last executing test programs: 7m23.165093123s ago: executing program 5 (id=6): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r4 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0xa, 0x0, 0x5, 0x7fff7ffc}, {0x5, 0x64, 0x9, 0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000180)={0x0, 0x1, r5, 0x5, 0x80000}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) 7m21.098335538s ago: executing program 5 (id=12): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) r6 = dup(r4) inotify_rm_watch(r6, r5) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r8 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x3, {{}, 0xfffff788}}, {0x8, 0x22eb, 0x2}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f0000000040), 0x0) recvmmsg(r9, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000480)='syzkaller\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180a0000000000000000000000000000850000006600000095"], &(0x7f0000000000)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 7m19.906231245s ago: executing program 5 (id=14): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x9) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x4d) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x20000000, 0x0, 0xffffffffffffffff}, &(0x7f00000000c0), 0x42, 0x0) listen(r2, 0x5) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff), 0x0, 0x4890, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, r5, 0x49b2570c7b83b4a5, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000000880)={0xf78, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x64, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x64}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'NFQUEUE\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'NFQUEUE\x00'}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0xca8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc208}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']$#(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xc04, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_WANTED={0x1ac, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x7c, 0x5, "ae8e2795d07b9f5c0096ae65f217de52460047cb81b898e123630240f1ee10680088ae5d3a1bd88796dc4c128500c75b5fca78fcf55b6c8c9835e97cccfa38baa8b633afd1bf2ee5d279603a7e219aea9c5860a1faa1661867a1f6bdc2af63096e241557232eab2afd4f51dc618e84992c77a4054ec9c233"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xd3, 0x5, "18be109eb6a1a9271f2b30a4bd45f8264e5d20c3ee0dae3f2998da9ebe4e9e8b1fb32b5e12fcd16fe7debd04fac0fc0a2f685c5dfa9ad8bbcc4995d5951977460bbaebc77c838b5b1d44df6d5ae5c19b07ee95242eeb012a06ac8a98ad3d65e5482236a3253618adf5685c65b33ede2f0d59f2dae18a91472fba2415595bb52705243fd944541126c39a4877503dc23c8dc5a6e71948753fa0c68a13c537fadc3402ae65230b0b096bd2131da050cb60f5cbed6f8c6b7348959355167cff4ff04b4dcb3d2f6f5822f46bd072b27df9"}, @ETHTOOL_A_BITSET_VALUE={0x50, 0x4, "f690ef90a2778e3f81d60ce2db112b1ff596e6860464796b86ce108b60d6564725b5a3d21d5a52d0bbd92044a34608638408a52ae1810ded3c669e1eee5199b6edb2ed0f3d7923194932ec76"}]}, @ETHTOOL_A_FEATURES_WANTED={0x50, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '}[-[\\\\\'mD\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xf78}, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xf0}}, 0x0) close(0x3) shutdown(r6, 0x1) close(r2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x208401, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x274282, 0x0) 7m16.303416692s ago: executing program 5 (id=17): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000078000000000005000000180001801400020073797a5f74756e00000000000000000008000900040000000500020005001900400003803c0003"], 0x7c}, 0x1, 0x0, 0x0, 0x44851}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) pipe2$9p(&(0x7f00000000c0), 0x84800) 7m14.287719617s ago: executing program 5 (id=21): getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x7, 0x0, 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_vhci(0x0, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0x3, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f00000002c0)={0x0, [[0x3, 0x8, 0x80000000, 0x1, 0x8, 0x1, 0x6959, 0x1], [0x1, 0xffffe9c5, 0x1000, 0x7, 0x38e5, 0x38, 0x7fff, 0x3], [0x3, 0x7, 0x800, 0xd629, 0x9, 0x5, 0x3, 0x1]], '\x00', [{0x40, 0xba, 0x0, 0x1, 0x1, 0x1}, {0x800, 0x21, 0x1}, {0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x7f, 0x7, 0x1, 0x0, 0x1}, {0x7, 0x6, 0x1}, {0x80000001, 0xfffffffb, 0x1, 0x0, 0x1}, {0x5, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x400000, 0x1, 0x0, 0x1}, {0x7, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x6, 0x9, 0x1, 0x0, 0x1}], '\x00', 0xed21}) unshare(0x8000000) r6 = semget$private(0x0, 0x4000, 0x0) semtimedop(r6, &(0x7f0000000000)=[{0x2, 0x81, 0x1800}], 0x1, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x20a00) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r8, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) mmap$snddsp_control(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x2000004, 0x110, r7, 0x83000000) 6m58.429057581s ago: executing program 32 (id=21): getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x7, 0x0, 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_vhci(0x0, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0x3, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f00000002c0)={0x0, [[0x3, 0x8, 0x80000000, 0x1, 0x8, 0x1, 0x6959, 0x1], [0x1, 0xffffe9c5, 0x1000, 0x7, 0x38e5, 0x38, 0x7fff, 0x3], [0x3, 0x7, 0x800, 0xd629, 0x9, 0x5, 0x3, 0x1]], '\x00', [{0x40, 0xba, 0x0, 0x1, 0x1, 0x1}, {0x800, 0x21, 0x1}, {0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x7f, 0x7, 0x1, 0x0, 0x1}, {0x7, 0x6, 0x1}, {0x80000001, 0xfffffffb, 0x1, 0x0, 0x1}, {0x5, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x400000, 0x1, 0x0, 0x1}, {0x7, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x6, 0x9, 0x1, 0x0, 0x1}], '\x00', 0xed21}) unshare(0x8000000) r6 = semget$private(0x0, 0x4000, 0x0) semtimedop(r6, &(0x7f0000000000)=[{0x2, 0x81, 0x1800}], 0x1, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x20a00) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r8, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) mmap$snddsp_control(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x2000004, 0x110, r7, 0x83000000) 5m27.498345047s ago: executing program 6 (id=377): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 5m27.187495949s ago: executing program 6 (id=379): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x3, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000580)) 5m26.745452325s ago: executing program 6 (id=383): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) 5m25.066576355s ago: executing program 6 (id=389): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1004401, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 5m24.295850394s ago: executing program 6 (id=395): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000240)=@xdp, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)="99c0c8a64944a05e9c346de4d3d3a9bb39a0f78b255ad412db84b364a11507d57ebe76f665aa34319949d11ac4742b1e21768d7255e6fadbe63c5361ffa11811d2b17ec2289c7a18786e0a226f6fe59ee2ffdbf142cf0477b841c9457ee2ea08ae81d4a3", 0x64}, {&(0x7f0000000340)="e85adb6a4d1a8746eac7dfbfc4425e242d0b83bf6a5d7eddee7f42ebd47e3e45498f220f7a0a57909dcf6199cbcad1a4310a9164af92b63381eb4ec1585cf5ce4b7b56ac8e2bb8c522148434f8794629edc06d69", 0x54}, {&(0x7f00000003c0)="58eb2c5f4861f02f200c15a24904c3bee774847f569bed51040025a08a0191a5eb14d91b8c8c510d600553f4ed0ee0a928e2ccbd303cff39", 0x38}, {&(0x7f0000000400)="51380ec09bd99ead10314c60dd84ede5853a989a50373ac712415d8507e6932ddee21ea42c5a23ae95e79250499276fccb9664194c8cd6c2fae81193d8b3b9be16f971daedea10580316cb74311dc5554dda3033aef6740c3e40681e462f186b9ea4f4492a52a98681e1b274cf9426a421b972aa87496a4dcde29945", 0x7c}, {&(0x7f0000000480)="4cd39417fd88dab33f389d56159dd2ba0c3121fc76d126adb79cb5d48ac2b8ba46342a9cb6c73090f4198a6e47bcb95da97e980783892369896001917cd145f40642879a25a833fdf010de49638e89077f67f3e8daa41587b11f7dad846e3df25f85f8b7b441abf566cf3573223448c7e338f747494818815250f682330701dab144969e7f01f37b6c76040b7293abf700cd4273f5a67194394245d8855d48b104a8e79e7591c7510af76a59182c39a7c8ededce3ee8121afe4a110e6725f0acec8de26e557effc6d7e853d1d6dc115c9cc38be97879e7e0b046466ce56d6d7a4d980b0413ff128f35d5e489adbfa4cb4cd88377c7f2e68b4a7e0c", 0xfb}], 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x1148}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0)=0x4, 0x4) 5m22.511846493s ago: executing program 6 (id=409): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a340977770a89"], 0xa) 5m21.673133527s ago: executing program 33 (id=409): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a340977770a89"], 0xa) 3m11.939115496s ago: executing program 34 (id=936): io_submit(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m17.628601616s ago: executing program 8 (id=1089): prctl$PR_SET_SECUREBITS(0x1c, 0x4) setresuid(0x0, 0xee00, 0xee01) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) execve(0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r1, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000200)={'\x00', 0x85c0, 0x2, 0x34d6}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r2, &(0x7f0000003440)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2m16.700371658s ago: executing program 2 (id=1090): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b", 0x27}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) 2m15.456005126s ago: executing program 7 (id=1092): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) io_uring_setup(0x29e2, &(0x7f0000000380)={0x0, 0x93d1, 0x8, 0x1, 0x2e0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="18000000010000", 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb8}}, 0x40) add_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv(r3, &(0x7f0000000800)=[{&(0x7f0000000040)=""/33, 0x21}], 0x1) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x9, 0x13, r3, 0x79d86000) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6(0xa, 0x805, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000001080)={r8, 0x7fffffff}, &(0x7f0000001100)=0x8) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000000c0)={'geneve0\x00'}) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x980000, 0x6, 0x7ff, r4, 0x0, 0x0}) 2m15.454252706s ago: executing program 4 (id=1093): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='\xe0\x0e\xb3O\xf1J\xf7N\x1c\\\x10\xecg\xb4\xe9\xae\x15\xe6\xf9\x8e\xee\a(\\)\x8c-Y\xd6\\t\xde\x89\xcf\xb5\b\x8e|\xd0\xf5\xa2Qf\xeb\x8eJ\xd5V\xfa[3\xb4\xac\x00\x00+\x15\xbf\xc3\x16?.\x92x\x177\x03rJ\xb3P}\x84\x85SIV\f\xdd\x93\x00\x12\xaeQ\xf1\xbf\xbdt\x85\xab\xfea\x96\b\xc6\x05\tC\x00~\x01\xb0\x9eH5\x8fB\xd4F\xd5\xd2\xb2\xea\xa2\x99\xcd%\x92:\xc6*\x976\n`\xc71/\xa2\xd1\xa5\xd3\xbfN\x952\x9c\x99Y;\xef\xe1\xdc\xbf\xfb\x1c\x9c\x13\x9d\x9d\xa1;\x00\x1e_\xadg|\xb7q6\x84\b\x80\xa00\xd81U\x1eXw\xa8\x9f{k\x8e\xb4\xaci\x82i2\xa3\xb2Mi\xb2e\xb8,0u\x1c\x82p\xe1K\x05\x8e\xbc\x04\x8d\xdaA\x04gr\x885\x14\x9c\a.j\xbe\xe4\xd9B\x88\x89') bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x20) syz_open_dev$sg(0x0, 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getrlimit(0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2m13.928077103s ago: executing program 2 (id=1094): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f00001a6000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00008dc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40030040, 0x0) 2m13.547855203s ago: executing program 8 (id=1095): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x100003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0x8, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e57194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2m13.321440067s ago: executing program 2 (id=1097): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f00000000c0)={0xa, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0xe2ae) 2m13.228806516s ago: executing program 7 (id=1099): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="0600cd00000000006c003300d0200900080211000001080211000000505050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000814) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ptrace(0x10, r3) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0x1a, 0x0, 0xc, 0x0) 2m10.956318115s ago: executing program 2 (id=1101): r0 = socket$nl_rdma(0x10, 0x3, 0x14) fstat(r0, 0xfffffffffffffffe) socket(0x1e, 0x4, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x70bd2a, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = dup(r1) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000000)={[{@noblock_validity}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@dax_never}, {@noblock_validity}]}, 0x1, 0x792, &(0x7f0000020c00)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) write$binfmt_elf32(r3, &(0x7f00000003c0)=ANY=[], 0x58) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000100)=ANY=[], 0xc) 2m10.243794516s ago: executing program 4 (id=1102): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x0, 0x80000000, 0x4, 0xffffffffffffffc0, 0xde4e, 0x7ff, 0x90b4, 0x9, 0x26], 0x0, 0x2}) 2m9.06477167s ago: executing program 4 (id=1104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x6, 0xd04, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'nr0\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8, 0x14e}, 0x48) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c1, 0x9c37611dc13d0da6) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x8) 2m7.48355584s ago: executing program 4 (id=1105): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x2, {0x60, 0x0, 0x0, r3, {}, {0xfff1, 0xa}, {0x0, 0x5}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r0, &(0x7f0000000100)=""/8, 0x7f0ebb3aa9319cb, 0x720, 0x0, 0xfffffffffffffd25) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r5 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) 2m6.337430053s ago: executing program 8 (id=1106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r3, 0x851, 0x0) 2m6.15281482s ago: executing program 2 (id=1108): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2fc0}], 0x0, 0x0, 0x0}) 2m6.152096187s ago: executing program 7 (id=1109): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000002c0)={0x20, 0x17, 0x6, "875574cbea3c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m5.095485272s ago: executing program 8 (id=1111): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x8, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000240)={0x0, 0x1, 0x3}) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, 0x0) recvmmsg(r3, 0x0, 0x0, 0x20, 0x0) 2m4.451040892s ago: executing program 4 (id=1113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) 2m3.676936732s ago: executing program 8 (id=1114): semget$private(0x0, 0x7, 0x3c0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000000)={0x0, 0xa7, 0x4}) 2m2.544174966s ago: executing program 4 (id=1116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35"], 0xcfa4) openat$tun(0xffffffffffffff9c, 0x0, 0x82, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3b) 2m2.408099463s ago: executing program 7 (id=1118): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x3f, 0x0, 0x4, 0x0, 0x131c, 0x0, 0x400000004, 0x1000008}, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000a40)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m1.89508657s ago: executing program 7 (id=1119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x81}]}, 0x1c}}, 0x20000080) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x6, 0x0, 0x419}}}, 0x7) socket$netlink(0x10, 0x3, 0x6) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x400, &(0x7f0000000200)={[{@nls={'nls', 0x3d, 'koi8-r'}}, {@type={'type', 0x3d, "98acdea6"}}, {@part={'part', 0x3d, 0x9}}, {@part={'part', 0x3d, 0x9}}]}, 0x1, 0x5f1, &(0x7f0000000680)="$eJzs3U9vHGcdB/DvbGwnDiJ126QtCISVHECNSLzeNvUBiYAQ8qFClbj00oOVbBIrG7eyt8itEHL4e+UdtAg5Z04cEIdIcOYlYIlDD0jcfQua2dl4G2/9p3G86+bzkZ59nmeemWee+Xnm2Z1ZWRvgubX4biYfpsji5bfXy/rWZquztdm61y8nOZ2kkUz0shQrSTGZXE8v5Rvlwrq74ov2894nby181nxwv1ebqFO1fmOv7Q5mo06ZTXKqzo+qvxtP2d/pgXIZsEv9wMGoPdpl4zCbP+V1C4yDove+uctMcjbJmf77WD07NI53dEfvULMcAAAAnFAvbGc76zk36nEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASVL//n9Rp0a/PJui//v/U/Wy1OUT7eGoBwAAAAAAAAAAR+A729nOes7164+K6jv/i1XlfPX6tXyYtbSzmitZz1K66WY1zSQzAx1NrS91u6vNA2w5P3TL+eM5XgAAAAAAAAD4ivp1Fne+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHFQJKd6WZXO98szaUwkOZNkqlxvI/l7v3ySPRz1AAAAAOAYvLCd7aznXL/+qKju+V+p7vvP5MOspJvldNNJOzerZwG9u/7G1mars7XZulem3f3+6H+HGkbVY3rPHobvea5a40LV/uepZDE/zc9zObN5J6tZzi+ylG7amc1PqtJSiszUTy9m+uMcPt7rn6u9s99YX6tGMp1bWa7GdiU38n46uZlGdQzVOnvv8X4ZneKHtQPG6Gadl0f0xzo/fhtDls1UEZl8HJG5OvZlNF7cOxKHPE+e3FMzjcfPoM4/g5ifrfMy1r8fWcyHeTIS8wNn3yt7RyK5+J9v//VOZ+XunVtrl8fnkL6kJyPRGojEq89VJKbqaPRm0f5sWdp/trxYbXsuy/lZ3s/NtPNmFvJm5vNG3shcFnJtIK4X9r/Wbic5zLV26Xt1YTrJH+p8PJRxfXEgroMz3UzVNrhkJ0ovHf2MNPHNulDu4zd1Ph6ejERzIBIv7x2JPz0qX9c6K3dX7yx9cMD9fbfOy8v2d2M1N5fny0vlH6uqff7sKNteHtrWrNrOP25r7Gq78O+v1237XalT9We43T3NV22vDm1rVW2vDbQN+5QDwNg7+/rZqen/Tv9r+tPp307fmX77zI9PL5z+1lQm/znxt1N/aTxo/KB4PZ/mVzv3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJe39tHHd5c6nfaqgsKJLUzUZ/O4jOerUBjxxAQ8c1e79z64uvbRx99fvrd0u327vdJqNa/NL1xbmL929dZypz3Xex31MIFnYOdNf9QjAQAAAAAAAAAAAA7qOP6dYNTHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxsi+9m8mGKNOeuzJX1rc1Wp0z98s6aE0kaSYpfJsU/kuvppcwMdFd80X7e++Sthc+aD+7v9DXRX7+x13YHs1GnzCY5VedH1d+Np+6veHyEZcAu9QMHo/b/AAAA//+udQwr") r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x400, 0x3, 0x3, 0x15, 0xfffffff3, 0xfc}, &(0x7f00000001c0)=0x9c) 2m1.239718724s ago: executing program 2 (id=1120): r0 = socket$nl_rdma(0x10, 0x3, 0x14) fstat(r0, 0xfffffffffffffffe) socket(0x1e, 0x4, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x70bd2a, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = dup(r1) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000000)={[{@noblock_validity}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@dax_never}, {@noblock_validity}]}, 0x1, 0x792, &(0x7f0000020c00)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) write$binfmt_elf32(r3, &(0x7f00000003c0)=ANY=[], 0x58) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000100)=ANY=[], 0xc) 1m58.412452842s ago: executing program 7 (id=1122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x407, 0xcc, 0x3}, {0x0, 0x2, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m58.092582245s ago: executing program 8 (id=1125): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) inotify_rm_watch(0xffffffffffffffff, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x3, {{}, 0xfffff788}}, {0x8, 0x22eb, 0x2}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0x3, &(0x7f0000000180)=ANY=[], 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m46.827822197s ago: executing program 35 (id=1116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35"], 0xcfa4) openat$tun(0xffffffffffffff9c, 0x0, 0x82, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3b) 1m44.389139383s ago: executing program 36 (id=1120): r0 = socket$nl_rdma(0x10, 0x3, 0x14) fstat(r0, 0xfffffffffffffffe) socket(0x1e, 0x4, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x70bd2a, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = dup(r1) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000000)={[{@noblock_validity}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@dax_never}, {@noblock_validity}]}, 0x1, 0x792, &(0x7f0000020c00)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) write$binfmt_elf32(r3, &(0x7f00000003c0)=ANY=[], 0x58) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000100)=ANY=[], 0xc) 1m42.863606213s ago: executing program 37 (id=1125): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) inotify_rm_watch(0xffffffffffffffff, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x3, {{}, 0xfffff788}}, {0x8, 0x22eb, 0x2}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0x3, &(0x7f0000000180)=ANY=[], 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m42.692555959s ago: executing program 38 (id=1122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x407, 0xcc, 0x3}, {0x0, 0x2, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9.887842685s ago: executing program 0 (id=1293): r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xfe0a, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x65e82d34}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x80a0000a, @loopback, 0xfffbf803}, 0x1c) 8.83575746s ago: executing program 0 (id=1298): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000180)={{&(0x7f00002b8000/0x3000)=nil, 0x3000}}) 8.555676854s ago: executing program 0 (id=1300): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009780)='./file0\x00', 0x41, &(0x7f0000000000)={[{@norecovery}]}, 0x1, 0x97f7, &(0x7f0000013c80)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000180)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xc, 0x3a, 'exfat\x00', 0x3a, 'exfat\x00', 0x3a, './file1', 0x3a, [0x46]}, 0x34) 7.33871616s ago: executing program 0 (id=1304): syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xff}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@norecovery}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) 4.513880197s ago: executing program 0 (id=1312): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x21, 0x7}, 0x4) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000000c0)=0xbfe, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 3.822708357s ago: executing program 1 (id=1314): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000080)) 3.667919212s ago: executing program 1 (id=1315): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x202021, 0x0) 3.588676217s ago: executing program 1 (id=1316): fstat(0xffffffffffffffff, 0xfffffffffffffffe) r0 = socket(0x1e, 0x4, 0x0) connect$can_bcm(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x70bd2a, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = dup(r1) getpgrp(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000000)={[{@noblock_validity}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@dax_never}, {@noblock_validity}]}, 0x1, 0x792, &(0x7f0000020c00)="$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") setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) read$FUSE(r4, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f00000003c0)=ANY=[], 0x58) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000100)=ANY=[], 0xc) 3.108425351s ago: executing program 0 (id=1318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 3.079772572s ago: executing program 1 (id=1319): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b", 0x27}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) 2.542684311s ago: executing program 39 (id=1318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 2.536749128s ago: executing program 3 (id=1321): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000002640)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @random="fad10101076e", @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0xf6, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0xc, 0x7, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x41}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 2.43212483s ago: executing program 3 (id=1322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x891a, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.399151613s ago: executing program 3 (id=1323): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf25030000000c00040003000000000000000c00080001000000000000000c00020007000000000000000c00050008010000000000000c00060000000000000000000c00020072af000000000000280007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c000180fffffeff", @ANYRES32, @ANYBLOB="080001"], 0x8c}, 0x1, 0x0, 0x0, 0x24060801}, 0x0) 1.06087448s ago: executing program 3 (id=1324): r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r0, @ANYBLOB="01002cbd7000fedbdf2503000000080001"], 0x8c}, 0x1, 0x0, 0x0, 0x4814}, 0x4) 956.559899ms ago: executing program 3 (id=1325): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x0, 0x1, 0x0, 0x2, 0x2, 0x6}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 291.73349ms ago: executing program 1 (id=1326): socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') socket$packet(0x11, 0x2, 0x300) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x33, 0x2000051b) 277.51389ms ago: executing program 3 (id=1327): syz_80211_inject_frame(0x0, 0x0, 0x262) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="b9ff03076844268cb89eccf888a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=1328): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) kernel console output (not intermixed with test programs): wq "btrfs-delayed-meta": -EINTR [ 314.152361][ T10] usb 2-1: non-Atmel transceiver xxxx0000 [ 314.173034][ T8896] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 314.193600][ T8896] BTRFS error (device loop0): open_ctree failed: -12 [ 314.286529][ T8947] loop4: detected capacity change from 0 to 2048 [ 314.353005][ T10] usb 2-1: Firmware version (0.0) predates our first public release. [ 314.353225][ T8947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.367088][ T10] usb 2-1: Please update to version 0.2 or newer [ 314.402308][ T10] usb 2-1: atusb_probe: initialization failed, error = -19 [ 314.437473][ T10] usb 2-1: USB disconnect, device number 12 [ 314.532391][ T8943] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 314.631683][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.888719][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.898347][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.466576][ T8985] loop3: detected capacity change from 0 to 4096 [ 316.514936][ T8985] ntfs3(loop3): ino=3, Correct links count -> 2. [ 316.547149][ T8993] loop2: detected capacity change from 0 to 16 [ 316.625450][ T8993] erofs (device loop2): mounted with root inode @ nid 36. [ 317.189014][ T9000] loop0: detected capacity change from 0 to 32768 [ 317.196530][ T9000] btrfs: Deprecated parameter 'usebackuproot' [ 317.202663][ T9000] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 317.259794][ T9000] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.788 (9000) [ 317.325606][ T9000] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 317.336455][ T9000] BTRFS info (device loop0): using crc32c checksum algorithm [ 317.374886][ T9015] sg_write: process 404 (syz.1.791) changed security contexts after opening file descriptor, this is not allowed. [ 318.037805][ T13] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 318.125167][ T9000] BTRFS error (device loop0): failed to load root extent [ 318.136723][ T9000] BTRFS warning (device loop0): try to load backup roots slot 1 [ 318.148538][ T36] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 318.235340][ T9000] BTRFS warning (device loop0): couldn't read tree root [ 318.243103][ T9000] BTRFS warning (device loop0): try to load backup roots slot 2 [ 318.252537][ T36] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 318.295292][ T9000] BTRFS warning (device loop0): couldn't read tree root [ 318.303637][ T9000] BTRFS warning (device loop0): try to load backup roots slot 3 [ 318.349955][ T9000] BTRFS info (device loop0): rebuilding free space tree [ 318.382270][ T9000] BTRFS info (device loop0): disabling free space tree [ 318.389225][ T9000] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 318.399062][ T9000] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 318.415793][ T9000] BTRFS info (device loop0): checking UUID tree [ 318.422780][ T9000] BTRFS info (device loop0): enabling ssd optimizations [ 318.429888][ T9000] BTRFS info (device loop0): turning on async discard [ 318.436658][ T9000] BTRFS info (device loop0): force clearing of disk cache [ 318.443819][ T9000] BTRFS info (device loop0): enabling auto defrag [ 318.450343][ T9000] BTRFS info (device loop0): trying to use backup root at mount time [ 318.458412][ T9000] BTRFS info (device loop0): use zstd compression, level 3 [ 318.492442][ T9025] loop7: detected capacity change from 0 to 2048 [ 318.503106][ T9027] loop1: detected capacity change from 0 to 512 [ 318.690444][ T9027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.704098][ T9027] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.715975][ T9025] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 318.740428][ T5626] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 318.839937][ T9025] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #12: comm syz.7.793: corrupted in-inode xattr: invalid size in ea xattr [ 319.115883][ T7537] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 319.170204][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.667856][ T9058] hub 8-0:1.0: USB hub found [ 319.736201][ T9058] hub 8-0:1.0: 1 port detected [ 319.838599][ T9061] loop2: detected capacity change from 0 to 1024 [ 319.904970][ T9061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.353290][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.822660][ T9076] loop0: detected capacity change from 0 to 8192 [ 321.573308][ T9091] netlink: 144 bytes leftover after parsing attributes in process `syz.4.809'. [ 321.668530][ T9093] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.892592][ T9099] loop2: detected capacity change from 0 to 256 [ 321.947157][ T9099] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 324.180527][ T1219] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 324.356133][ T9128] loop0: detected capacity change from 0 to 512 [ 324.406046][ T1219] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 324.488344][ T9128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.501179][ T1219] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.622034][ T1219] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 324.634821][ T9128] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.658707][ T9132] loop4: detected capacity change from 0 to 2048 [ 324.718077][ T1219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.348684][ T9132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.458170][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.624377][ T1219] usb 2-1: GET_CAPABILITIES returned 0 [ 325.648636][ T1219] usbtmc 2-1:16.0: can't read capabilities [ 325.680485][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.768929][ T9148] syzkaller1: entered promiscuous mode [ 325.799563][ T9148] syzkaller1: entered allmulticast mode [ 325.911024][ T1219] usb 2-1: USB disconnect, device number 13 [ 326.023986][ T9153] loop2: detected capacity change from 0 to 256 [ 326.095746][ T9153] FAT-fs (loop2): Directory bread(block 1285) failed [ 326.109492][ T9153] FAT-fs (loop2): Directory bread(block 1286) failed [ 326.135646][ T9153] FAT-fs (loop2): Directory bread(block 1287) failed [ 326.340439][ T9153] FAT-fs (loop2): Directory bread(block 1288) failed [ 327.053352][ T9168] loop7: detected capacity change from 0 to 2048 [ 327.110611][ T9168] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 327.268152][ T9162] netlink: 40 bytes leftover after parsing attributes in process `syz.2.832'. [ 327.545639][ T9163] FAT-fs (loop2): Directory bread(block 1285) failed [ 327.579806][ T9163] FAT-fs (loop2): Directory bread(block 1286) failed [ 328.081452][ T9163] FAT-fs (loop2): Directory bread(block 1287) failed [ 328.362340][ T9163] FAT-fs (loop2): Directory bread(block 1288) failed [ 328.809056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 328.879682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 328.904785][ T9196] loop0: detected capacity change from 0 to 32768 [ 328.912320][ T9196] btrfs: Deprecated parameter 'usebackuproot' [ 328.913829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 328.918383][ T9196] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 328.979441][ T9196] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.841 (9196) [ 328.998199][ T9196] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 328.999509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 329.008442][ T9196] BTRFS info (device loop0): using crc32c checksum algorithm [ 329.019932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 329.200388][ T12] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 329.313361][ T9196] BTRFS error (device loop0): failed to load root extent [ 329.323694][ T9196] BTRFS warning (device loop0): try to load backup roots slot 1 [ 329.333367][ T48] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 329.413811][ T9196] BTRFS warning (device loop0): couldn't read tree root [ 329.422426][ T9196] BTRFS warning (device loop0): try to load backup roots slot 2 [ 329.430653][ T1170] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 329.479976][ T9196] BTRFS warning (device loop0): couldn't read tree root [ 329.487004][ T9196] BTRFS warning (device loop0): try to load backup roots slot 3 [ 329.515072][ T9196] BTRFS info (device loop0): rebuilding free space tree [ 329.566326][ T9196] BTRFS info (device loop0): checking UUID tree [ 329.578414][ T9196] BTRFS info (device loop0): setting nodatasum [ 329.585056][ T9196] BTRFS info (device loop0): setting nodatacow [ 329.591270][ T9196] BTRFS info (device loop0): enabling ssd optimizations [ 329.598210][ T9196] BTRFS info (device loop0): turning on async discard [ 329.605081][ T9196] BTRFS info (device loop0): enabling free space tree [ 329.611872][ T9196] BTRFS info (device loop0): force clearing of disk cache [ 329.618995][ T9196] BTRFS info (device loop0): enabling auto defrag [ 329.625493][ T9196] BTRFS info (device loop0): trying to use backup root at mount time [ 329.752702][ T9219] netlink: 32 bytes leftover after parsing attributes in process `syz.4.845'. [ 329.763060][ T30] audit: type=1800 audit(1784769062.433:79): pid=9196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.841" name="file1" dev="loop0" ino=257 res=0 errno=0 [ 329.804856][ T9220] loop7: detected capacity change from 0 to 512 [ 329.983866][ T30] audit: type=1804 audit(1784769062.463:80): pid=9196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.841" name="/newroot/135/file0/file1" dev="loop0" ino=257 res=1 errno=0 [ 330.041419][ T9220] EXT4-fs (loop7): 1 truncate cleaned up [ 330.102500][ T5626] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 330.151626][ T9220] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.172616][ T9227] gretap1: entered promiscuous mode [ 330.279880][ T10] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 330.336440][ T9228] netlink: 'syz.1.848': attribute type 10 has an invalid length. [ 330.379483][ T9228] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 330.441362][ T9234] loop4: detected capacity change from 0 to 512 [ 330.568763][ T9234] EXT4-fs (loop4): orphan cleanup on readonly fs [ 330.623266][ T9234] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.850: EA inode hash validation failed [ 330.640760][ T9234] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 330.661846][ T9234] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.850: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 330.677231][ T9234] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 330.680340][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 330.695883][ C1] EXT4-fs (loop4): initial error at time 1784769063: ext4_xattr_inode_update_ref:1037: inode 11 [ 330.706358][ C1] EXT4-fs (loop4): last error at time 1784769063: ext4_xattr_inode_update_ref:1037: inode 11 [ 330.885877][ T9234] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.4.850: ea_inode dec ref err=-117 [ 330.901853][ T9234] EXT4-fs (loop4): 1 orphan inode deleted [ 330.999561][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 241, changing to 4 [ 331.147884][ T9234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 331.569424][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 213, changing to 4 [ 331.603457][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1056, setting to 1023 [ 331.710843][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 331.773285][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.776077][ T7537] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.812653][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.866181][ T10] usb 4-1: Product: syz [ 331.879947][ T10] usb 4-1: Manufacturer: syz [ 331.909555][ T10] usb 4-1: SerialNumber: syz [ 331.993314][ T5973] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 332.160072][ T5973] usb 1-1: Using ep0 maxpacket: 16 [ 332.197539][ T5973] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 332.214808][ T5973] usb 1-1: config 0 has no interface number 0 [ 332.224483][ T5973] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 332.245339][ T5973] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 332.317264][ T5973] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 332.334965][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.353782][ T5973] usb 1-1: Product: syz [ 332.372894][ T10] snd-ua101 4-1:1.1: sample format descriptor not found [ 332.391886][ T10] snd-ua101 4-1:1.0: invalid num_altsetting [ 332.396494][ T5973] usb 1-1: Manufacturer: syz [ 332.423926][ T5973] usb 1-1: SerialNumber: syz [ 332.474212][ T5973] usb 1-1: config 0 descriptor?? [ 332.485868][ T10] usb 4-1: USB disconnect, device number 11 [ 332.487076][ T9238] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 332.505633][ T9238] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 332.788125][ T9250] xt_hashlimit: size too large, truncated to 1048576 [ 332.795473][ T9238] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 332.870211][ T9238] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 333.105293][ T5973] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 333.117638][ T9258] loop3: detected capacity change from 0 to 128 [ 333.153387][ T9258] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 333.188566][ T9258] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.615005][ T9274] netlink: 20 bytes leftover after parsing attributes in process `syz.1.862'. [ 334.164194][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 334.221260][ T5973] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -32 [ 334.494665][ T5973] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffe0 [ 334.505744][ T5973] asix 1-1:0.34: probe with driver asix failed with error -32 [ 334.559078][ T5973] usb 1-1: USB disconnect, device number 20 [ 335.832372][ T9291] loop3: detected capacity change from 0 to 128 [ 335.866656][ T30] audit: type=1800 audit(1784769068.533:81): pid=9291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.867" name="file1" dev="loop3" ino=1048662 res=0 errno=0 [ 336.040834][ T9295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 336.104656][ T9297] loop4: detected capacity change from 0 to 2048 [ 336.160490][ T9299] binder: 9298:9299 ioctl c0306201 0 returned -14 [ 336.182349][ T9293] bridge0: port 3(vlan2) entered blocking state [ 336.189979][ T9293] bridge0: port 3(vlan2) entered forwarding state [ 336.252978][ T9297] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry where CRC length (2) does not match entry length (24) [ 336.305818][ T9306] loop7: detected capacity change from 0 to 2048 [ 336.322789][ T9306] EXT4-fs: quotafile must be on filesystem root [ 336.439838][ T9310] binder: 9308:9310 ioctl c0306201 200000000180 returned -22 [ 337.247166][ T9331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.569486][ T801] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 337.607238][ T9325] loop0: detected capacity change from 0 to 32768 [ 337.750064][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 337.762669][ T801] usb 8-1: Using ep0 maxpacket: 32 [ 337.776727][ T801] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 337.789814][ T801] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 337.806993][ T9325] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 337.817724][ T801] usb 8-1: config 0 interface 0 has no altsetting 0 [ 337.836084][ T801] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 337.848324][ T801] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.857576][ T801] usb 8-1: Product: syz [ 337.863364][ T801] usb 8-1: Manufacturer: syz [ 337.868204][ T801] usb 8-1: SerialNumber: syz [ 337.876892][ T801] usb 8-1: config 0 descriptor?? [ 337.932091][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 337.982751][ T10] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 338.001471][ T9327] loop1: detected capacity change from 0 to 131072 [ 338.011733][ T9327] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0) [ 338.021218][ T9327] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 338.028454][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.052528][ T9327] F2FS-fs (loop1): invalid crc value [ 338.082836][ T10] usb 3-1: Product: syz [ 338.130066][ T10] usb 3-1: Manufacturer: syz [ 338.150813][ T9327] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 338.168508][ T9327] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 338.168927][ T10] usb 3-1: SerialNumber: syz [ 338.175644][ T9327] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 338.195112][ T9327] F2FS-fs (loop1): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix. [ 338.213371][ T9327] F2FS-fs (loop1): checksum invalid, nid = 8, ino_of_node = 8, 2596626b vs. 43efc4 [ 338.256474][ T10] usb 3-1: config 0 descriptor?? [ 338.297950][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 338.341737][ T801] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 338.380115][ T5626] ocfs2: Unmounting device (7,0) on (node local) [ 339.309276][ T5352] usb 8-1: USB disconnect, device number 5 [ 339.473995][ T9355] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 339.537105][ T9355] block device autoloading is deprecated and will be removed. [ 340.133876][ T10] gspca_ov534_9: reg_r err -71 [ 340.227117][ T30] audit: type=1326 audit(1784769072.893:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9366 comm="syz.7.893" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93c159de99 code=0x0 [ 340.439981][ T10] gspca_ov534_9: Unknown sensor 0000 [ 340.440077][ T10] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 340.463906][ T9372] loop4: detected capacity change from 0 to 128 [ 340.516001][ T10] usb 3-1: USB disconnect, device number 14 [ 340.534166][ T9372] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 340.633065][ T9372] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 340.734792][ T9372] EXT4-fs (loop4): shut down requested (2) [ 340.834893][ T5621] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 341.091139][ T9383] loop4: detected capacity change from 0 to 512 [ 341.176041][ T9383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.182262][ T9381] input: syz1 as /devices/virtual/input/input18 [ 341.248434][ T9393] vivid-000: disconnect [ 341.305918][ T9383] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.424377][ T9398] loop2: detected capacity change from 0 to 512 [ 341.579023][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.628850][ T9398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.734508][ T9398] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.100955][ T5629] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 342.313171][ T5629] usb 8-1: config 0 has an invalid interface number: 120 but max is 0 [ 342.343637][ T5629] usb 8-1: config 0 has no interface number 0 [ 342.375437][ T5629] usb 8-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 342.412630][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.415686][ T5629] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 342.451460][ T9386] vivid-000: reconnect [ 342.478006][ T5629] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 342.537449][ T5629] usb 8-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 342.572118][ T5629] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.612060][ T5629] usb 8-1: config 0 descriptor?? [ 342.644359][ T5629] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.120/input/input19 [ 342.992783][ T5629] usb 8-1: USB disconnect, device number 6 [ 343.680620][ T9416] loop0: detected capacity change from 0 to 131072 [ 343.698850][ T9416] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 343.706706][ T9416] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 343.723205][ T9416] F2FS-fs (loop0): invalid crc value [ 343.868249][ T9434] xt_hashlimit: size too large, truncated to 1048576 [ 343.875982][ T9416] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 343.899975][ T9416] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 343.908397][ T9416] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 345.204620][ T9446] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 345.492713][ T9451] xt_hashlimit: size too large, truncated to 1048576 [ 345.855920][ T9457] loop7: detected capacity change from 0 to 4096 [ 345.934279][ T9457] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 345.981132][ T9442] syz.3.915 (9442): drop_caches: 2 [ 346.034047][ T9457] ntfs3(loop7): Failed to load $Extend (-22). [ 346.067326][ T9457] ntfs3(loop7): Failed to initialize $Extend. [ 346.810195][ T1219] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 346.823792][ T9472] loop1: detected capacity change from 0 to 512 [ 346.903769][ T9472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.971700][ T9472] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.989470][ T1219] usb 8-1: Using ep0 maxpacket: 32 [ 346.996792][ T1219] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.007979][ T1219] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.021478][ T1219] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 347.099206][ T1219] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.147526][ T1219] usb 8-1: config 0 descriptor?? [ 347.200881][ T1219] hub 8-1:0.0: USB hub found [ 347.251173][ T9472] loop1: detected capacity change from 512 to 64 [ 347.285239][ T9484] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Out of memory [ 347.350297][ T9484] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #15: comm syz.1.928: mark_inode_dirty error [ 347.373908][ T9486] loop2: detected capacity change from 0 to 128 [ 347.398356][ T1219] hub 8-1:0.0: 1 port detected [ 347.400660][ T9484] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Out of memory [ 347.437329][ T9486] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 347.445607][ T9484] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.928: mark_inode_dirty error [ 347.494135][ T9484] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Out of memory [ 347.513281][ T9486] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 347.559785][ T9484] EXT4-fs error (device loop1): ext4_alloc_file_blocks:4646: inode #15: comm syz.1.928: mark_inode_dirty error [ 347.765711][ T5622] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Out of memory [ 347.827799][ T5622] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #2: comm syz-executor: mark_inode_dirty error [ 348.021747][ T1219] hub 8-1:0.0: activate --> -90 [ 348.052565][ T9493] loop2: detected capacity change from 0 to 512 [ 348.062359][ T9493] EXT4-fs: Ignoring removed mblk_io_submit option [ 348.088200][ T9493] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 348.131456][ T7842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.143320][ T9493] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.932: attempt to clear invalid blocks 2 len 1 [ 348.172467][ T9496] loop4: detected capacity change from 0 to 64 [ 348.215036][ T9493] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 348.220383][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 348.235985][ C1] EXT4-fs (loop2): initial error at time 1784769080: ext4_clear_blocks:876: inode 13 [ 348.243760][ T9493] EXT4-fs (loop2): Remounting filesystem read-only [ 348.245465][ C1] EXT4-fs (loop2): last error at time 1784769080: ext4_clear_blocks:876: inode 13 [ 348.294856][ T9496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.933'. [ 348.330280][ T9493] EXT4-fs (loop2): 1 truncate cleaned up [ 348.355541][ T9493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.449846][ T5629] usb 8-1: USB disconnect, device number 7 [ 348.455947][ T1219] usb 8-1-port1: config error [ 348.840257][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.101843][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 349.124567][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 349.138696][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 349.152157][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 349.163016][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.364691][ T9523] binder: 9521:9523 ioctl c0306201 200000000680 returned -14 [ 349.859080][ T9540] loop7: detected capacity change from 0 to 4096 [ 349.941386][ T9540] ntfs3(loop7): Failed to load $Extend (-22). [ 349.975657][ T9540] ntfs3(loop7): Failed to initialize $Extend. [ 350.763829][ T9547] tipc: Started in network mode [ 350.781370][ T9547] tipc: Node identity 4, cluster identity 4711 [ 350.803023][ T9547] tipc: Node number set to 4 [ 351.107755][ T9512] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.131136][ T9512] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.134782][ T9564] xt_l2tp: missing protocol rule (udp|l2tpip) [ 351.150912][ T9512] bridge_slave_0: entered allmulticast mode [ 351.159662][ T5640] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 351.161865][ T5627] Bluetooth: hci6: command 0x1003 tx timeout [ 351.199509][ T9512] bridge_slave_0: entered promiscuous mode [ 351.212532][ T9512] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.220325][ T9512] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.227522][ T9512] bridge_slave_1: entered allmulticast mode [ 351.236376][ T9512] bridge_slave_1: entered promiscuous mode [ 351.243651][ T5640] Bluetooth: hci0: command tx timeout [ 351.262382][ T5640] Bluetooth: hci4: unexpected event for opcode 0x0c13 [ 351.401701][ T9512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.425677][ T9512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.453343][ T9569] loop7: detected capacity change from 0 to 512 [ 351.482020][ T9569] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 351.537352][ T9569] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.956: bad orphan inode 131083 [ 351.596654][ T9512] team0: Port device team_slave_0 added [ 351.602480][ T9569] loop7: lost filesystem error report for type 5 error -117 [ 351.605907][ T9569] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.642454][ T9512] team0: Port device team_slave_1 added [ 351.651367][ T1219] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 351.747588][ T9512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.763474][ T9512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.793278][ T9512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.816297][ T30] audit: type=1800 audit(1784769084.483:83): pid=9579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.956" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 351.859405][ T1219] usb 1-1: Using ep0 maxpacket: 32 [ 351.865923][ T9512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.873853][ T9512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.901914][ T1219] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 351.912359][ T9512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.933814][ T1219] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 351.943001][ T1219] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 351.955991][ T1219] usb 1-1: Product: syz [ 351.969451][ T1219] usb 1-1: Manufacturer: syz [ 351.979522][ T1219] usb 1-1: SerialNumber: syz [ 351.996597][ T1219] usb 1-1: config 0 descriptor?? [ 352.013976][ T9567] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 352.071014][ T7537] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.222884][ T9512] hsr_slave_0: entered promiscuous mode [ 352.249904][ T9512] hsr_slave_1: entered promiscuous mode [ 352.278777][ T9512] debugfs: 'hsr0' already exists in 'hsr' [ 352.306056][ T9571] loop4: detected capacity change from 0 to 32768 [ 352.311390][ T9512] Cannot create hsr debugfs directory [ 352.373053][ T9571] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 352.504853][ T9571] XFS (loop4): Ending clean mount [ 352.697893][ T9600] netlink: 'syz.2.963': attribute type 39 has an invalid length. [ 352.722784][ T30] audit: type=1800 audit(1784769085.393:84): pid=9571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.957" name="file1" dev="loop4" ino=4428 res=0 errno=0 [ 353.342579][ T5640] Bluetooth: hci0: command tx timeout [ 353.677451][ T10] usb 1-1: USB disconnect, device number 21 [ 353.856607][ T5621] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 354.416778][ T9611] fuseblk: Unknown parameter 'fd0x0000000000000006' [ 354.522627][ T9611] loop7: detected capacity change from 0 to 1024 [ 354.796575][ T9611] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.051229][ T7537] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.247782][ T9616] Bluetooth: MGMT ver 1.23 [ 355.452034][ T9620] netlink: 12 bytes leftover after parsing attributes in process `syz.7.967'. [ 355.578241][ T5640] Bluetooth: hci0: command tx timeout [ 355.738693][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.970'. [ 355.925914][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802c0df000: rx timeout, send abort [ 356.081770][ T9620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.158377][ T9633] loop2: detected capacity change from 0 to 512 [ 356.225126][ T9633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.303502][ T9633] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.588926][ T9512] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 356.683335][ T9512] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 356.746293][ T9512] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 356.952575][ T9512] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 356.969847][ T9512] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 356.999081][ T9512] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 357.014574][ T9512] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 357.087211][ T9512] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 357.226981][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.317080][ T9657] binder: 9656:9657 ioctl c0306201 2000000004c0 returned -14 [ 357.639824][ T5640] Bluetooth: hci0: command tx timeout [ 358.234486][ T9512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.538294][ T9512] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.801120][ T9667] fuseblk: Unknown parameter 'fd0x0000000000000006' [ 358.915045][ T9667] loop4: detected capacity change from 0 to 1024 [ 359.254792][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.261964][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.278730][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.285918][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.350760][ T9667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.600561][ T9674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.980'. [ 359.636704][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.028497][ T9702] loop4: detected capacity change from 0 to 164 [ 361.159778][ T10] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 361.209396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 361.419701][ T9705] loop7: detected capacity change from 0 to 32768 [ 361.430173][ T9705] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.989 (9705) [ 361.450610][ T9705] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 361.460775][ T9705] BTRFS info (device loop7): using sha256 checksum algorithm [ 361.491569][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 361.503869][ T10] usb 1-1: config 3 has an invalid interface number: 161 but max is 0 [ 361.558625][ T9705] BTRFS info (device loop7): enabling ssd optimizations [ 361.565906][ T9705] BTRFS info (device loop7): turning on sync discard [ 361.572684][ T9705] BTRFS info (device loop7): enabling free space tree [ 361.579526][ T9705] BTRFS info (device loop7): use zlib compression, level 3 [ 361.593492][ T10] usb 1-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 361.832538][ T10] usb 1-1: config 3 has no interface number 0 [ 361.839356][ T10] usb 1-1: config 3 interface 161 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 361.850464][ T10] usb 1-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 361.861447][ T10] usb 1-1: config 3 interface 161 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 361.886228][ T10] usb 1-1: config 3 interface 161 has no altsetting 0 [ 361.894146][ T10] usb 1-1: language id specifier not provided by device, defaulting to English [ 361.920234][ T30] audit: type=1800 audit(1784769094.583:85): pid=9728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.989" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 361.976758][ T10] usb 1-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 361.992589][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.016216][ T10] usb 1-1: SerialNumber: Ǽ솮쑳뇥ê±Ý«á»ï…¯ç‰»ç¼‘뒽ⰾ⹡奮 [ 362.039910][ T9512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.301064][ T7537] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 362.788948][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.996'. [ 363.791581][ T10] option 1-1:3.161: GSM modem (1-port) converter detected [ 363.884495][ T10] usb 1-1: USB disconnect, device number 22 [ 363.964065][ T10] option 1-1:3.161: device disconnected [ 364.799505][ T9512] veth0_vlan: entered promiscuous mode [ 364.953309][ T9512] veth1_vlan: entered promiscuous mode [ 365.629251][ T9772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1000'. [ 365.696249][ T9512] veth0_macvtap: entered promiscuous mode [ 365.729481][ T9772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1000'. [ 365.745168][ T9512] veth1_macvtap: entered promiscuous mode [ 365.880883][ T9512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.971666][ T9512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.043643][ T3301] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.081200][ T3301] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.110962][ T3301] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.357871][ T3301] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.763406][ T9782] orangefs_mount: mount request failed with -4 [ 367.492219][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.515690][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.691622][ T9803] loop4: detected capacity change from 0 to 8192 [ 368.414999][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.472118][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.509961][ T5753] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 368.742697][ T5753] usb 4-1: Using ep0 maxpacket: 16 [ 368.752075][ T5753] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 368.766339][ T5753] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 368.803952][ T9823] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1016'. [ 368.977248][ T5753] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 368.986554][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.996071][ T5753] usb 4-1: Product: syz [ 369.001122][ T5753] usb 4-1: Manufacturer: syz [ 369.005787][ T5753] usb 4-1: SerialNumber: syz [ 369.022919][ T5753] usb 4-1: config 0 descriptor?? [ 369.034611][ T5753] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 369.051002][ T5753] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 370.065285][ T9829] bond2: entered promiscuous mode [ 370.084054][ T9829] bond2: entered allmulticast mode [ 370.404920][ T5753] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 370.417475][ T5753] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 371.203112][ T5753] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 371.234928][ T5753] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 371.394496][ T9852] xt_l2tp: missing protocol rule (udp|l2tpip) [ 371.824813][ T5753] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 371.858903][ T5753] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 371.884688][ T5753] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 371.908476][ T5753] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 371.944999][ T5753] usb 4-1: USB disconnect, device number 12 [ 371.993221][ T9857] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1025'. [ 373.995228][ T9873] syzkaller0: entered promiscuous mode [ 374.132300][ T9873] syzkaller0: entered allmulticast mode [ 376.221584][ T9907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1040'. [ 376.481272][ T9907] 8021q: adding VLAN 0 to HW filter on device bond2 [ 376.575398][ T9913] macvlan2: entered promiscuous mode [ 376.597030][ T9913] macvlan2: entered allmulticast mode [ 376.624153][ T9913] bond2: entered promiscuous mode [ 376.646778][ T9913] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 376.741775][ T9913] bond2: left promiscuous mode [ 376.905221][ T9919] loop3: detected capacity change from 0 to 8192 [ 377.323714][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.330331][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.780205][ T9940] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 379.165564][ T9960] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 379.506085][ T9978] sch_fq: defrate 4294967295 ignored. [ 379.595528][ T9984] loop0: detected capacity change from 0 to 512 [ 379.724519][ T9984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.761267][ T9975] syzkaller0: entered promiscuous mode [ 379.766831][ T9975] syzkaller0: entered allmulticast mode [ 379.831908][ T9994] netlink: 'syz.2.1053': attribute type 4 has an invalid length. [ 379.868116][ T9984] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.876630][ T9994] netlink: 'syz.2.1053': attribute type 4 has an invalid length. [ 381.667576][T10003] loop7: detected capacity change from 0 to 40427 [ 381.696208][T10003] F2FS-fs (loop7): Wrong SSA boundary, start(3584) end(4096) blocks(3072) [ 381.707725][T10003] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 381.723774][T10003] F2FS-fs (loop7): build fault injection rate: 771 [ 381.755758][T10003] F2FS-fs (loop7): invalid crc value [ 381.851344][T10003] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 381.887751][T10003] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 381.895848][T10003] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 382.051068][ T7537] syz-executor: attempt to access beyond end of device [ 382.051068][ T7537] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 382.128696][ T7537] CPU: 1 UID: 0 PID: 7537 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 382.128736][ T7537] Tainted: [L]=SOFTLOCKUP [ 382.128744][ T7537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 382.128759][ T7537] Call Trace: [ 382.128768][ T7537] [ 382.128778][ T7537] dump_stack_lvl+0xe8/0x150 [ 382.128820][ T7537] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 382.128856][ T7537] f2fs_write_end_io+0x124b/0x1710 [ 382.128915][ T7537] __submit_merged_bio+0x258/0x6a0 [ 382.128943][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.128972][ T7537] ? rcu_is_watching+0x15/0xb0 [ 382.129017][ T7537] __submit_merged_write_cond+0x3c9/0x4e0 [ 382.129057][ T7537] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 382.129103][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.129141][ T7537] f2fs_write_data_pages+0x2a27/0x36f0 [ 382.129174][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.129207][ T7537] ? check_path+0x21/0x40 [ 382.129298][ T7537] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 382.129332][ T7537] ? is_bpf_text_address+0x26/0x2b0 [ 382.129382][ T7537] ? arch_stack_walk+0xfb/0x150 [ 382.129439][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.129467][ T7537] ? add_lock_to_list+0xc7/0x100 [ 382.129508][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.129536][ T7537] ? __lock_acquire+0x13e8/0x2cf0 [ 382.129598][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.129624][ T7537] ? do_raw_spin_lock+0x12b/0x2f0 [ 382.129657][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.129689][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.129716][ T7537] ? do_raw_spin_unlock+0xf5/0x210 [ 382.129744][ T7537] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 382.129779][ T7537] do_writepages+0x338/0x560 [ 382.129816][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.129847][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.129880][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.129907][ T7537] ? do_raw_spin_unlock+0xf5/0x210 [ 382.129939][ T7537] filemap_fdatawrite+0x1e9/0x2f0 [ 382.129979][ T7537] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 382.130055][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.130086][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.130119][ T7537] ? do_raw_spin_unlock+0xf5/0x210 [ 382.130151][ T7537] f2fs_sync_dirty_inodes+0x30e/0x830 [ 382.130203][ T7537] f2fs_write_checkpoint+0xa3d/0x2710 [ 382.130282][ T7537] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 382.130363][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.130391][ T7537] ? kfree+0x1c5/0x640 [ 382.130416][ T7537] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 382.130465][ T7537] kill_f2fs_super+0x2f6/0x700 [ 382.130507][ T7537] ? __pfx_kill_f2fs_super+0x10/0x10 [ 382.130555][ T7537] ? call_rcu+0x64b/0x8b0 [ 382.130577][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.130604][ T7537] ? lockdep_hardirqs_on+0x7a/0x110 [ 382.130628][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.130670][ T7537] deactivate_locked_super+0xbc/0x130 [ 382.130708][ T7537] cleanup_mnt+0x3d3/0x460 [ 382.130751][ T7537] task_work_run+0x1d9/0x270 [ 382.130792][ T7537] ? __pfx_task_work_run+0x10/0x10 [ 382.130841][ T7537] exit_to_user_mode_loop+0x1fa/0x730 [ 382.130875][ T7537] ? rcu_is_watching+0x15/0xb0 [ 382.130913][ T7537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.130941][ T7537] do_syscall_64+0x353/0x580 [ 382.130964][ T7537] ? trace_irq_disable+0x3b/0x140 [ 382.131001][ T7537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.131026][ T7537] RIP: 0033:0x7f93c159f0d7 [ 382.131048][ T7537] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 382.131068][ T7537] RSP: 002b:00007ffcdcf0e1c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 382.131093][ T7537] RAX: 0000000000000000 RBX: 00007f93c163330a RCX: 00007f93c159f0d7 [ 382.131110][ T7537] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdcf0e280 [ 382.131125][ T7537] RBP: 00007ffcdcf0e280 R08: 00007ffcdcf0f280 R09: 00000000ffffffff [ 382.131142][ T7537] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdcf0f310 [ 382.131157][ T7537] R13: 00007f93c163330a R14: 000000000005d5fc R15: 00007ffcdcf0f350 [ 382.131195][ T7537] [ 382.604614][ T7537] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 382.695396][ T5639] loop7: lost filesystem error report for type 5 error -108 [ 382.736691][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.254217][T10054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1064'. [ 391.033273][T10056] nvme_fabrics: missing parameter 'transport=%s' [ 391.040013][T10056] nvme_fabrics: missing parameter 'nqn=%s' [ 392.592244][T10070] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 393.287770][T10076] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 393.420967][ T5753] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 393.656849][T10078] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1070'. [ 393.679835][ T5753] usb 3-1: Using ep0 maxpacket: 32 [ 393.687044][ T5753] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 393.705298][ T5753] usb 3-1: config 0 has no interface number 0 [ 393.733475][ T5753] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 393.746562][ T5753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.766348][ T5753] usb 3-1: Product: syz [ 393.799115][ T5753] usb 3-1: Manufacturer: syz [ 393.847822][ T5753] usb 3-1: SerialNumber: syz [ 393.858042][T10078] team0 (unregistering): Port device team_slave_0 removed [ 394.238993][T10078] team0 (unregistering): Port device team_slave_1 removed [ 394.397942][ T5753] usb 3-1: config 0 descriptor?? [ 394.481142][T10085] loop3: detected capacity change from 0 to 128 [ 394.577209][T10085] EXT4-fs: Ignoring removed nobh option [ 394.950312][T10085] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 394.983278][T10085] ext4 filesystem being mounted at /201/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 395.071121][ T5753] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 395.082040][ T5753] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 396.294929][ T5624] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 399.837817][ T5753] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 400.802563][T10112] loop8: detected capacity change from 0 to 2048 [ 402.027094][ T5753] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 402.077388][T10112] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.157558][ T5753] usb 3-1: USB disconnect, device number 15 [ 403.178180][ T9512] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.808093][T10153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1090'. [ 407.312723][T10177] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 407.350398][T10177] syzkaller0: entered promiscuous mode [ 407.384600][T10177] syzkaller0: entered allmulticast mode [ 407.433011][T10178] tipc: Started in network mode [ 407.462124][T10178] tipc: Node identity 3e75800a9b81, cluster identity 4711 [ 407.542659][T10178] tipc: Enabled bearer , priority 0 [ 409.811330][T10176] tipc: Resetting bearer [ 410.575367][T10194] hub 8-0:1.0: USB hub found [ 410.580328][T10194] hub 8-0:1.0: 1 port detected [ 410.660688][T10176] tipc: Disabling bearer [ 410.679708][T10197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1098'. [ 411.692944][T10199] loop2: detected capacity change from 0 to 2048 [ 412.066804][T10199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.158397][T10216] No such timeout policy "syz1" [ 413.871999][ T5629] tipc: Node number set to 2784264202 [ 414.815858][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.089405][ T5776] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 417.022091][T10245] fuse: Bad value for 'fd' [ 417.147710][T10242] binder_alloc: 10234: binder_alloc_buf size 12224 failed, no address space [ 418.179622][T10242] binder_alloc: allocated: 1024 (num: 1 largest: 1024), free: 11264 (num: 1 largest: 11264) [ 418.293805][ T5776] usb 8-1: device descriptor read/all, error -71 [ 418.564878][T10258] loop0: detected capacity change from 0 to 512 [ 418.651953][T10258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.743148][T10258] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.394558][T10236] syz.2.1108 (10236): drop_caches: 2 [ 419.408264][T10272] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 91 vs 96 free clusters [ 421.456821][T10276] loop7: detected capacity change from 0 to 1024 [ 422.040413][ T5640] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 422.489759][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.562870][T10283] loop2: detected capacity change from 0 to 2048 [ 422.714566][T10283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.119353][ T5640] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 426.132747][ T5640] Bluetooth: hci2: Injecting HCI hardware error event [ 426.145103][ T5627] Bluetooth: hci2: hardware error 0x00 [ 428.180886][T10328] loop0: detected capacity change from 0 to 1024 [ 428.217239][ T5627] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 429.108230][T10331] loop0: detected capacity change from 0 to 16 [ 429.149159][T10331] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 432.630028][T10344] hub 8-0:1.0: USB hub found [ 432.636092][T10344] hub 8-0:1.0: 1 port detected [ 434.387367][ T5640] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 434.398021][ T5640] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 434.416137][ T5640] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 434.429958][ T5640] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 434.441103][ T5640] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 436.519404][ T5640] Bluetooth: hci6: command tx timeout [ 436.842330][ T5627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 436.856841][ T5627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 436.866961][ T5627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 436.877625][ T5627] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 436.886646][ T5627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 438.309767][ T5627] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 438.325194][ T5627] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 438.357380][ T5627] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 438.370326][ T5627] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 438.390080][ T5627] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 438.524408][ T5627] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 438.538955][ T5627] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 438.554649][ T5627] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 438.574064][ T5627] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 438.587704][ T5627] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 438.599850][ T5640] Bluetooth: hci6: command tx timeout [ 438.765241][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.773579][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.798577][T10290] tipc: Started in network mode [ 438.809746][T10290] tipc: Node identity f66c5c721286, cluster identity 4711 [ 438.833700][T10290] tipc: Enabled bearer , priority 0 [ 438.863609][T10295] syzkaller0: entered promiscuous mode [ 438.901563][T10295] syzkaller0: entered allmulticast mode [ 438.919383][ T5627] Bluetooth: hci7: command tx timeout [ 439.034882][T10281] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.323609][T10383] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1141'. [ 439.954374][ T5776] tipc: Node number set to 3840564338 [ 440.440273][ T5627] Bluetooth: hci8: command tx timeout [ 440.679394][ T5627] Bluetooth: hci9: command tx timeout [ 440.681177][ T5643] Bluetooth: hci6: command tx timeout [ 441.000174][ T5640] Bluetooth: hci7: command tx timeout [ 441.532580][T10259] bond1: (slave syz_tun): Removing an active aggregator [ 441.542638][ T6008] bond1: Warning: Found an uninitialized port [ 441.588144][T10259] bond1: (slave syz_tun): Releasing backup interface [ 442.636911][ T5640] Bluetooth: hci8: command tx timeout [ 442.759593][ T5640] Bluetooth: hci9: command tx timeout [ 442.767049][ T5643] Bluetooth: hci6: command tx timeout [ 443.008092][T10295] tipc: Resetting bearer [ 443.056447][T10295] tipc: Disabling bearer [ 443.079561][ T5640] Bluetooth: hci7: command tx timeout [ 443.159355][ T1219] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 443.196242][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.312991][ T1219] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 443.340898][ T1219] usb 4-1: config 1 has no interface number 0 [ 443.347118][ T1219] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 443.371910][ T1219] usb 4-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 443.388067][ T1219] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 443.397500][ T1219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.416444][ T1219] usb 4-1: Product: syz [ 443.422133][ T1219] usb 4-1: Manufacturer: syz [ 443.426857][ T1219] usb 4-1: SerialNumber: syz [ 443.442628][T10417] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 443.453802][T10417] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 443.468891][ T1219] usb 4-1: Expected 3 endpoints, found: 2 [ 443.532220][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.690250][ T10] usb 4-1: USB disconnect, device number 13 [ 443.838150][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.002035][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.626039][T10370] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.649461][T10370] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.665646][T10370] bridge_slave_0: entered allmulticast mode [ 444.679676][ T5640] Bluetooth: hci8: command tx timeout [ 444.705848][T10370] bridge_slave_0: entered promiscuous mode [ 444.784261][T10431] syzkaller0: entered promiscuous mode [ 444.793690][T10431] syzkaller0: entered allmulticast mode [ 444.810725][T10433] tipc: Started in network mode [ 444.820971][T10433] tipc: Node identity ca06f84d8fc2, cluster identity 4711 [ 444.839688][ T5640] Bluetooth: hci9: command tx timeout [ 444.839710][T10433] tipc: Enabled bearer , priority 0 [ 444.865900][T10370] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.874813][T10370] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.883960][T10370] bridge_slave_1: entered allmulticast mode [ 444.895429][T10370] bridge_slave_1: entered promiscuous mode [ 445.115546][T10434] tipc: Resetting bearer [ 445.151962][T10430] tipc: Resetting bearer [ 445.159902][ T5640] Bluetooth: hci7: command tx timeout [ 445.192336][T10430] tipc: Disabling bearer [ 445.324249][T10370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.453711][T10450] hub 8-0:1.0: USB hub found [ 445.458758][T10450] hub 8-0:1.0: 1 port detected [ 445.845198][T10370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.092705][T10454] loop3: detected capacity change from 0 to 512 [ 446.176939][T10454] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 446.193156][T10454] EXT4-fs error (device loop3): ext4_init_orphan_info:583: inode #15: comm syz.3.1147: iget: bad extra_isize 2080 (inode size 256) [ 446.267895][T10454] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 446.269269][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 446.284856][ C0] EXT4-fs (loop3): initial error at time 1784769177: ext4_init_orphan_info:583: inode 15 [ 446.294695][ C0] EXT4-fs (loop3): last error at time 1784769177: ext4_init_orphan_info:583: inode 15 [ 446.311585][T10454] EXT4-fs (loop3): get orphan inode failed [ 446.325075][T10360] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.343003][T10454] EXT4-fs (loop3): mount failed [ 446.372410][T10360] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.392447][T10360] bridge_slave_0: entered allmulticast mode [ 446.415020][T10360] bridge_slave_0: entered promiscuous mode [ 446.553399][ T36] bridge_slave_1: left allmulticast mode [ 446.559334][ T36] bridge_slave_1: left promiscuous mode [ 446.566777][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.578515][ T36] bridge_slave_0: left allmulticast mode [ 446.585201][ T36] bridge_slave_0: left promiscuous mode [ 446.592002][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.759591][ T5640] Bluetooth: hci8: command tx timeout [ 446.852791][T10471] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1150'. [ 446.919340][ T5640] Bluetooth: hci9: command tx timeout [ 447.104243][T10470] loop3: detected capacity change from 0 to 4096 [ 447.143628][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.170640][T10470] ntfs3(loop3): Failed to load $Extend (-22). [ 447.177499][T10470] ntfs3(loop3): Failed to initialize $Extend. [ 447.283608][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.403779][ T36] bond0 (unregistering): Released all slaves [ 447.958640][T10476] xt_hashlimit: max too large, truncated to 1048576 [ 447.970697][T10476] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 448.641652][T10360] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.648895][T10360] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.669987][T10360] bridge_slave_1: entered allmulticast mode [ 448.692924][T10360] bridge_slave_1: entered promiscuous mode [ 448.735222][T10370] team0: Port device team_slave_0 added [ 448.754560][T10370] team0: Port device team_slave_1 added [ 449.036882][T10487] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1154'. [ 449.429007][T10367] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.453995][T10367] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.504649][T10367] bridge_slave_0: entered allmulticast mode [ 449.626062][T10367] bridge_slave_0: entered promiscuous mode [ 449.711455][T10367] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.736926][T10367] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.776932][T10367] bridge_slave_1: entered allmulticast mode [ 449.853913][T10367] bridge_slave_1: entered promiscuous mode [ 450.662650][ T36] tipc: Left network mode [ 451.033619][T10360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.044464][T10485] syzkaller0: entered promiscuous mode [ 451.063170][T10485] syzkaller0: entered allmulticast mode [ 451.751038][T10360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.942864][T10367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.981616][T10370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.991642][T10370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.079398][T10370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.103521][T10502] binder: 10501:10502 ioctl c0306201 0 returned -14 [ 452.128004][T10370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.165682][T10370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.193549][T10370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.313812][T10507] hub 8-0:1.0: USB hub found [ 452.318738][T10507] hub 8-0:1.0: 1 port detected [ 452.726492][T10367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.808479][T10360] team0: Port device team_slave_0 added [ 452.865303][T10350] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.877854][T10350] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.885416][T10350] bridge_slave_0: entered allmulticast mode [ 452.893597][T10350] bridge_slave_0: entered promiscuous mode [ 452.904002][T10360] team0: Port device team_slave_1 added [ 452.966999][T10350] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.976485][T10350] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.989137][T10350] bridge_slave_1: entered allmulticast mode [ 452.997761][T10350] bridge_slave_1: entered promiscuous mode [ 453.114104][T10367] team0: Port device team_slave_0 added [ 453.143096][T10367] team0: Port device team_slave_1 added [ 453.234063][ T36] hsr_slave_0: left promiscuous mode [ 453.259880][ T36] hsr_slave_1: left promiscuous mode [ 453.279122][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.309070][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.344354][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.383191][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.415789][ T36] veth1_macvtap: left promiscuous mode [ 453.421615][ T36] veth0_macvtap: left promiscuous mode [ 453.427497][ T36] veth1_vlan: left promiscuous mode [ 453.439673][ T36] veth0_vlan: left promiscuous mode [ 454.880298][T10360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.887295][T10360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.916935][T10360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.966096][T10370] hsr_slave_0: entered promiscuous mode [ 454.972710][T10370] hsr_slave_1: entered promiscuous mode [ 454.978985][T10370] debugfs: 'hsr0' already exists in 'hsr' [ 454.985075][T10370] Cannot create hsr debugfs directory [ 454.998193][ T5281] 8021q: adding VLAN 0 to HW filter on device eth9 [ 455.044036][T10350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.055686][T10360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.070170][T10360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.109695][T10360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.145380][T10367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.153616][T10367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.180523][T10367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.189654][T10530] netlink: 'syz.3.1159': attribute type 2 has an invalid length. [ 455.196584][T10367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.205961][T10367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.236391][T10367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.241823][T10530] netlink: 'syz.3.1159': attribute type 2 has an invalid length. [ 455.253789][T10350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.464030][T10350] team0: Port device team_slave_0 added [ 455.484056][T10360] hsr_slave_0: entered promiscuous mode [ 455.497077][T10360] hsr_slave_1: entered promiscuous mode [ 455.504496][T10360] debugfs: 'hsr0' already exists in 'hsr' [ 455.510352][T10360] Cannot create hsr debugfs directory [ 455.555515][T10350] team0: Port device team_slave_1 added [ 455.613258][T10367] hsr_slave_0: entered promiscuous mode [ 455.622516][T10367] hsr_slave_1: entered promiscuous mode [ 455.628983][T10367] debugfs: 'hsr0' already exists in 'hsr' [ 455.636152][T10367] Cannot create hsr debugfs directory [ 455.739123][T10350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.746605][T10350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.774899][T10350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.859690][T10350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.868939][T10350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.898599][T10350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.052842][ T36] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.637781][ T30] audit: type=1326 audit(1784769188.190:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.3.1160" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24f859de99 code=0x0 [ 457.973304][ T5281] 8021q: adding VLAN 0 to HW filter on device eth10 [ 458.360617][T10370] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.407106][T10557] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 458.980355][T10350] hsr_slave_0: entered promiscuous mode [ 459.033267][T10350] hsr_slave_1: entered promiscuous mode [ 459.084479][T10350] debugfs: 'hsr0' already exists in 'hsr' [ 459.289783][T10350] Cannot create hsr debugfs directory [ 459.411730][T10565] usb usb8: usbfs: process 10565 (syz.3.1163) did not claim interface 0 before use [ 459.435286][T10565] loop3: detected capacity change from 0 to 16 [ 460.000737][T10565] erofs (device loop3): mounted with root inode @ nid 36. [ 460.027586][T10564] erofs (device loop3): readahead error at folio 2 @ nid 89 [ 460.035428][T10564] erofs (device loop3): read error -117 @ 2 of nid 89 [ 460.042603][ T30] audit: type=1800 audit(1784769191.710:87): pid=10564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1163" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 461.387430][T10570] xt_TPROXY: Can be used only with -p tcp or -p udp [ 461.911448][T10370] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.050839][T10576] hub 8-0:1.0: USB hub found [ 462.055793][T10576] hub 8-0:1.0: 1 port detected [ 462.065209][ T36] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.495440][T10370] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.539977][ T36] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.645974][ T36] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.745109][T10370] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.246159][ T36] bridge_slave_1: left allmulticast mode [ 464.274675][ T36] bridge_slave_1: left promiscuous mode [ 464.295341][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.368927][T10599] binder: 10597:10599 ioctl c0306201 200000000240 returned -11 [ 464.683165][ T36] bridge_slave_0: left allmulticast mode [ 464.776866][ T36] bridge_slave_0: left promiscuous mode [ 465.323849][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.001616][T10610] netlink: 23 bytes leftover after parsing attributes in process `syz.0.1170'. [ 466.429035][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.471258][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.508101][ T36] bond0 (unregistering): Released all slaves [ 466.775209][ T5281] 8021q: adding VLAN 0 to HW filter on device eth11 [ 467.569466][T10370] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 467.604136][T10370] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 467.620289][T10370] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 467.674728][T10370] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 467.708712][T10614] loop0: detected capacity change from 0 to 512 [ 467.726087][T10370] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 467.782212][T10370] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 467.803640][T10614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.852057][ T36] tipc: Left network mode [ 467.870514][T10614] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.690813][ T5640] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 468.854825][T10621] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 91 vs 96 free clusters [ 469.425848][T10623] loop3: detected capacity change from 0 to 512 [ 469.462049][T10623] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.1173: missing EA_INODE flag [ 469.530107][T10623] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 469.536393][T10623] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1173: error while reading EA inode 12 err=-117 [ 469.545653][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 469.545676][ C0] EXT4-fs (loop3): initial error at time 1784769201: ext4_xattr_inode_iget:441: inode 12 [ 469.545714][ C0] EXT4-fs (loop3): last error at time 1784769201: ext4_xattr_inode_iget:441: inode 12 [ 469.589674][T10623] loop3: lost filesystem error report for type 5 error -117 [ 469.594963][T10623] EXT4-fs (loop3): 1 orphan inode deleted [ 469.614932][T10623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.824791][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.836443][T10370] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 469.882191][T10370] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 470.615724][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.759586][ T5640] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 472.774917][ T5640] Bluetooth: hci1: Injecting HCI hardware error event [ 472.796941][ T5643] Bluetooth: hci1: hardware error 0x00 [ 473.426653][ T36] hsr_slave_0: left promiscuous mode [ 473.452213][ T36] hsr_slave_1: left promiscuous mode [ 473.473379][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.489303][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.508567][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.519727][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.580265][ T36] veth1_macvtap: left promiscuous mode [ 473.594064][ T36] veth0_macvtap: left promiscuous mode [ 473.611401][ T36] veth1_vlan: left promiscuous mode [ 473.642625][ T36] veth0_vlan: left promiscuous mode [ 474.000114][T10664] loop0: detected capacity change from 0 to 1024 [ 474.376642][ T5281] 8021q: adding VLAN 0 to HW filter on device eth12 [ 474.409605][T10668] macvlan2: entered allmulticast mode [ 474.920220][ T5643] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 475.150084][T10680] loop0: detected capacity change from 0 to 1024 [ 475.162593][T10680] EXT4-fs: Ignoring removed bh option [ 475.168586][T10680] EXT4-fs: Ignoring removed bh option [ 476.024022][T10680] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 476.313334][T10680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.114583][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.978637][T10691] batadv0: entered promiscuous mode [ 477.986245][T10691] batadv0: entered allmulticast mode [ 477.991971][T10691] macvlan2: left allmulticast mode [ 477.997087][T10691] batadv0: left allmulticast mode [ 478.003491][T10691] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 478.176401][T10370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.269046][ T5776] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 478.475244][T10370] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.496631][ T5776] usb 1-1: Using ep0 maxpacket: 16 [ 478.585378][ T5776] usb 1-1: config 0 has no interfaces? [ 478.694848][ T5776] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 478.763715][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.823081][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.830304][ T5960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.848933][ T5776] usb 1-1: Product: syz [ 478.876819][ T5776] usb 1-1: Manufacturer: syz [ 478.902051][ T5776] usb 1-1: SerialNumber: syz [ 479.104813][ T5776] usb 1-1: config 0 descriptor?? [ 479.155164][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.162374][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.265440][ T6351] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 479.304412][ T6351] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 479.317716][ T5776] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 479.514249][T10694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.529551][ T10] usb 1-1: USB disconnect, device number 23 [ 479.570345][ T5776] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 479.939772][ T5776] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 479.966225][ T5281] 8021q: adding VLAN 0 to HW filter on device eth13 [ 480.205428][T10708] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 481.295493][T10360] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 481.327796][T10360] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 481.351282][T10360] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 483.043032][ T79] wlan1: Trigger new scan to find an IBSS to join [ 483.101809][T10360] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 483.121387][T10727] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 483.159605][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 483.266499][T10360] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 483.357514][T10360] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 483.391093][T10360] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 483.625361][T10360] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 484.050549][T10367] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 484.211834][T10367] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 484.252990][T10367] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 484.287924][T10367] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 484.312185][T10367] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 484.335277][T10367] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 484.372635][T10367] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 484.403696][T10367] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 484.466585][T10370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.683031][ T5281] 8021q: adding VLAN 0 to HW filter on device eth14 [ 484.737822][T10350] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 484.774477][T10350] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 484.783479][T10763] loop3: detected capacity change from 0 to 8192 [ 484.791097][T10350] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 484.833260][T10350] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 484.858816][T10763] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 484.891140][T10763] FAT-fs (loop3): Filesystem has been set read-only [ 484.898654][T10360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.916509][T10350] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 484.946302][T10350] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 485.038233][T10350] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 485.134704][T10350] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 485.207409][T10763] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 485.665776][T10360] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.707945][T10370] veth0_vlan: entered promiscuous mode [ 485.766102][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.773272][ T6008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.782782][T10773] loop0: detected capacity change from 0 to 2048 [ 485.832818][T10773] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 485.842406][T10370] veth1_vlan: entered promiscuous mode [ 485.865805][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.872973][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.972498][T10773] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 485.982612][T10776] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 486.042657][T10773] Remounting filesystem read-only [ 486.097726][T10779] loop3: detected capacity change from 0 to 8 [ 486.104360][T10367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.224573][T10367] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.273560][T10370] veth0_macvtap: entered promiscuous mode [ 486.323023][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.330196][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.405977][T10370] veth1_macvtap: entered promiscuous mode [ 486.476336][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.483538][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.546433][T10790] loop3: detected capacity change from 0 to 1024 [ 486.601211][ T48] wlan1: Trigger new scan to find an IBSS to join [ 486.696482][T10370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.838170][T10790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.875012][T10799] autofs4:pid:10799:validate_dev_ioctl: path string terminator missing for cmd(0xc0189374) [ 487.078236][T10370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.556329][ T6332] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.594826][T10350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.630554][ T79] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.668847][ T79] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.745222][ T79] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.803560][T10350] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.838552][ T6332] wlan1: Creating new IBSS network, BSSID 32:d8:ce:6a:70:d2 [ 487.940897][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.948079][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.018404][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.025592][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.134526][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.174418][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.404417][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.520072][T10790] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 488.539997][T10790] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 488.576360][T10821] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 488.588741][T10821] EXT4-fs (loop3): This should not happen!! Data will be lost [ 488.588741][T10821] [ 488.599436][T10821] EXT4-fs (loop3): Total free blocks count 0 [ 488.606348][T10821] EXT4-fs (loop3): Free/Dirty block details [ 488.612323][T10821] EXT4-fs (loop3): free_blocks=20480 [ 488.617610][T10821] EXT4-fs (loop3): dirty_blocks=80 [ 488.622818][T10821] EXT4-fs (loop3): Block reservation details [ 488.630626][T10821] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 488.644624][T10790] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 488.980918][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.032923][ T5624] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 489.380941][ T5281] 8021q: adding VLAN 0 to HW filter on device eth15 [ 489.726350][T10855] random: crng reseeded on system resumption [ 491.067455][T10360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.131082][T10864] fuseblk: Unknown parameter 'fd0x0000000000000006' [ 491.148043][T10864] loop0: detected capacity change from 0 to 1024 [ 491.239383][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 491.273874][T10864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.565778][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.999914][T10885] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 492.038124][T10885] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 492.724652][ T5643] Bluetooth: hci5: connection err: -111 [ 492.982665][T10891] loop0: detected capacity change from 0 to 32768 [ 493.004467][T10891] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1199 (10891) [ 493.022847][T10891] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 493.032961][T10891] BTRFS info (device loop0): using crc32c checksum algorithm [ 493.132419][T10891] BTRFS info (device loop0): setting nodatasum [ 493.138618][T10891] BTRFS info (device loop0): setting nodatacow [ 493.144816][T10891] BTRFS info (device loop0): turning on async discard [ 493.151601][T10891] BTRFS info (device loop0): enabling free space tree [ 493.158341][T10891] BTRFS info (device loop0): max_inline set to 0 [ 493.362996][T10909] loop3: detected capacity change from 0 to 64 [ 493.391094][T10913] loop1: detected capacity change from 0 to 256 [ 493.845780][T10913] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 494.230290][T10913] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 494.271351][T10913] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 494.289640][T10920] Bad inode number on dev loop3: 5 is out of range [ 494.385240][T10913] UDF-fs: Scanning with blocksize 512 failed [ 494.625383][T10367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.656039][ T30] audit: type=1326 audit(1784769226.320:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.0.1199" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f135f39de99 code=0x0 [ 494.662445][T10913] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 494.859335][T10913] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 495.193547][ T5626] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 495.301765][T10360] veth0_vlan: entered promiscuous mode [ 495.388640][ T5640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 495.469646][T10940] loop1: detected capacity change from 0 to 64 [ 495.484053][ T5640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 495.493895][ T5640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 495.505517][ T5640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 495.513698][ T5640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 495.580149][T10360] veth1_vlan: entered promiscuous mode [ 495.655041][T10936] loop3: detected capacity change from 0 to 32768 [ 495.663589][T10936] btrfs: Deprecated parameter 'usebackuproot' [ 495.669732][T10936] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 495.682509][T10936] BTRFS info: device /dev/loop3 (7:3) using temp-fsid b81a397a-09f7-4fcb-9e7b-0ee60d322690 [ 495.692939][T10936] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1203 (10936) [ 495.794596][T10936] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 495.804842][T10936] BTRFS info (device loop3): using crc32c checksum algorithm [ 495.877120][T10360] veth0_macvtap: entered promiscuous mode [ 495.944151][ T48] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 495.960667][T10360] veth1_macvtap: entered promiscuous mode [ 495.984172][T10936] BTRFS error (device loop3): failed to load root extent [ 495.988117][T10360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.991288][T10936] BTRFS warning (device loop3): try to load backup roots slot 1 [ 495.994179][T10836] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 496.003432][T10360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.131538][T10936] BTRFS warning (device loop3): couldn't read tree root [ 496.138556][T10936] BTRFS warning (device loop3): try to load backup roots slot 2 [ 496.147863][ T6350] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 496.217087][ T6332] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.242213][T10936] BTRFS warning (device loop3): couldn't read tree root [ 496.249296][T10936] BTRFS warning (device loop3): try to load backup roots slot 3 [ 496.290810][T10936] BTRFS info (device loop3): rebuilding free space tree [ 496.319930][T10936] BTRFS info (device loop3): disabling free space tree [ 496.326896][T10936] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 496.336653][T10936] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 496.356551][ T6332] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.369750][T10936] BTRFS info (device loop3): checking UUID tree [ 496.428449][T10936] BTRFS info (device loop3): enabling ssd optimizations [ 496.435515][T10936] BTRFS info (device loop3): turning on async discard [ 496.442499][T10936] BTRFS info (device loop3): force clearing of disk cache [ 496.449691][T10936] BTRFS info (device loop3): enabling auto defrag [ 496.456103][T10936] BTRFS info (device loop3): trying to use backup root at mount time [ 496.464258][T10936] BTRFS info (device loop3): use zstd compression, level 3 [ 496.469181][ T6332] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.253995][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.337789][ T5281] 8021q: adding VLAN 0 to HW filter on device eth16 [ 497.642313][ T5640] Bluetooth: hci0: command tx timeout [ 498.557170][ T5643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 498.568197][ T5643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 498.579730][ T5643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 498.591190][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 498.598905][ T5643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 498.802250][ T5624] BTRFS info (device loop3): last unmount of filesystem b81a397a-09f7-4fcb-9e7b-0ee60d322690 [ 499.720861][ T5640] Bluetooth: hci0: command tx timeout [ 500.147644][T11003] loop0: detected capacity change from 0 to 4096 [ 500.301030][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.307583][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.679509][ T5640] Bluetooth: hci2: command tx timeout [ 500.715719][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 500.740129][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 500.749101][ T5640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 500.781306][T10988] loop1: detected capacity change from 0 to 64 [ 500.790959][ T5640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 500.805974][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 502.221144][ T5643] Bluetooth: hci0: command tx timeout [ 503.249494][ T5640] Bluetooth: hci2: command tx timeout [ 503.256043][ T5640] Bluetooth: hci3: command tx timeout [ 504.686151][ T5643] Bluetooth: hci0: command tx timeout [ 505.329777][ T5643] Bluetooth: hci3: command tx timeout [ 505.338237][ T5643] Bluetooth: hci2: command tx timeout [ 506.296765][T11026] input: syz0 as /devices/virtual/input/input20 [ 506.379538][T11030] binder: 11029:11030 ioctl c0205867 200000000840 returned -22 [ 506.600079][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 507.399384][ T5643] Bluetooth: hci2: command tx timeout [ 507.404872][ T5640] Bluetooth: hci3: command tx timeout [ 507.424224][T11048] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1216'. [ 508.128098][T11052] hfsplus: unable to find HFS+ superblock [ 508.186026][T11052] loop3: detected capacity change from 0 to 128 [ 508.331596][T11052] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 508.623708][T11015] syz.1.1211 (11015): drop_caches: 2 [ 509.629384][ T5643] Bluetooth: hci3: command tx timeout [ 509.651383][T11072] loop1: detected capacity change from 0 to 2048 [ 509.845406][T11077] loop3: detected capacity change from 0 to 128 [ 509.862072][T11077] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 510.353100][T11077] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 510.436993][T11072] udf: Unknown parameter 'ÿÿ' [ 512.963958][T11092] loop0: detected capacity change from 0 to 32768 [ 512.971449][T11092] btrfs: Deprecated parameter 'usebackuproot' [ 512.977521][T11092] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 512.987816][T11092] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1224 (11092) [ 513.021099][T11092] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 513.031227][T11092] BTRFS info (device loop0): using crc32c checksum algorithm [ 513.114907][ T979] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 513.152357][T11092] BTRFS error (device loop0): failed to load root extent [ 513.160020][T11092] BTRFS warning (device loop0): try to load backup roots slot 1 [ 513.183713][T10836] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 513.250694][T11092] BTRFS warning (device loop0): couldn't read tree root [ 513.257800][T11092] BTRFS warning (device loop0): try to load backup roots slot 2 [ 513.265942][ T12] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 513.354052][T11092] BTRFS warning (device loop0): couldn't read tree root [ 513.361111][T11092] BTRFS warning (device loop0): try to load backup roots slot 3 [ 513.486362][T11092] BTRFS info (device loop0): rebuilding free space tree [ 513.552566][T11092] BTRFS info (device loop0): checking UUID tree [ 513.559465][T11092] BTRFS info (device loop0): enabling ssd optimizations [ 513.566436][T11092] BTRFS info (device loop0): turning on async discard [ 513.573437][T11092] BTRFS info (device loop0): enabling free space tree [ 513.581404][T11092] BTRFS info (device loop0): force clearing of disk cache [ 513.588513][T11092] BTRFS info (device loop0): enabling auto defrag [ 513.595044][T11092] BTRFS info (device loop0): trying to use backup root at mount time [ 513.603170][T11092] BTRFS info (device loop0): use zstd compression, level 3 [ 513.633671][T10850] bridge_slave_1: left allmulticast mode [ 513.668897][T10850] bridge_slave_1: left promiscuous mode [ 514.639186][T10850] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.115722][T11122] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.1224'. [ 515.272238][T10850] bridge_slave_0: left allmulticast mode [ 515.300259][T10850] bridge_slave_0: left promiscuous mode [ 515.339474][T10850] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.996271][T11141] loop3: detected capacity change from 0 to 1024 [ 516.061869][T11141] hfsplus: invalid file type 0174377 for inode 21 [ 516.155215][T10850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.205596][T10850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.272998][T10850] bond0 (unregistering): Released all slaves [ 516.421708][T11152] hub 8-0:1.0: USB hub found [ 516.426641][T11152] hub 8-0:1.0: 1 port detected [ 516.738883][ T5626] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 516.798724][T10850] hsr_slave_0: left promiscuous mode [ 516.808742][T10850] hsr_slave_1: left promiscuous mode [ 516.816701][T10850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.827188][T10850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.400029][T11171] loop0: detected capacity change from 0 to 1024 [ 517.407385][T11173] loop1: detected capacity change from 0 to 512 [ 517.464051][T11171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.488649][T11173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.508635][T11173] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.807187][T10850] team0 (unregistering): Port device team_slave_1 removed [ 517.915209][T11181] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 517.952879][T11181] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 517.972516][T11182] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 517.986226][T11182] EXT4-fs (loop0): This should not happen!! Data will be lost [ 517.986226][T11182] [ 517.995976][T11182] EXT4-fs (loop0): Total free blocks count 0 [ 518.002006][T11182] EXT4-fs (loop0): Free/Dirty block details [ 518.009048][T11182] EXT4-fs (loop0): free_blocks=20480 [ 518.014464][T11182] EXT4-fs (loop0): dirty_blocks=80 [ 518.019709][T11182] EXT4-fs (loop0): Block reservation details [ 518.025706][T11182] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 518.425500][ T979] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 518.442614][ T5626] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 518.481582][T10850] team0 (unregistering): Port device team_slave_0 removed [ 518.508313][T10370] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.818187][ T30] audit: type=1800 audit(1784769251.480:89): pid=11195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1243" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 519.818749][T11195] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 519.848604][T11195] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 519.858751][T11195] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 520.068664][T10935] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.091275][T10935] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.098660][T10935] bridge_slave_0: entered allmulticast mode [ 520.118403][T10935] bridge_slave_0: entered promiscuous mode [ 520.610722][T10935] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.768366][T10935] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.925026][T10935] bridge_slave_1: entered allmulticast mode [ 521.171127][T10935] bridge_slave_1: entered promiscuous mode [ 521.534316][T11222] loop1: detected capacity change from 0 to 1024 [ 521.538668][T10935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.604892][T11222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.743769][T10935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.931588][T11230] netlink: 'syz.0.1253': attribute type 2 has an invalid length. [ 522.153496][T11235] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 522.189382][T11235] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 522.209009][T11236] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 522.221487][T11236] EXT4-fs (loop1): This should not happen!! Data will be lost [ 522.221487][T11236] [ 522.231165][T11236] EXT4-fs (loop1): Total free blocks count 0 [ 522.237166][T11236] EXT4-fs (loop1): Free/Dirty block details [ 522.243096][T11236] EXT4-fs (loop1): free_blocks=20480 [ 522.248377][T11236] EXT4-fs (loop1): dirty_blocks=80 [ 522.253546][T11236] EXT4-fs (loop1): Block reservation details [ 522.259575][T11236] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 522.642223][T11204] loop3: detected capacity change from 0 to 40427 [ 522.658936][T10370] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 522.698586][T11204] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 522.715593][T11204] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 522.731667][T11204] F2FS-fs (loop3): build fault injection rate: 17008 [ 522.794421][T11204] F2FS-fs (loop3): build fault injection type: 0x6 [ 522.845282][T11204] F2FS-fs (loop3): invalid crc value [ 522.873484][T11204] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4) [ 522.907392][ T5643] Bluetooth: hci9: unknown advertising packet type: 0x06 [ 522.988057][T10935] team0: Port device team_slave_0 added [ 523.061343][T10935] team0: Port device team_slave_1 added [ 524.066232][T11262] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1260'. [ 524.273228][T11267] tmpfs: Unknown parameter 'fsmagic' [ 525.860871][T10980] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.869865][T10980] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.877186][T10980] bridge_slave_0: entered allmulticast mode [ 525.885970][T10980] bridge_slave_0: entered promiscuous mode [ 525.908462][T10935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.932065][T10935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.958547][T10935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.973263][T10935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.980464][T10935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.009039][T10935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.022778][T10980] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.030851][T10980] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.038130][T10980] bridge_slave_1: entered allmulticast mode [ 526.065666][T10980] bridge_slave_1: entered promiscuous mode [ 526.134530][T11277] loop1: detected capacity change from 0 to 64 [ 526.248446][ T30] audit: type=1800 audit(1784769257.910:90): pid=11277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1263" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 526.290680][T11281] loop0: detected capacity change from 0 to 512 [ 526.402558][T11281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.456286][T11281] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.653703][T11291] mmap: syz.0.1265 (11291) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 526.887241][T11294] EXT4-fs error (device loop0): ext4_empty_dir:3082: inode #12: comm syz.0.1265: invalid size [ 526.951337][T11294] EXT4-fs (loop0): Remounting filesystem read-only [ 527.486639][T10980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.697556][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.707719][ T979] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 527.723312][ T979] Quota error (device loop0): write_blk: dquota write failed [ 527.737127][ T979] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 527.755539][ T979] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 527.788688][ T979] Quota error (device loop0): write_blk: dquota write failed [ 527.803023][ T979] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 527.935451][T10980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.983820][T11313] loop0: detected capacity change from 0 to 256 [ 528.087881][T10935] hsr_slave_0: entered promiscuous mode [ 528.105303][T10935] hsr_slave_1: entered promiscuous mode [ 528.134094][T10935] debugfs: 'hsr0' already exists in 'hsr' [ 528.151079][T10935] Cannot create hsr debugfs directory [ 528.262693][T11321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1274'. [ 528.376990][T10980] team0: Port device team_slave_0 added [ 528.598260][T10980] team0: Port device team_slave_1 added [ 528.668903][T11335] program syz.1.1278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 528.968328][T10980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.992986][T10980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.995626][T11342] loop1: detected capacity change from 0 to 4096 [ 529.047491][T10980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.061457][T10980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.068492][T10980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.073754][T11342] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 529.094749][T10980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.131078][T11006] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.139433][T11006] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.148396][T11006] bridge_slave_0: entered allmulticast mode [ 529.172690][T11006] bridge_slave_0: entered promiscuous mode [ 529.186417][T11342] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 529.197531][T11006] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.205053][T11006] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.213121][T11342] ntfs3(loop1): ino=1a, mi_enum_attr [ 529.218714][T11342] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 529.227079][T11006] bridge_slave_1: entered allmulticast mode [ 529.257467][T11006] bridge_slave_1: entered promiscuous mode [ 529.281019][T11342] ntfs3(loop1): ino=5, "/" ntfs_readdir [ 529.312292][T11344] loop3: detected capacity change from 0 to 4096 [ 529.332951][T11344] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 529.423050][T11344] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 529.559951][ T10] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 529.580321][T11006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.734971][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 529.755038][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 529.791346][T11006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.797097][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 529.827093][T11356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1285'. [ 529.851063][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 529.882518][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.910768][ T10] usb 1-1: Product: syz [ 529.918822][ T10] usb 1-1: Manufacturer: syz [ 529.928242][ T10] usb 1-1: SerialNumber: syz [ 530.079115][T11358] team0: entered allmulticast mode [ 530.091619][T11358] team_slave_0: entered allmulticast mode [ 530.105755][T11358] team_slave_1: entered allmulticast mode [ 530.122150][T11358] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 530.197448][T10980] hsr_slave_0: entered promiscuous mode [ 530.211084][ T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 530.218086][T10980] hsr_slave_1: entered promiscuous mode [ 530.233138][T10980] debugfs: 'hsr0' already exists in 'hsr' [ 530.239884][ T10] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 530.251918][T10980] Cannot create hsr debugfs directory [ 530.258767][ T10] usb 1-1: 2:1 : invalid channels 0 [ 530.267759][T11366] netlink: 'syz.3.1287': attribute type 1 has an invalid length. [ 530.357892][T11006] team0: Port device team_slave_0 added [ 530.394625][T11006] team0: Port device team_slave_1 added [ 530.435615][ T10] usb 1-1: USB disconnect, device number 24 [ 530.771309][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 530.932090][T11378] loop3: detected capacity change from 0 to 8192 [ 531.073449][T11006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.096121][T11006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.165212][T11006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.358187][T11006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.401543][T11006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.462565][T11006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.463761][T11394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1296'. [ 531.719491][ T24] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 531.743865][T10850] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.896038][ T24] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 531.937005][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.974146][ T24] usb 2-1: config 0 has no interface number 0 [ 531.992935][ T24] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 532.015917][ T24] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 532.027795][ T24] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.045573][ T24] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 532.061483][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.111396][ T24] usb 2-1: Product: syz [ 532.136864][ T24] usb 2-1: Manufacturer: syz [ 532.154483][ T24] usb 2-1: SerialNumber: syz [ 532.183161][ T24] usb 2-1: config 0 descriptor?? [ 532.280390][T11006] hsr_slave_0: entered promiscuous mode [ 532.295961][T11006] hsr_slave_1: entered promiscuous mode [ 532.311485][T11006] debugfs: 'hsr0' already exists in 'hsr' [ 532.328242][T11006] Cannot create hsr debugfs directory [ 532.486746][T10850] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.625335][ T24] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 532.663311][ T24] usb 2-1: USB disconnect, device number 14 [ 532.895856][T11409] loop0: detected capacity change from 0 to 32768 [ 532.904450][T11419] loop3: detected capacity change from 0 to 32768 [ 532.913051][T11419] btrfs: Deprecated parameter 'usebackuproot' [ 532.919121][T11419] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 532.932002][T11419] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1302 (11419) [ 532.958860][T11419] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 532.969009][T11419] BTRFS info (device loop3): using crc32c checksum algorithm [ 533.007849][T11409] XFS (loop0): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 533.073677][T10850] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.123465][ T36] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 533.216555][T11419] BTRFS error (device loop3): failed to load root extent [ 533.226182][T11419] BTRFS warning (device loop3): try to load backup roots slot 1 [ 533.237656][ T36] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 533.254176][T11419] BTRFS warning (device loop3): couldn't read tree root [ 533.268017][T11419] BTRFS warning (device loop3): try to load backup roots slot 2 [ 533.276382][T10845] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 533.286813][T11419] BTRFS warning (device loop3): couldn't read tree root [ 533.294021][T11419] BTRFS warning (device loop3): try to load backup roots slot 3 [ 533.325636][T11419] BTRFS info (device loop3): rebuilding free space tree [ 533.345759][T11419] BTRFS info (device loop3): checking UUID tree [ 533.356054][T11419] BTRFS info (device loop3): enabling ssd optimizations [ 533.363186][T11419] BTRFS info (device loop3): turning on async discard [ 533.370029][T11419] BTRFS info (device loop3): enabling free space tree [ 533.376792][T11419] BTRFS info (device loop3): force clearing of disk cache [ 533.384044][T11419] BTRFS info (device loop3): enabling auto defrag [ 533.390530][T11419] BTRFS info (device loop3): trying to use backup root at mount time [ 533.398598][T11419] BTRFS info (device loop3): use zstd compression, level 3 [ 533.411274][ T5626] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 534.415058][T11452] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.1302'. [ 534.468041][T10850] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.894773][ T5624] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 534.954629][T11461] loop0: detected capacity change from 0 to 512 [ 534.975945][T11461] EXT4-fs: inline encryption not supported [ 535.065617][T11461] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 535.152202][T11464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1308'. [ 535.301326][T11464] team_slave_0: left allmulticast mode [ 535.310751][T11461] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.1304: corrupted in-inode xattr: e_value size too large [ 535.417630][T11461] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 535.420006][ C1] EXT4-fs (loop0): initial error at time 1784769267: ext4_iget_extra_inode:5180: inode 15 [ 535.439251][ C1] EXT4-fs (loop0): last error at time 1784769267: ext4_iget_extra_inode:5180: inode 15 [ 535.473187][T11464] team0 (unregistering): Port device team_slave_0 removed [ 535.507789][T11464] team_slave_1: left allmulticast mode [ 535.528667][T11461] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1304: couldn't read orphan inode 15 (err -117) [ 535.544507][T11464] team0 (unregistering): Port device team_slave_1 removed [ 535.611799][T11461] loop0: lost filesystem error report for type 5 error -117 [ 535.663361][T11461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.952115][T11472] overlayfs: upper fs needs to support d_type. [ 535.970665][T11479] netlink: 'syz.1.1310': attribute type 1 has an invalid length. [ 536.027197][T11479] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1310'. [ 536.042246][T11479] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1310'. [ 536.052039][T10850] bridge_slave_1: left allmulticast mode [ 536.064531][T10850] bridge_slave_1: left promiscuous mode [ 536.077480][T10850] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.106799][T10850] bridge_slave_0: left allmulticast mode [ 536.125098][T11478] loop3: detected capacity change from 0 to 4096 [ 536.133437][T10850] bridge_slave_0: left promiscuous mode [ 536.145308][T11478] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 536.151099][T10850] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.278105][T11478] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 536.288065][T10850] bridge_slave_1: left allmulticast mode [ 536.297687][ T5626] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 536.329496][T10850] bridge_slave_1: left promiscuous mode [ 536.340987][T10850] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.342521][ T30] audit: type=1800 audit(1784769268.010:91): pid=11478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1309" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 536.366396][ T5626] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 536.386627][T11486] loop1: detected capacity change from 0 to 256 [ 536.396220][T10850] bridge_slave_0: left allmulticast mode [ 536.404452][T11486] vfat: Unknown parameter 'nnonumtail' [ 536.415176][T10850] bridge_slave_0: left promiscuous mode [ 536.452234][T10850] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.827469][T10307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.117911][T11497] option changes via remount are deprecated (pid=11496 comm=syz.1.1315) [ 537.176197][T10850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.192776][T10850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.207727][T10850] bond0 (unregistering): Released all slaves [ 537.325968][T11501] loop1: detected capacity change from 0 to 2048 [ 537.376899][T10850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.378659][T11501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.406468][T10850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.416894][T10850] bond0 (unregistering): Released all slaves [ 537.432144][T11490] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1313'. [ 537.678981][T10370] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.794092][T10850] hsr_slave_0: left promiscuous mode [ 537.824096][T10850] hsr_slave_1: left promiscuous mode [ 537.849682][T10850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.856332][T11507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1319'. [ 537.870247][T10850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.887805][T10850] hsr_slave_0: left promiscuous mode [ 537.930998][T10850] hsr_slave_1: left promiscuous mode [ 537.938267][T10850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.964664][T10850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.972064][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 538.045274][T10850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.069314][T10850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.133270][T10850] veth1_macvtap: left promiscuous mode [ 538.138815][T10850] veth0_macvtap: left promiscuous mode [ 538.149369][T10850] veth1_vlan: left promiscuous mode [ 538.197302][T10850] veth0_vlan: left promiscuous mode [ 539.452885][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 539.470441][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 539.480504][ T5640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 539.494649][ T5640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 539.507197][ T5640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 539.551940][T11521] nbd0: detected capacity change from 0 to 87 [ 539.582513][ T1604] block nbd0: Dead connection, failed to find a fallback [ 539.584477][T11521] block nbd0: reconnected socket [ 539.646841][ T5643] block nbd0: Receive control failed (result -104) [ 539.754924][T11525] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1324'. [ 539.795992][T10850] team0 (unregistering): Port device team_slave_1 removed [ 539.846081][T10850] team0 (unregistering): Port device team_slave_0 removed [ 540.158124][T10850] team0 (unregistering): Port device team_slave_1 removed [ 540.178076][T10850] team0 (unregistering): Port device team_slave_0 removed [ 540.979815][T11536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.108270][T10980] [ 541.110628][T10980] ====================================================== [ 541.117634][T10980] WARNING: possible circular locking dependency detected [ 541.124641][T10980] syzkaller #0 Tainted: G L [ 541.130600][T10980] ------------------------------------------------------ [ 541.137587][T10980] syz-executor/10980 is trying to acquire lock: [ 541.143796][T10980] ffff88801c28d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 541.153621][T10980] [ 541.153621][T10980] but task is already holding lock: [ 541.160959][T10980] ffffffff8f5e4060 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 541.169648][T10980] [ 541.169648][T10980] which lock already depends on the new lock. [ 541.169648][T10980] [ 541.180025][T10980] [ 541.180025][T10980] the existing dependency chain (in reverse order) is: [ 541.189023][T10980] [ 541.189023][T10980] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 541.196245][T10980] __mutex_lock+0x19d/0x1550 [ 541.201367][T10980] get_device_parent+0x16f/0x3a0 [ 541.206822][T10980] device_add+0x2d4/0xb80 [ 541.211660][T10980] device_create+0x269/0x300 [ 541.216756][T10980] msr_device_create+0x33/0x50 [ 541.222026][T10980] cpuhp_invoke_callback+0x434/0x810 [ 541.227822][T10980] cpuhp_thread_fun+0x362/0x780 [ 541.233183][T10980] smpboot_thread_fn+0x57c/0xa80 [ 541.238630][T10980] kthread+0x388/0x470 [ 541.243210][T10980] ret_from_fork+0x514/0xb70 [ 541.248314][T10980] ret_from_fork_asm+0x1a/0x30 [ 541.253581][T10980] [ 541.253581][T10980] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 541.261131][T10980] cpuhp_thread_fun+0x127/0x780 [ 541.266491][T10980] smpboot_thread_fn+0x57c/0xa80 [ 541.271936][T10980] kthread+0x388/0x470 [ 541.276514][T10980] ret_from_fork+0x514/0xb70 [ 541.281617][T10980] ret_from_fork_asm+0x1a/0x30 [ 541.286906][T10980] [ 541.286906][T10980] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 541.294630][T10980] cpus_read_lock+0x42/0x160 [ 541.299724][T10980] static_key_slow_inc+0x12/0x30 [ 541.305174][T10980] nbd_genl_reconfigure+0x1301/0x1e80 [ 541.311062][T10980] genl_family_rcv_msg_doit+0x233/0x340 [ 541.317119][T10980] genl_rcv_msg+0x614/0x7a0 [ 541.322131][T10980] netlink_rcv_skb+0x226/0x4a0 [ 541.327398][T10980] genl_rcv+0x28/0x40 [ 541.331888][T10980] netlink_unicast+0x7bb/0x940 [ 541.337167][T10980] netlink_sendmsg+0x813/0xb40 [ 541.342434][T10980] sock_sendmsg_nosec+0x13a/0x180 [ 541.347971][T10980] ____sys_sendmsg+0x54e/0x850 [ 541.353236][T10980] ___sys_sendmsg+0x2a5/0x360 [ 541.358416][T10980] __x64_sys_sendmsg+0x1b1/0x290 [ 541.363858][T10980] do_syscall_64+0x174/0x580 [ 541.368951][T10980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.375359][T10980] [ 541.375359][T10980] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 541.382997][T10980] __mutex_lock+0x19d/0x1550 [ 541.388090][T10980] nbd_queue_rq+0x373/0x1150 [ 541.393196][T10980] blk_mq_dispatch_rq_list+0x499/0x1990 [ 541.399258][T10980] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 541.406105][T10980] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 541.412598][T10980] blk_mq_run_work_fn+0x16c/0x300 [ 541.418125][T10980] process_scheduled_works+0xa8e/0x14e0 [ 541.424174][T10980] worker_thread+0xa47/0xfb0 [ 541.429270][T10980] kthread+0x388/0x470 [ 541.433851][T10980] ret_from_fork+0x514/0xb70 [ 541.438956][T10980] ret_from_fork_asm+0x1a/0x30 [ 541.444221][T10980] [ 541.444221][T10980] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 541.451424][T10980] __mutex_lock+0x19d/0x1550 [ 541.456518][T10980] nbd_queue_rq+0xc1/0x1150 [ 541.461535][T10980] blk_mq_dispatch_rq_list+0x499/0x1990 [ 541.467590][T10980] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 541.474429][T10980] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 541.480929][T10980] blk_mq_run_work_fn+0x16c/0x300 [ 541.486460][T10980] process_scheduled_works+0xa8e/0x14e0 [ 541.492512][T10980] worker_thread+0xa47/0xfb0 [ 541.497610][T10980] kthread+0x388/0x470 [ 541.502190][T10980] ret_from_fork+0x514/0xb70 [ 541.507292][T10980] ret_from_fork_asm+0x1a/0x30 [ 541.512556][T10980] [ 541.512556][T10980] -> #5 (set->srcu){.+.+}-{0:0}: [ 541.519671][T10980] __synchronize_srcu+0xc9/0x2f0 [ 541.525118][T10980] elevator_switch+0x1e8/0x7b0 [ 541.530389][T10980] elevator_change+0x2fa/0x480 [ 541.535663][T10980] elevator_set_default+0x375/0x440 [ 541.541375][T10980] blk_register_queue+0x3f3/0x4e0 [ 541.546916][T10980] __add_disk+0x6cb/0xe30 [ 541.551747][T10980] add_disk_fwnode+0x100/0x3a0 [ 541.557015][T10980] nbd_dev_add+0x733/0xb60 [ 541.561947][T10980] nbd_init+0x15f/0x1e0 [ 541.566615][T10980] do_one_initcall+0x250/0x870 [ 541.571888][T10980] do_initcall_level+0x10a/0x1a0 [ 541.577332][T10980] do_initcalls+0x59/0xa0 [ 541.582170][T10980] kernel_init_freeable+0x29d/0x3e0 [ 541.587872][T10980] kernel_init+0x1d/0x1d0 [ 541.592709][T10980] ret_from_fork+0x514/0xb70 [ 541.597812][T10980] ret_from_fork_asm+0x1a/0x30 [ 541.603077][T10980] [ 541.603077][T10980] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 541.610890][T10980] __mutex_lock+0x19d/0x1550 [ 541.615985][T10980] elevator_change+0x1af/0x480 [ 541.621257][T10980] elevator_set_none+0xb5/0x140 [ 541.626617][T10980] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 541.632928][T10980] nbd_start_device+0x189/0xb30 [ 541.638295][T10980] nbd_genl_connect+0x1597/0x1c10 [ 541.643836][T10980] genl_family_rcv_msg_doit+0x233/0x340 [ 541.649897][T10980] genl_rcv_msg+0x614/0x7a0 [ 541.654909][T10980] netlink_rcv_skb+0x226/0x4a0 [ 541.660176][T10980] genl_rcv+0x28/0x40 [ 541.664667][T10980] netlink_unicast+0x7bb/0x940 [ 541.669944][T10980] netlink_sendmsg+0x813/0xb40 [ 541.675213][T10980] sock_sendmsg_nosec+0x13a/0x180 [ 541.680745][T10980] ____sys_sendmsg+0x54e/0x850 [ 541.686012][T10980] ___sys_sendmsg+0x2a5/0x360 [ 541.691190][T10980] __x64_sys_sendmsg+0x1b1/0x290 [ 541.696630][T10980] do_syscall_64+0x174/0x580 [ 541.701723][T10980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.708119][T10980] [ 541.708119][T10980] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 541.716720][T10980] blk_alloc_queue+0x544/0x690 [ 541.721993][T10980] __blk_mq_alloc_disk+0x194/0x390 [ 541.727618][T10980] nbd_dev_add+0x494/0xb60 [ 541.732548][T10980] nbd_init+0x15f/0x1e0 [ 541.737218][T10980] do_one_initcall+0x250/0x870 [ 541.742503][T10980] do_initcall_level+0x10a/0x1a0 [ 541.747950][T10980] do_initcalls+0x59/0xa0 [ 541.752784][T10980] kernel_init_freeable+0x29d/0x3e0 [ 541.758488][T10980] kernel_init+0x1d/0x1d0 [ 541.763324][T10980] ret_from_fork+0x514/0xb70 [ 541.768431][T10980] ret_from_fork_asm+0x1a/0x30 [ 541.773696][T10980] [ 541.773696][T10980] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 541.780900][T10980] fs_reclaim_acquire+0x71/0x100 [ 541.786349][T10980] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 541.792579][T10980] alloc_inode+0xb8/0x1b0 [ 541.797417][T10980] iget_locked+0x131/0x6a0 [ 541.802348][T10980] kernfs_get_inode+0x4f/0x770 [ 541.807625][T10980] kernfs_get_tree+0x5cd/0x980 [ 541.812895][T10980] vfs_get_tree+0x92/0x2a0 [ 541.817813][T10980] do_new_mount+0x319/0xdc0 [ 541.822823][T10980] __se_sys_mount+0x31d/0x420 [ 541.828011][T10980] do_syscall_64+0x174/0x580 [ 541.833104][T10980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.839500][T10980] [ 541.839500][T10980] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 541.847485][T10980] down_write+0x96/0x200 [ 541.852239][T10980] kernfs_remove_by_name_ns+0x4e/0x140 [ 541.858214][T10980] device_links_driver_bound+0x4ab/0x1440 [ 541.864446][T10980] driver_bound+0xd8/0x2e0 [ 541.869367][T10980] really_probe+0x774/0xae0 [ 541.874376][T10980] __driver_probe_device+0x1e8/0x360 [ 541.880164][T10980] driver_probe_device+0x4f/0x240 [ 541.885696][T10980] __device_attach_driver+0x270/0x410 [ 541.891572][T10980] bus_for_each_drv+0x258/0x2f0 [ 541.896936][T10980] __device_attach+0x2c4/0x450 [ 541.902205][T10980] device_initial_probe+0xa1/0xd0 [ 541.907735][T10980] bus_probe_device+0x12a/0x220 [ 541.913095][T10980] device_add+0x7d7/0xb80 [ 541.917925][T10980] faux_device_create_with_groups+0x1a5/0x2b0 [ 541.924495][T10980] regulator_dummy_init+0x19/0x40 [ 541.930034][T10980] regulator_init+0xca/0x110 [ 541.935135][T10980] do_one_initcall+0x250/0x870 [ 541.940413][T10980] do_initcall_level+0x10a/0x1a0 [ 541.945858][T10980] do_initcalls+0x59/0xa0 [ 541.950694][T10980] kernel_init_freeable+0x29d/0x3e0 [ 541.956401][T10980] kernel_init+0x1d/0x1d0 [ 541.961238][T10980] ret_from_fork+0x514/0xb70 [ 541.966342][T10980] ret_from_fork_asm+0x1a/0x30 [ 541.971610][T10980] [ 541.971610][T10980] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 541.980204][T10980] __lock_acquire+0x1520/0x2cf0 [ 541.985564][T10980] lock_acquire+0x106/0x350 [ 541.990575][T10980] down_read+0x4a/0x330 [ 541.995235][T10980] kernfs_remove+0x35/0x80 [ 542.000164][T10980] __kobject_del+0xe0/0x310 [ 542.005175][T10980] kobject_del+0x45/0x60 [ 542.009922][T10980] cleanup_glue_dir+0x1a3/0x220 [ 542.015276][T10980] device_del+0x77d/0x8f0 [ 542.020107][T10980] unregister_netdevice_many_notify+0x1be4/0x2150 [ 542.027029][T10980] unregister_netdevice_queue+0x2f5/0x340 [ 542.033253][T10980] nsim_destroy+0x275/0x800 [ 542.038265][T10980] __nsim_dev_port_del+0x14e/0x200 [ 542.043890][T10980] nsim_dev_reload_destroy+0x288/0x490 [ 542.049865][T10980] nsim_drv_remove+0x58/0x170 [ 542.055058][T10980] device_release_driver_internal+0x48b/0x880 [ 542.061635][T10980] bus_remove_device+0x444/0x560 [ 542.067085][T10980] device_del+0x524/0x8f0 [ 542.071917][T10980] device_unregister+0x21/0xf0 [ 542.077183][T10980] del_device_store+0x2b5/0x370 [ 542.082545][T10980] kernfs_fop_write_iter+0x3a4/0x540 [ 542.088333][T10980] vfs_write+0x612/0xba0 [ 542.093092][T10980] ksys_write+0x150/0x270 [ 542.097939][T10980] do_syscall_64+0x174/0x580 [ 542.103034][T10980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.109432][T10980] [ 542.109432][T10980] other info that might help us debug this: [ 542.109432][T10980] [ 542.119637][T10980] Chain exists of: [ 542.119637][T10980] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 542.119637][T10980] [ 542.133019][T10980] Possible unsafe locking scenario: [ 542.133019][T10980] [ 542.140446][T10980] CPU0 CPU1 [ 542.145786][T10980] ---- ---- [ 542.151127][T10980] lock(gdp_mutex); [ 542.155010][T10980] lock(cpuhp_state-up); [ 542.161842][T10980] lock(gdp_mutex); [ 542.168242][T10980] rlock(&root->kernfs_supers_rwsem); [ 542.173772][T10980] [ 542.173772][T10980] *** DEADLOCK *** [ 542.173772][T10980] [ 542.181890][T10980] 8 locks held by syz-executor/10980: [ 542.187237][T10980] #0: ffff888033924450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 542.196141][T10980] #1: ffff8880375f8080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 542.205889][T10980] #2: ffff888028fc32d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 542.215906][T10980] #3: ffffffff8f8a9420 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 542.226182][T10980] #4: ffff88802328e128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 542.236713][T10980] #5: ffff88802c081258 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 542.246817][T10980] #6: ffffffff9002d100 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 542.255785][T10980] #7: ffffffff8f5e4060 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 542.264920][T10980] [ 542.264920][T10980] stack backtrace: [ 542.270791][T10980] CPU: 0 UID: 0 PID: 10980 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 542.270819][T10980] Tainted: [L]=SOFTLOCKUP [ 542.270827][T10980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 542.270839][T10980] Call Trace: [ 542.270847][T10980] [ 542.270856][T10980] dump_stack_lvl+0xe8/0x150 [ 542.270889][T10980] print_circular_bug+0x2e1/0x300 [ 542.270926][T10980] check_noncircular+0x12e/0x150 [ 542.270963][T10980] __lock_acquire+0x1520/0x2cf0 [ 542.270997][T10980] ? irqentry_exit+0x218/0x8f0 [ 542.271016][T10980] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.271041][T10980] ? lockdep_hardirqs_on+0x7a/0x110 [ 542.271060][T10980] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.271084][T10980] ? irqentry_exit+0x218/0x8f0 [ 542.271102][T10980] ? trace_irq_disable+0x3b/0x140 [ 542.271131][T10980] ? kernfs_remove+0x35/0x80 [ 542.271160][T10980] lock_acquire+0x106/0x350 [ 542.271187][T10980] ? kernfs_remove+0x35/0x80 [ 542.271219][T10980] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.271247][T10980] down_read+0x4a/0x330 [ 542.271269][T10980] ? kernfs_remove+0x35/0x80 [ 542.271298][T10980] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.271325][T10980] kernfs_remove+0x35/0x80 [ 542.271358][T10980] __kobject_del+0xe0/0x310 [ 542.271386][T10980] kobject_del+0x45/0x60 [ 542.271409][T10980] cleanup_glue_dir+0x1a3/0x220 [ 542.271433][T10980] device_del+0x77d/0x8f0 [ 542.271457][T10980] ? __pfx_device_del+0x10/0x10 [ 542.271477][T10980] ? pm_runtime_set_memalloc_noio+0x1e7/0x260 [ 542.271500][T10980] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.271524][T10980] ? netdev_unregister_kobject+0x347/0x450 [ 542.271554][T10980] unregister_netdevice_many_notify+0x1be4/0x2150 [ 542.271589][T10980] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 542.271615][T10980] ? __mutex_lock+0x1092/0x1550 [ 542.271645][T10980] unregister_netdevice_queue+0x2f5/0x340 [ 542.271670][T10980] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 542.271699][T10980] nsim_destroy+0x275/0x800 [ 542.271730][T10980] __nsim_dev_port_del+0x14e/0x200 [ 542.271763][T10980] nsim_dev_reload_destroy+0x288/0x490 [ 542.271798][T10980] nsim_drv_remove+0x58/0x170 [ 542.271830][T10980] ? __pfx_nsim_bus_remove+0x10/0x10 [ 542.271856][T10980] device_release_driver_internal+0x48b/0x880 [ 542.271884][T10980] bus_remove_device+0x444/0x560 [ 542.271916][T10980] ? __pfx_bus_remove_device+0x10/0x10 [ 542.271948][T10980] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.271971][T10980] ? kernfs_remove_by_name_ns+0x101/0x140 [ 542.272007][T10980] device_del+0x524/0x8f0 [ 542.272026][T10980] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 542.272061][T10980] ? __pfx_device_del+0x10/0x10 [ 542.272083][T10980] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.272110][T10980] device_unregister+0x21/0xf0 [ 542.272131][T10980] del_device_store+0x2b5/0x370 [ 542.272161][T10980] ? __pfx_del_device_store+0x10/0x10 [ 542.272188][T10980] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.272212][T10980] ? sysfs_file_kobj+0x1e4/0x230 [ 542.272236][T10980] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.272259][T10980] ? sysfs_kf_write+0x166/0x260 [ 542.272284][T10980] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.272309][T10980] ? __pfx_sysfs_kf_write+0x10/0x10 [ 542.272333][T10980] kernfs_fop_write_iter+0x3a4/0x540 [ 542.272361][T10980] vfs_write+0x612/0xba0 [ 542.272397][T10980] ? __pfx_vfs_write+0x10/0x10 [ 542.272429][T10980] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.272453][T10980] ? kmem_cache_free+0x182/0x650 [ 542.272479][T10980] ? fd_install+0x94/0x3d0 [ 542.272508][T10980] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.272533][T10980] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.272560][T10980] ksys_write+0x150/0x270 [ 542.272593][T10980] ? __pfx_ksys_write+0x10/0x10 [ 542.272629][T10980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.272651][T10980] do_syscall_64+0x174/0x580 [ 542.272673][T10980] ? srso_alias_return_thunk+0x5/0xfbef5 [ 542.272699][T10980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.272720][T10980] RIP: 0033:0x7f3947f5e6ce [ 542.272739][T10980] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 542.272756][T10980] RSP: 002b:00007ffe1cfc5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 542.272778][T10980] RAX: ffffffffffffffda RBX: 000055555fbed500 RCX: 00007f3947f5e6ce [ 542.272793][T10980] RDX: 0000000000000001 RSI: 00007ffe1cfc6070 RDI: 0000000000000005 [ 542.272806][T10980] RBP: 00007f3948034732 R08: 0000000000000000 R09: 0000000000000000 [ 542.272819][T10980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.272832][T10980] R13: 00007ffe1cfc6070 R14: 00007f3948d54620 R15: 0000000000000003 [ 542.272856][T10980] [ 542.756061][ T5643] Bluetooth: hci4: command tx timeout [ 542.951950][T10980] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 542.976791][T10980] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 542.988260][T10980] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 542.997515][T10980] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 543.039320][T10980] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 543.052505][T10980] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 543.117334][T10935] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 543.127130][T10935] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 543.145771][T10980] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 543.155082][T10980] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 543.187800][T10935] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 543.216715][T10935] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 543.285727][T10935] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 543.309621][T10935] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 543.327201][T10935] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 543.354784][T10935] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 543.405333][T10850] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.421546][T11518] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.431235][T11518] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.443652][T11518] bridge_slave_0: entered allmulticast mode [ 543.456191][T11518] bridge_slave_0: entered promiscuous mode [ 543.472635][T10850] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.495906][T11518] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.510038][T11518] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.517253][T11518] bridge_slave_1: entered allmulticast mode [ 543.527936][T11518] bridge_slave_1: entered promiscuous mode [ 543.562372][T10850] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.611261][T11518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.624994][T11518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.663487][T10850] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.688752][T11518] team0: Port device team_slave_0 added [ 543.701623][T11518] team0: Port device team_slave_1 added [ 543.758279][T11518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.765553][T11518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.793238][T11518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.833122][T11518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.841959][T11518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.868692][T11518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.880250][ T1604] block nbd0: Connection timed out, retrying (0/2 alive) [ 543.887318][ T1604] block nbd0: Connection timed out, retrying (0/2 alive) [ 543.895247][ T5994] block nbd0: Dead connection, failed to find a fallback [ 543.902692][ T1604] block nbd0: Connection timed out, retrying (0/2 alive) [ 543.909847][ T1604] block nbd0: Connection timed out, retrying (0/2 alive) [ 543.981656][T11518] hsr_slave_0: entered promiscuous mode [ 543.993357][T11518] hsr_slave_1: entered promiscuous mode [ 544.001760][T11518] debugfs: 'hsr0' already exists in 'hsr' [ 544.007493][T11518] Cannot create hsr debugfs directory [ 544.087860][T10980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.131890][T10850] vlan2: left allmulticast mode [ 544.137135][T10850] vlan2: left promiscuous mode [ 544.142914][T10850] bridge0: port 3(vlan2) entered disabled state [ 544.155093][T10850] bridge_slave_1: left allmulticast mode [ 544.161635][T10850] bridge_slave_1: left promiscuous mode [ 544.167383][T10850] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.178243][T10850] bridge_slave_0: left allmulticast mode [ 544.184160][T10850] bridge_slave_0: left promiscuous mode [ 544.190830][T10850] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.288718][T10850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.302180][T10850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.319858][T10850] bond0 (unregistering): Released all slaves [ 544.331446][T11006] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 544.343264][T11006] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 544.363327][T11006] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 544.377427][T11006] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 544.400721][T11006] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 544.410840][T11006] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 544.438517][T11006] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 544.447421][T11006] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 544.480025][T10980] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.563326][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.570476][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.581130][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.588229][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.643714][T10850] hsr_slave_0: left promiscuous mode [ 544.653767][T10850] hsr_slave_1: left promiscuous mode [ 544.661878][T10850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.671583][T10850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.680083][T10850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.687524][T10850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.699586][T10850] veth1_macvtap: left promiscuous mode [ 544.705124][T10850] veth0_macvtap: left promiscuous mode [ 544.712046][T10850] veth1_vlan: left promiscuous mode [ 544.717360][T10850] veth0_vlan: left promiscuous mode [ 544.842850][ T5643] Bluetooth: hci4: command tx timeout [ 544.919398][ T5994] block nbd0: shutting down sockets [ 544.925108][ T5994] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.936411][ T5994] Buffer I/O error on dev nbd0, logical block 0, async page read [ 544.944363][ T5994] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.954327][ T5994] Buffer I/O error on dev nbd0, logical block 3, async page read [ 544.962166][ T5994] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.971752][ T5994] Buffer I/O error on dev nbd0, logical block 2, async page read [ 544.979697][ T5994] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 544.989246][ T5994] Buffer I/O error on dev nbd0, logical block 1, async page read [ 544.996246][T10935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.997514][ T5994] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 545.014598][ T5994] Buffer I/O error on dev nbd0, logical block 0, async page read [ 545.022457][ T5994] Buffer I/O error on dev nbd0, logical block 1, async page read [ 545.030755][ T5994] Buffer I/O error on dev nbd0, logical block 2, async page read [ 545.038489][ T5994] Buffer I/O error on dev nbd0, logical block 3, async page read [ 545.046472][ T5994] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 545.057516][ T5994] Buffer I/O error on dev nbd0, logical block 0, async page read [ 545.065710][ T5994] Buffer I/O error on dev nbd0, logical block 1, async page read [ 545.074963][T11518] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.075101][ T5994] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 545.096823][ T5994] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 545.106510][ T1676] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 545.135013][ T1676] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 545.147058][ T5760] ldm_validate_partition_table(): Disk read failed. [ 545.191035][ T5760] Dev nbd0: unable to read RDB block 0 [ 545.224122][ T5760] nbd0: unable to read partition table [ 545.239090][T11518] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.262608][ T5760] ldm_validate_partition_table(): Disk read failed. [ 545.282536][ T5760] Dev nbd0: unable to read RDB block 0 [ 545.291343][T10935] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.314983][ T5760] nbd0: unable to read partition table [ 545.344592][ T6168] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.351721][ T6168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.388041][T11518] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.426884][ T6168] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.434026][ T6168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.463136][T10935] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 545.473591][T10935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 545.522244][T11006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.556140][T11518] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.592192][T10850] IPVS: stop unused estimator thread 0... [ 545.614406][T11006] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.663973][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.671109][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.704671][ T6168] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.711784][ T6168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.864051][T11518] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 545.891882][T11518] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 545.912508][T11518] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 545.933684][T11518] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 545.966002][T11518] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 546.011091][T11518] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 546.043417][T11518] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 546.076315][T11518] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 546.287900][T11518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.326870][T10935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.355768][T11518] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.385123][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.392266][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.431721][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.438868][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.465328][T10980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.854149][T11006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.895727][T10935] veth0_vlan: entered promiscuous mode [ 546.921196][ T5643] Bluetooth: hci4: command tx timeout [ 546.936880][T10935] veth1_vlan: entered promiscuous mode [ 546.992562][T10935] veth0_macvtap: entered promiscuous mode [ 547.020968][T10935] veth1_macvtap: entered promiscuous mode [ 547.086442][T10935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.099119][T10980] veth0_vlan: entered promiscuous mode [ 547.114818][T10935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.125844][T10980] veth1_vlan: entered promiscuous mode [ 547.148592][T10843] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.176740][T10843] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.211360][T10843] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.235412][T10843] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.307712][T10935] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 547.363081][T10980] veth0_macvtap: entered promiscuous mode [ 547.385689][T11518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.394376][T10980] veth1_macvtap: entered promiscuous mode [ 547.429426][ T979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.450502][T10935] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 547.458701][ T979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.495718][T10980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.522902][T10980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.554542][ T979] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.570099][ T6008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.570981][ T979] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.590802][ T6008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.596675][T11006] veth0_vlan: entered promiscuous mode [ 547.605213][ T979] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.628922][ T979] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.661229][T11006] veth1_vlan: entered promiscuous mode [ 547.688917][T10980] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 547.764700][T10850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.776029][T10980] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 547.790534][T10850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.848959][T11006] veth0_macvtap: entered promiscuous mode [ 547.875532][T10850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.887135][T11006] veth1_macvtap: entered promiscuous mode [ 547.905454][T10850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.942440][T11006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.982275][T11006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.003406][T11518] veth0_vlan: entered promiscuous mode [ 548.016440][ T979] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.038592][T11518] veth1_vlan: entered promiscuous mode [ 548.053285][ T979] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.063526][ T979] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.094025][ T979] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.125444][T11006] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht' [ 548.135888][T11518] veth0_macvtap: entered promiscuous mode [ 548.158490][T11518] veth1_macvtap: entered promiscuous mode [ 548.183828][ T979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.195687][T11518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.202187][ T979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.211453][T11006] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 548.248707][T11518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.261822][ T6008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.276727][T10843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.286576][ T6008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.295884][T10843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.315525][T10843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.334463][T10843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.388682][T11518] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 548.427734][ T6008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.431230][T11518] ieee80211 phy30: Selected rate control algorithm 'minstrel_ht' [ 548.445269][ T6008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.476507][ T6008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.485167][ T6008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.009647][ T5643] Bluetooth: hci4: command tx timeout [ 549.828261][ T979] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 550.523274][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 550.825077][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2