greatest stack depth: 19928 bytes left [ 154.296084][ T4207] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 154.565777][ T6984] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.592951][ T6984] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.607460][ T30] audit: type=1326 audit(1749780872.555:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.320" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f064f78e929 code=0x0 [ 154.614108][ T6984] bridge_slave_0: entered allmulticast mode [ 154.637649][ T5834] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 154.658849][ T6984] bridge_slave_0: entered promiscuous mode [ 154.676825][ T6984] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.695220][ T6984] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.706092][ T6984] bridge_slave_1: entered allmulticast mode [ 154.718618][ T6984] bridge_slave_1: entered promiscuous mode [ 154.803515][ T5834] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.827956][ T5834] usb 6-1: config 0 has no interfaces? [ 154.847914][ T5834] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.881886][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.908445][ T5834] usb 6-1: config 0 descriptor?? [ 154.937682][ T7060] bond1: (slave syz_tun): Releasing active interface [ 154.957248][ T7060] syz_tun: left promiscuous mode [ 154.957952][ T7062] netlink: 'syz.4.323': attribute type 10 has an invalid length. [ 154.971323][ T7062] netlink: 40 bytes leftover after parsing attributes in process `syz.4.323'. [ 154.982615][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 155.007709][ T7060] bridge_slave_0: left allmulticast mode [ 155.019383][ T7060] bridge_slave_0: left promiscuous mode [ 155.034756][ T7060] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.076592][ T7060] bridge_slave_1: left allmulticast mode [ 155.082500][ T7060] bridge_slave_1: left promiscuous mode [ 155.088602][ T7060] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.112446][ T7060] bond0: (slave bond_slave_0): Releasing backup interface [ 155.129998][ T7060] bond0: (slave bond_slave_1): Releasing backup interface [ 155.143789][ T5834] usb 6-1: USB disconnect, device number 4 [ 155.194963][ T7060] team0: Port device team_slave_0 removed [ 155.229964][ T7060] team0: Port device team_slave_1 removed [ 155.245721][ T7060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.272349][ T7060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.304089][ T7060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.321732][ T7060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.387209][ T7060] bond1: (slave veth3): Releasing active interface [ 155.441457][ T5848] Bluetooth: hci4: command tx timeout [ 155.459182][ T6984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.485574][ T7062] dummy0: entered promiscuous mode [ 155.493655][ T7062] bridge0: port 1(dummy0) entered blocking state [ 155.502603][ T7062] bridge0: port 1(dummy0) entered disabled state [ 155.521208][ T7062] dummy0: entered allmulticast mode [ 155.550492][ T7062] bridge0: port 1(dummy0) entered blocking state [ 155.557201][ T7062] bridge0: port 1(dummy0) entered forwarding state [ 155.971745][ T7085] loop2: detected capacity change from 0 to 256 [ 156.016089][ T6984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.250227][ T6984] team0: Port device team_slave_0 added [ 156.279584][ T6984] team0: Port device team_slave_1 added [ 156.311590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 156.320176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 156.411187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 156.445808][ T6984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.453234][ T6984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.508392][ T6984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.682111][ T6984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.761403][ T6984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.562043][ T5848] Bluetooth: hci4: command tx timeout [ 157.601161][ T6984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.334379][ T7112] netlink: 12 bytes leftover after parsing attributes in process `syz.5.340'. [ 158.339883][ T6984] hsr_slave_0: entered promiscuous mode [ 158.440050][ T6984] hsr_slave_1: entered promiscuous mode [ 158.499075][ T6984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.559149][ T6984] Cannot create hsr debugfs directory [ 158.676308][ T7118] input: syz0 as /devices/virtual/input/input5 [ 159.269117][ T7123] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000083: 0000 [#1] SMP KASAN NOPTI [ 159.281218][ T7123] KASAN: null-ptr-deref in range [0x0000000000000418-0x000000000000041f] [ 159.289630][ T7123] CPU: 0 UID: 0 PID: 7123 Comm: syz.1.344 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 159.301543][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.311625][ T7123] RIP: 0010:fib_lookup_good_nhc+0x85/0x3d0 [ 159.317487][ T7123] Code: 4c 89 24 24 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 7b 9e 30 f8 41 bc 18 04 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 5c 9e 30 f8 4d 8b 24 24 e8 c3 f7 [ 159.337202][ T7123] RSP: 0018:ffffc90004fdf4d0 EFLAGS: 00010212 [ 159.343304][ T7123] RAX: 0000000000000083 RBX: ffff888028626920 RCX: 0000000000000002 [ 159.351282][ T7123] RDX: ffff88807f5c0000 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.359280][ T7123] RBP: ffff888028626937 R08: 0000000000000000 R09: ffffffff89d44a66 [ 159.367368][ T7123] R10: dffffc0000000000 R11: fffff520009fbefa R12: 0000000000000418 [ 159.375512][ T7123] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff110050c4d26 [ 159.383512][ T7123] FS: 00007f6ae8cad6c0(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 159.392550][ T7123] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.399218][ T7123] CR2: 0000200000004cc0 CR3: 0000000065c9f000 CR4: 0000000000350ef0 [ 159.407190][ T7123] Call Trace: [ 159.410474][ T7123] [ 159.413404][ T7123] nexthop_get_nhc_lookup+0x1af/0x400 [ 159.418794][ T7123] fib_table_lookup+0xf26/0x16e0 [ 159.423752][ T7123] fib_lookup+0x1c5/0x440 [ 159.428175][ T7123] ? fib_lookup+0x76/0x440 [ 159.432601][ T7123] ip_route_output_key_hash_rcu+0x2fb/0x23a0 [ 159.438598][ T7123] ? ip_route_output_key_hash+0xde/0x2e0 [ 159.444241][ T7123] ? ip_route_output_key_hash+0xde/0x2e0 [ 159.449888][ T7123] ip_route_output_key_hash+0x1b9/0x2e0 [ 159.455453][ T7123] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 159.461273][ T7123] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 159.467357][ T7123] ? crng_make_state+0x34c/0x700 [ 159.472299][ T7123] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.477936][ T7123] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.483151][ T7123] ip_route_output_flow+0x2a/0x150 [ 159.488279][ T7123] sctp_v4_get_dst+0x3c7/0x1200 [ 159.493136][ T7123] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.498771][ T7123] ? __pfx_sctp_v4_get_dst+0x10/0x10 [ 159.504142][ T7123] ? _get_random_bytes+0x1bd/0x210 [ 159.509312][ T7123] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 159.515655][ T7123] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.521317][ T7123] ? dst_release+0x72/0x1b0 [ 159.525832][ T7123] sctp_transport_route+0x118/0x2f0 [ 159.531051][ T7123] sctp_assoc_add_peer+0x657/0x13b0 [ 159.536365][ T7123] sctp_connect_new_asoc+0x30a/0x690 [ 159.541666][ T7123] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 159.547491][ T7123] ? sctp_get_af_specific+0x29/0x80 [ 159.552698][ T7123] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.558334][ T7123] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.563972][ T7123] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 159.569786][ T7123] __sctp_connect+0x5ba/0xd50 [ 159.574472][ T7123] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.580128][ T7123] ? __pfx___sctp_connect+0x10/0x10 [ 159.585348][ T7123] sctp_inet_connect+0x12e/0x1e0 [ 159.590289][ T7123] __sys_connect+0x316/0x440 [ 159.594882][ T7123] ? __pfx___sys_connect+0x10/0x10 [ 159.600002][ T7123] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.605635][ T7123] ? rcu_is_watching+0x15/0xb0 [ 159.610417][ T7123] __x64_sys_connect+0x7a/0x90 [ 159.615190][ T7123] do_syscall_64+0xfa/0x3b0 [ 159.619715][ T7123] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.624929][ T7123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.630999][ T7123] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.636634][ T7123] ? exc_page_fault+0x9f/0xf0 [ 159.641330][ T7123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.647223][ T7123] RIP: 0033:0x7f6ae7d8e929 [ 159.651636][ T7123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.671326][ T7123] RSP: 002b:00007f6ae8cad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 159.679828][ T7123] RAX: ffffffffffffffda RBX: 00007f6ae7fb5fa0 RCX: 00007f6ae7d8e929 [ 159.687816][ T7123] RDX: 0000000000000010 RSI: 0000200000004cc0 RDI: 0000000000000003 [ 159.695792][ T7123] RBP: 00007f6ae7e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 159.703846][ T7123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.711811][ T7123] R13: 0000000000000000 R14: 00007f6ae7fb5fa0 R15: 00007ffd3615b548 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 159.719794][ T7123] [ 159.722809][ T7123] Modules linked in: [ 159.729239][ T7123] ---[ end trace 0000000000000000 ]--- [ 159.738681][ T5848] Bluetooth: hci4: command tx timeout [ 159.788294][ T7123] RIP: 0010:fib_lookup_good_nhc+0x85/0x3d0 [ 159.794342][ T7123] Code: 4c 89 24 24 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 7b 9e 30 f8 41 bc 18 04 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 5c 9e 30 f8 4d 8b 24 24 e8 c3 f7 [ 159.815745][ T7123] RSP: 0018:ffffc90004fdf4d0 EFLAGS: 00010212 [ 159.822288][ T7123] RAX: 0000000000000083 RBX: ffff888028626920 RCX: 0000000000000002 [ 159.830377][ T7123] RDX: ffff88807f5c0000 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.844926][ T7123] RBP: ffff888028626937 R08: 0000000000000000 R09: ffffffff89d44a66 [ 159.855240][ T7123] R10: dffffc0000000000 R11: fffff520009fbefa R12: 0000000000000418 [ 159.864608][ T7123] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff110050c4d26 [ 159.874749][ T7123] FS: 00007f6ae8cad6c0(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 159.885995][ T7123] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.897137][ T7123] CR2: 00007f6ae8c6af98 CR3: 0000000065c9f000 CR4: 0000000000350ef0 [ 160.075958][ T7129] loop5: detected capacity change from 0 to 40427 [ 160.144647][ T7123] Kernel panic - not syncing: Fatal exception [ 160.151010][ T7123] Kernel Offset: disabled [ 160.155330][ T7123] Rebooting in 86400 seconds..