last executing test programs: 1m7.458004508s ago: executing program 3 (id=119): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 1m6.577262989s ago: executing program 3 (id=125): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='./file0\x00') 1m6.124731863s ago: executing program 3 (id=129): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x11) madvise(&(0x7f00001a1000/0x4000)=nil, 0x4000, 0x8) 1m3.040466713s ago: executing program 3 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=within_size']) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x181) ftruncate(r0, 0x82081fc) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x5, 0x4924, 0x921, 0x8000, 0x92aa, 0x6, 0x0, 0x0, 0x80, 0x9}}, 0x50) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r1, 0x0) 1m2.088430054s ago: executing program 3 (id=144): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x2) fdatasync(r0) 1m1.366143521s ago: executing program 3 (id=147): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x11) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 59.910841456s ago: executing program 32 (id=147): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x11) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 25.353217803s ago: executing program 2 (id=278): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f18"], 0x7) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x0, "08000000000000000000000000000000000000b582000000010000000100"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8926, 0x0) 21.852860429s ago: executing program 2 (id=295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 21.121590536s ago: executing program 2 (id=298): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36b, 0x10100, 0x0, 0x155}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x40, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 20.638251953s ago: executing program 2 (id=300): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000001c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f", [0x0, 0xffffffffffffffff]}}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) 19.823021506s ago: executing program 2 (id=307): creat(&(0x7f0000000380)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) creat(&(0x7f00000002c0)='./file0\x00', 0x100) 17.534794082s ago: executing program 2 (id=315): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x0, 0x5, 0x4, &(0x7f0000000040)={0x1b, "e9faf16dd2b02314dec8e40a752486c45746c596ec7cd9ed920cfb7046970bc8e4"}}) 16.304788885s ago: executing program 33 (id=315): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x0, 0x5, 0x4, &(0x7f0000000040)={0x1b, "e9faf16dd2b02314dec8e40a752486c45746c596ec7cd9ed920cfb7046970bc8e4"}}) 16.277341607s ago: executing program 4 (id=317): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x3}]}}}]}, 0x44}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r2) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 15.501369576s ago: executing program 4 (id=321): io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x10, 0x8001002, 0x3d7}) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80200) syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x40a04) pselect6(0x40, &(0x7f0000000000)={0xd2, 0xfffffffffffffffe, 0x83, 0x0, 0x77c8, 0x0, 0x7, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x9, 0x0, 0x2, 0x2000000000000001}, 0x0, 0x0) 14.828964491s ago: executing program 4 (id=325): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a2c01c, 0x0, 0xff, 0x0, &(0x7f0000000d40)) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) socket$nl_route(0x10, 0x3, 0x0) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 14.326598993s ago: executing program 6 (id=326): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) 14.236342415s ago: executing program 4 (id=328): r0 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xe1b3, 0x2, 0x2, 0xffffffff}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) listen(r1, 0x8) accept4$inet(r1, 0x0, 0x0, 0x80800) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 13.550320002s ago: executing program 4 (id=330): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r2, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r2, 0xd3) 12.696558334s ago: executing program 6 (id=331): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) 12.695667989s ago: executing program 0 (id=342): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="e9a4ea8d246a02fb3d7b6d068c4bd0e238a86b018e04", 0x16}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2ebb203023d89132c1980796d3480bf302680bb6d94cc2ddc4b641c81144696a15b4d88e56d04ec393bf39b3774c70aa01f9aee0fc51897c613f9ed201e53a48b093ea3325ebab77c2d8afcdd9e30fec85fdb932aa067d0f6e891750cd952158d3288fc4cb3a551e6d8f828c6e02ef0e295cbf30390c4566dba8ff971c6d212f4b", 0x81}], 0x1}}], 0x2, 0x4008) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1}, 0x0) 12.286952713s ago: executing program 0 (id=334): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/156, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000440)) syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc000000010902"], 0x0) r2 = dup(r0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 10.31277586s ago: executing program 0 (id=336): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x2, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 10.267809613s ago: executing program 6 (id=338): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 8.854125363s ago: executing program 6 (id=341): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r1, &(0x7f00000010c0)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xff}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfffd, 0x89c77fb34cc3db7f}, {0xd, 0x1}, {0xb, 0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 6.507662631s ago: executing program 6 (id=345): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f657874656e745f63616368652c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474720000693a653d3078303030303030303030303030303766662c736d61636b6673726f6f080000006673f52b00e58abba2d0cc27be339f6f4fe5ad35a724e1531a622f050000008586eb5ba3614d2c24abf5a2614c0f111e057112dafd66336a5e3b6512b81cda80be6e9a34ccc2b88c0100008000000000e3f5def862b95c20ee847008000b0c22653d2ff39b36732e46b56357afe57094f42ba61c5e8b4e184d7dd50000000000000000c0469264c247cd3c7fcb39043dda97538456bc294ae31e525d3b664cf8e83b52b1885b866b58698b3f132aced62a4fc7c8c400b805173d7488a35708d2523190c0014689f57be6ee3f5d28935a0000000000000000000000000000000000000059c1403d010001008ab61fa90695a8b268c277645c1e357ec9316354f659d4244fe126a8364eaa0de6bf4ba21c767782a04bdbb8c86d0cc7e3f03f8ef15c0ee311768cccb8affb0ae5d7cd0000000097676c046a6c754c98dd5f400ad99a588d983ae6e07b4e0e0907266aca53b30a815a84295fb5eab2f263613d36994dc15562892c33ed149270907e9c2e4d0cac7dd9735621a0c6768d4f70c664699157854bb1b85ce3f6ea44456e4f1ae1575315d77f2b995ce4d6ce21b17ca891c155ddd9916e997c32e78231e8d54675e4edf480980023b9736180ff98cf93f888eb70abb728b7e91a5d75b7e43e54f92b6e679249576f12533bef1c93aa993977f15c0a7b595423444db6e87480c46c408f6d48afa1ba"], 0x1, 0x5514, &(0x7f0000005d80)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) fdatasync(r1) 6.482417574s ago: executing program 1 (id=346): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 6.279625326s ago: executing program 5 (id=347): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfffffffc, 0x0, 0x0, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000340)={0x4, 0x3, 0x6, 0xe, 0x2, "6b53125f9a9ad93d789521cc1e4f440e921409"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x3) 5.990525141s ago: executing program 0 (id=348): r0 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x8, 0x5, 0x3, 0x0, [0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r0, 0x47bc, 0x3, 0x20, 0x0, 0x0) 5.771727778s ago: executing program 1 (id=349): syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5437, 0x0) 4.339696535s ago: executing program 1 (id=350): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x23) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x500000, 0x403}}, 0x50) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0xffffffffffffffda, r2}, 0x10) 3.922790122s ago: executing program 5 (id=351): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) chdir(&(0x7f0000000080)='./file0/file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x6, 0x2, 0xffffffffffffff80, 0x8, 0x0, 0x6ad, {0x5, 0x9, 0x1, 0x6, 0x7, 0x9, 0xfffffffe, 0x81, 0xffffffff, 0xd741423aafb8ee8b, 0x1576, r2, r3, 0x800, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x880, 0x1ff, 0x0, 0x0, 0x5}}, 0x50) 3.280276053s ago: executing program 1 (id=352): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) r1 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.137608975s ago: executing program 0 (id=353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xd5108000) 2.718350716s ago: executing program 5 (id=354): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x2, 0x2, 0x0, 0xfffffffd, 0x25dfdbff}, 0x10}, 0x1, 0x7}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x2004}) epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) 2.675378294s ago: executing program 1 (id=355): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 2.631558342s ago: executing program 6 (id=356): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.405702414s ago: executing program 5 (id=357): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x4, 0x2}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x23000) read(r0, &(0x7f0000001040)=""/4096, 0x1000) 983.524473ms ago: executing program 0 (id=358): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x4000000}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 784.000063ms ago: executing program 5 (id=359): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r2}, &(0x7f0000000ac0), &(0x7f0000000b00)=r0}, 0x20) 383.42893ms ago: executing program 5 (id=360): write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000400)={0xa0, 0xfffffffffffffffe, 0x0, {{0x5, 0x0, 0x7, 0x8000000000000001, 0x6, 0x4, {0x3, 0xe750, 0x3, 0x7fffffff, 0x3, 0x7, 0x8, 0x10, 0x2, 0x8000, 0x400, 0x0, 0x0, 0x0, 0x2}}, {0x0, 0x1a}}}, 0xa0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r1 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2040}}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 16.85088ms ago: executing program 4 (id=361): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n 1 [ 106.620521][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.628346][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.658520][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.684662][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.728398][ T5149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.736683][ T5149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.741857][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.744456][ T5149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.758588][ T5149] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.766406][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.767414][ T5149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.782788][ T5149] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.790817][ T5149] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.814346][ T5149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.842537][ T5149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.851257][ T5149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.878569][ T5149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.907459][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.917442][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.937948][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.947111][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.961964][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.976191][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.984149][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 107.036148][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 107.046470][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 107.055615][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 107.068128][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 107.076218][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 107.704363][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 107.937394][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 107.996140][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 108.128646][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 108.298463][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 108.311980][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 108.326111][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.334027][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.341719][ T5842] bridge_slave_0: entered allmulticast mode [ 108.349697][ T5842] bridge_slave_0: entered promiscuous mode [ 108.416045][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.423712][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.430931][ T5842] bridge_slave_1: entered allmulticast mode [ 108.439374][ T5842] bridge_slave_1: entered promiscuous mode [ 108.488797][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.496060][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.503965][ T5844] bridge_slave_0: entered allmulticast mode [ 108.511894][ T5844] bridge_slave_0: entered promiscuous mode [ 108.586765][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.595027][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.602251][ T5844] bridge_slave_1: entered allmulticast mode [ 108.610261][ T5844] bridge_slave_1: entered promiscuous mode [ 108.676243][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.683531][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.690781][ T5838] bridge_slave_0: entered allmulticast mode [ 108.698980][ T5838] bridge_slave_0: entered promiscuous mode [ 108.759338][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.768826][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.780603][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.787935][ T5838] bridge_slave_1: entered allmulticast mode [ 108.797051][ T5838] bridge_slave_1: entered promiscuous mode [ 108.800211][ T5149] Bluetooth: hci0: command tx timeout [ 108.872682][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.881948][ T5837] Bluetooth: hci1: command tx timeout [ 108.887684][ T5149] Bluetooth: hci2: command tx timeout [ 108.905689][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.918379][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.928218][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.935836][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.945057][ T5835] bridge_slave_0: entered allmulticast mode [ 108.952704][ T5835] bridge_slave_0: entered promiscuous mode [ 108.958948][ T5149] Bluetooth: hci3: command tx timeout [ 109.034551][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.042153][ T5149] Bluetooth: hci4: command tx timeout [ 109.068009][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.094207][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.101393][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.113362][ T5835] bridge_slave_1: entered allmulticast mode [ 109.121030][ T5835] bridge_slave_1: entered promiscuous mode [ 109.123906][ T5149] Bluetooth: hci5: command tx timeout [ 109.161721][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.169680][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.177747][ T5848] bridge_slave_0: entered allmulticast mode [ 109.185653][ T5848] bridge_slave_0: entered promiscuous mode [ 109.199641][ T5842] team0: Port device team_slave_0 added [ 109.257700][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.265061][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.272321][ T5851] bridge_slave_0: entered allmulticast mode [ 109.281074][ T5851] bridge_slave_0: entered promiscuous mode [ 109.288634][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.296232][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.304081][ T5848] bridge_slave_1: entered allmulticast mode [ 109.311702][ T5848] bridge_slave_1: entered promiscuous mode [ 109.320748][ T5842] team0: Port device team_slave_1 added [ 109.347197][ T5838] team0: Port device team_slave_0 added [ 109.359977][ T5844] team0: Port device team_slave_0 added [ 109.382729][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.390173][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.397565][ T5851] bridge_slave_1: entered allmulticast mode [ 109.405286][ T5851] bridge_slave_1: entered promiscuous mode [ 109.446998][ T5838] team0: Port device team_slave_1 added [ 109.459380][ T5844] team0: Port device team_slave_1 added [ 109.485019][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.498350][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.562040][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.573346][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.580308][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.606334][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.705280][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.718946][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.732459][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.760527][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.767730][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.794243][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.815336][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.822326][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.849482][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.863561][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.870527][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.896921][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.908785][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.916156][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.942130][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.955177][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.962158][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.988289][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.014950][ T5835] team0: Port device team_slave_0 added [ 110.061417][ T5848] team0: Port device team_slave_0 added [ 110.090115][ T5835] team0: Port device team_slave_1 added [ 110.137406][ T5851] team0: Port device team_slave_0 added [ 110.146129][ T5848] team0: Port device team_slave_1 added [ 110.156359][ T5851] team0: Port device team_slave_1 added [ 110.315439][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.322432][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.349351][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.363878][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.370840][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.397248][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.416159][ T5842] hsr_slave_0: entered promiscuous mode [ 110.422701][ T5842] hsr_slave_1: entered promiscuous mode [ 110.430495][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.437635][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.463687][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.491654][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.498692][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.524783][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.542427][ T5844] hsr_slave_0: entered promiscuous mode [ 110.549108][ T5844] hsr_slave_1: entered promiscuous mode [ 110.555548][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.563375][ T5844] Cannot create hsr debugfs directory [ 110.579230][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.586296][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.613036][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.648760][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.656369][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.682583][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.759946][ T5838] hsr_slave_0: entered promiscuous mode [ 110.767034][ T5838] hsr_slave_1: entered promiscuous mode [ 110.773822][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.781397][ T5838] Cannot create hsr debugfs directory [ 110.884584][ T5149] Bluetooth: hci0: command tx timeout [ 110.945534][ T5851] hsr_slave_0: entered promiscuous mode [ 110.952276][ T5851] hsr_slave_1: entered promiscuous mode [ 110.957987][ T5149] Bluetooth: hci2: command tx timeout [ 110.958209][ T5837] Bluetooth: hci1: command tx timeout [ 110.964663][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.979736][ T5851] Cannot create hsr debugfs directory [ 111.026015][ T5835] hsr_slave_0: entered promiscuous mode [ 111.033251][ T5837] Bluetooth: hci3: command tx timeout [ 111.034412][ T5835] hsr_slave_1: entered promiscuous mode [ 111.046056][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.053935][ T5835] Cannot create hsr debugfs directory [ 111.080741][ T5848] hsr_slave_0: entered promiscuous mode [ 111.087514][ T5848] hsr_slave_1: entered promiscuous mode [ 111.093990][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.101600][ T5848] Cannot create hsr debugfs directory [ 111.113076][ T5837] Bluetooth: hci4: command tx timeout [ 111.194145][ T5837] Bluetooth: hci5: command tx timeout [ 111.876703][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.894522][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.910389][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.931742][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.996575][ T5848] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 112.030814][ T5848] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 112.041982][ T5848] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 112.062641][ T5848] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.148973][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.187841][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.202522][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.229257][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.295297][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.314616][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 112.363564][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.375284][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.535847][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.584840][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.599372][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.628262][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.647376][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.732721][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.747934][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.787067][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.796421][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 112.836354][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.845177][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 112.860865][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 112.898029][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 112.911450][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.918724][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.953425][ T5837] Bluetooth: hci0: command tx timeout [ 112.978753][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.985959][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.998158][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.005423][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.026418][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.033340][ T5837] Bluetooth: hci2: command tx timeout [ 113.033394][ T5837] Bluetooth: hci1: command tx timeout [ 113.057939][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.065188][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.113527][ T5149] Bluetooth: hci3: command tx timeout [ 113.121429][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.128717][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.190143][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.193809][ T5149] Bluetooth: hci4: command tx timeout [ 113.197794][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.273410][ T5149] Bluetooth: hci5: command tx timeout [ 113.300357][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.407776][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.489986][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.590017][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.597251][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.633373][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.640563][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.708604][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.761569][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.768811][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.870667][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.877900][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.026601][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.077891][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.161827][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.198750][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.242341][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.310680][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.317907][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.354805][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.361996][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.514648][ T5842] veth0_vlan: entered promiscuous mode [ 114.645177][ T5842] veth1_vlan: entered promiscuous mode [ 114.699818][ T5844] veth0_vlan: entered promiscuous mode [ 114.738765][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.798492][ T5844] veth1_vlan: entered promiscuous mode [ 114.895767][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.916219][ T5842] veth0_macvtap: entered promiscuous mode [ 114.976508][ T5844] veth0_macvtap: entered promiscuous mode [ 115.037222][ T5844] veth1_macvtap: entered promiscuous mode [ 115.039178][ T5149] Bluetooth: hci0: command tx timeout [ 115.068783][ T5842] veth1_macvtap: entered promiscuous mode [ 115.081925][ T5835] veth0_vlan: entered promiscuous mode [ 115.113902][ T5837] Bluetooth: hci2: command tx timeout [ 115.119414][ T5149] Bluetooth: hci1: command tx timeout [ 115.146811][ T5835] veth1_vlan: entered promiscuous mode [ 115.198602][ T5149] Bluetooth: hci3: command tx timeout [ 115.208760][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.228972][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.239189][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.274318][ T5149] Bluetooth: hci4: command tx timeout [ 115.308877][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.345522][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.353611][ T5149] Bluetooth: hci5: command tx timeout [ 115.372930][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.381790][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.392831][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.461396][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.475041][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.488281][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.497193][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.547972][ T5835] veth0_macvtap: entered promiscuous mode [ 115.575729][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.615791][ T5848] veth0_vlan: entered promiscuous mode [ 115.704147][ T5835] veth1_macvtap: entered promiscuous mode [ 115.761434][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.778412][ T5848] veth1_vlan: entered promiscuous mode [ 115.829631][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.841887][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.850163][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.893332][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.902100][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.911864][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.921470][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.033911][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.046242][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.060098][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.069587][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.130378][ T5848] veth0_macvtap: entered promiscuous mode [ 116.165115][ T5851] veth0_vlan: entered promiscuous mode [ 116.179431][ T5848] veth1_macvtap: entered promiscuous mode [ 116.209151][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.224203][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.301178][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 116.336851][ T5851] veth1_vlan: entered promiscuous mode [ 116.369381][ T5838] veth0_vlan: entered promiscuous mode [ 116.385772][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.407373][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.448144][ T5848] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.468767][ T5848] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.479568][ T5848] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.502933][ T5848] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.541102][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.587101][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.663639][ T5838] veth1_vlan: entered promiscuous mode [ 116.818118][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.821028][ T5851] veth0_macvtap: entered promiscuous mode [ 116.849206][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.890958][ T5851] veth1_macvtap: entered promiscuous mode [ 117.030042][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.039705][ T5975] syz.0.1 (5975) used greatest stack depth: 20088 bytes left [ 117.082289][ T5838] veth0_macvtap: entered promiscuous mode [ 117.147050][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.183135][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.196900][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.197338][ T5838] veth1_macvtap: entered promiscuous mode [ 117.311532][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.333018][ T5979] veth1_to_bond: entered allmulticast mode [ 117.346991][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.361588][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 117.378804][ T5980] veth1_to_bond: entered promiscuous mode [ 117.392771][ T5851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.411510][ T30] audit: type=1326 audit(1749921952.911:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e258e929 code=0x7ffc0000 [ 117.445546][ T5851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.454762][ T30] audit: type=1326 audit(1749921952.911:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e258e929 code=0x7ffc0000 [ 117.479807][ T5851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.488739][ T30] audit: type=1326 audit(1749921952.911:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f96e258e929 code=0x7ffc0000 [ 117.488818][ T30] audit: type=1326 audit(1749921952.931:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e258e929 code=0x7ffc0000 [ 117.488887][ T30] audit: type=1326 audit(1749921952.931:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e258e929 code=0x7ffc0000 [ 117.488955][ T30] audit: type=1326 audit(1749921952.931:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96e258e929 code=0x7ffc0000 [ 117.489029][ T30] audit: type=1326 audit(1749921952.961:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e258e929 code=0x7ffc0000 [ 117.522746][ T5851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.642291][ T30] audit: type=1326 audit(1749921952.961:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f96e258e929 code=0x7ffc0000 [ 117.686339][ T5985] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8'. [ 117.696064][ T30] audit: type=1326 audit(1749921952.981:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e258e929 code=0x7ffc0000 [ 117.725943][ T5985] unsupported nlmsg_type 40 [ 117.787681][ T30] audit: type=1326 audit(1749921952.981:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f96e258e929 code=0x7ffc0000 [ 118.131042][ T5978] veth1_to_bond: left promiscuous mode [ 118.164298][ T5978] veth1_to_bond: left allmulticast mode [ 118.289673][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.509377][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.649027][ T6016] loop1: detected capacity change from 0 to 1024 [ 118.984526][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.010023][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.129457][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.140180][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.317373][ T6016] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.387050][ T6021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.432643][ T6021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.551534][ T6014] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 879: i_size: 51008 lbcount: 53248 extent 96+53248 [ 119.619923][ T6036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.640321][ T6026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.668712][ T6026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.721929][ T6035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.909725][ T5997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.948489][ T5997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.151020][ T6043] block device autoloading is deprecated and will be removed. [ 120.188945][ T6021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.224596][ T6021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.770322][ T6055] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.949927][ T6062] random: crng reseeded on system resumption [ 122.153837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.463493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.514616][ T6066] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 122.563254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 122.783278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.903533][ T1166] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 122.945379][ T6074] capability: warning: `syz.5.23' uses deprecated v2 capabilities in a way that may be insecure [ 122.973095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 123.177860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.282787][ T1166] usb 2-1: config 0 has no interfaces? [ 123.300549][ T1166] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 123.394212][ T1166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.532038][ T1166] usb 2-1: Product: syz [ 123.775266][ T1166] usb 2-1: Manufacturer: syz [ 123.783733][ T6082] netlink: 24 bytes leftover after parsing attributes in process `syz.4.27'. [ 123.813121][ T1166] usb 2-1: SerialNumber: syz [ 123.889464][ T1166] usb 2-1: config 0 descriptor?? [ 124.369979][ T6084] loop2: detected capacity change from 0 to 512 [ 124.434479][ T6084] EXT4-fs: Ignoring removed oldalloc option [ 124.608885][ T6084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.651217][ T6092] use of bytesused == 0 is deprecated and will be removed in the future, [ 124.678720][ T6092] use the actual size instead. [ 124.728804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 124.765385][ T6084] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.929367][ T6084] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.28: bg 0: block 217: padding at end of block bitmap is not set [ 125.021253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 125.033453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 125.106025][ T6084] __quota_error: 7 callbacks suppressed [ 125.106047][ T6084] Quota error (device loop2): write_blk: dquota write failed [ 125.164287][ T6084] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 125.225883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 125.243245][ T6084] EXT4-fs error (device loop2): ext4_acquire_dquot:6931: comm syz.2.28: Failed to acquire dquot type 0 [ 125.463038][ T5897] usb 2-1: USB disconnect, device number 2 [ 125.646618][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.365606][ T6103] loop2: detected capacity change from 0 to 40427 [ 126.425828][ T6103] F2FS-fs (loop2): build fault injection rate: 690 [ 126.450220][ T6103] F2FS-fs (loop2): invalid crc value [ 126.571383][ T6103] F2FS-fs (loop2): Start checkpoint disabled! [ 126.684567][ T6103] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 126.891341][ T6103] syz.2.34: attempt to access beyond end of device [ 126.891341][ T6103] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 126.957995][ T30] audit: type=1326 audit(1749921962.481:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.4.37" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f793db8e929 code=0x0 [ 127.138915][ T6115] netlink: 'syz.0.39': attribute type 3 has an invalid length. [ 127.753440][ T6023] kworker/u8:33: attempt to access beyond end of device [ 127.753440][ T6023] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 127.843577][ T6023] CPU: 0 UID: 0 PID: 6023 Comm: kworker/u8:33 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 127.843631][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.843656][ T6023] Workqueue: writeback wb_workfn (flush-7:2) [ 127.843729][ T6023] Call Trace: [ 127.843740][ T6023] [ 127.843754][ T6023] dump_stack_lvl+0x16c/0x1f0 [ 127.843818][ T6023] f2fs_handle_critical_error+0x621/0x9f0 [ 127.843866][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.843912][ T6023] ? f2fs_build_fault_attr+0x53/0x1f0 [ 127.843959][ T6023] f2fs_write_end_io+0x785/0xc20 [ 127.844011][ T6023] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 127.844071][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.844126][ T6023] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 127.844174][ T6023] bio_endio+0x70d/0x850 [ 127.844214][ T6023] submit_bio_noacct+0x56d/0x1eb0 [ 127.844272][ T6023] __submit_merged_bio+0x33c/0x770 [ 127.844327][ T6023] __submit_merged_write_cond+0x319/0x3f0 [ 127.844389][ T6023] f2fs_write_cache_pages+0x2067/0x2570 [ 127.844473][ T6023] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 127.844547][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.844591][ T6023] ? find_held_lock+0x2b/0x80 [ 127.844639][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.844774][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.844826][ T6023] f2fs_write_data_pages+0x4ad/0xd90 [ 127.844891][ T6023] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 127.844961][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.845006][ T6023] ? __lock_acquire+0xb8a/0x1c90 [ 127.845069][ T6023] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 127.845130][ T6023] do_writepages+0x27a/0x600 [ 127.845195][ T6023] ? __pfx_do_writepages+0x10/0x10 [ 127.845253][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.845298][ T6023] ? reacquire_held_locks+0xcd/0x1f0 [ 127.845356][ T6023] ? writeback_sb_inodes+0x3a4/0xf90 [ 127.845422][ T6023] __writeback_single_inode+0x160/0xfb0 [ 127.845486][ T6023] ? __pfx___writeback_single_inode+0x10/0x10 [ 127.845546][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.845591][ T6023] ? do_raw_spin_unlock+0x172/0x230 [ 127.845631][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.845683][ T6023] writeback_sb_inodes+0x601/0xf90 [ 127.845764][ T6023] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 127.845825][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.845869][ T6023] ? do_raw_spin_lock+0x12c/0x2b0 [ 127.845966][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.846011][ T6023] ? rcu_is_watching+0x12/0xc0 [ 127.846061][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.846106][ T6023] ? queue_io+0x3f6/0x520 [ 127.846163][ T6023] wb_writeback+0x419/0xb70 [ 127.846232][ T6023] ? __pfx_wb_writeback+0x10/0x10 [ 127.846289][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.846346][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.846390][ T6023] ? mark_held_locks+0x49/0x80 [ 127.846455][ T6023] wb_workfn+0x14d/0xbe0 [ 127.846521][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.846565][ T6023] ? try_to_wake_up+0x157/0x1680 [ 127.846611][ T6023] ? __pfx_wb_workfn+0x10/0x10 [ 127.846676][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.846725][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.846791][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.846836][ T6023] ? rcu_is_watching+0x12/0xc0 [ 127.846889][ T6023] process_one_work+0x9cf/0x1b70 [ 127.846941][ T6023] ? __pfx_batadv_nc_worker+0x10/0x10 [ 127.846999][ T6023] ? __pfx_process_one_work+0x10/0x10 [ 127.847038][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.847098][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.847143][ T6023] ? assign_work+0x1a0/0x250 [ 127.847209][ T6023] worker_thread+0x6c8/0xf10 [ 127.847268][ T6023] ? __pfx_worker_thread+0x10/0x10 [ 127.847306][ T6023] kthread+0x3c5/0x780 [ 127.847340][ T6023] ? __pfx_kthread+0x10/0x10 [ 127.847376][ T6023] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.847420][ T6023] ? rcu_is_watching+0x12/0xc0 [ 127.847466][ T6023] ? __pfx_kthread+0x10/0x10 [ 127.847502][ T6023] ret_from_fork+0x5d7/0x6f0 [ 127.847555][ T6023] ? __pfx_kthread+0x10/0x10 [ 127.847588][ T6023] ret_from_fork_asm+0x1a/0x30 [ 127.847648][ T6023] [ 127.847661][ T6023] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 128.476837][ T6120] loop1: detected capacity change from 0 to 512 [ 128.543097][ T6120] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 128.674477][ T6120] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 129.196430][ T6120] EXT4-fs (loop1): 1 orphan inode deleted [ 129.223200][ T6120] EXT4-fs (loop1): 1 truncate cleaned up [ 129.231057][ T6120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.296314][ T6130] syz.4.44 uses obsolete (PF_INET,SOCK_PACKET) [ 129.487457][ T6120] EXT4-fs error (device loop1): ext4_search_dir:1473: inode #12: block 7: comm syz.1.43: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 129.504732][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.46'. [ 129.551842][ T6120] EXT4-fs (loop1): Remounting filesystem read-only [ 129.719975][ T6120] netlink: 'syz.1.43': attribute type 11 has an invalid length. [ 129.752003][ T6136] warning: `syz.1.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 129.810021][ T6139] loop4: detected capacity change from 0 to 512 [ 129.859857][ T6139] ext4: Unknown parameter 'usrquota"data' [ 130.081449][ T6143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.50'. [ 130.164470][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.853256][ T43] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 130.914292][ T6162] geneve2: entered promiscuous mode [ 130.919653][ T6162] geneve2: entered allmulticast mode [ 130.969540][ T6167] ======================================================= [ 130.969540][ T6167] WARNING: The mand mount option has been deprecated and [ 130.969540][ T6167] and is ignored by this kernel. Remove the mand [ 130.969540][ T6167] option from the mount to silence this warning. [ 130.969540][ T6167] ======================================================= [ 130.989121][ T6170] loop1: detected capacity change from 0 to 1024 [ 131.067551][ T6170] EXT4-fs: Ignoring removed nobh option [ 131.092979][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 131.096412][ T6170] EXT4-fs: Ignoring removed bh option [ 131.115440][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.152546][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.207109][ T6170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.212945][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 131.313084][ T43] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 131.341938][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.412214][ T43] usb 4-1: config 0 descriptor?? [ 131.413753][ T6170] EXT4-fs (loop1): shut down requested (1) [ 131.449731][ T6180] loop0: detected capacity change from 0 to 128 [ 131.503905][ T6180] EXT4-fs: Ignoring removed nobh option [ 131.584934][ T6180] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.684041][ T6180] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.058364][ T43] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0001/input/input5 [ 132.105703][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.160437][ T43] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0001/input/input6 [ 132.289129][ T6186] evm: overlay not supported [ 132.375235][ T5842] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.454817][ T43] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 132.590727][ T43] usb 4-1: USB disconnect, device number 2 [ 132.737094][ T6195] loop2: detected capacity change from 0 to 512 [ 132.751664][ T6196] netlink: 'syz.0.67': attribute type 4 has an invalid length. [ 132.800939][ T6195] EXT4-fs: Ignoring removed nobh option [ 132.855141][ T6195] EXT4-fs: Ignoring removed orlov option [ 132.862819][ T6200] netlink: 'syz.0.67': attribute type 4 has an invalid length. [ 132.921366][ T6195] EXT4-fs: Invalid want_extra_isize 188 [ 133.273128][ T5924] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 133.297417][ T6201] fido_id[6201]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 133.392682][ T6207] loop3: detected capacity change from 0 to 1024 [ 133.490261][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 133.522954][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 133.539159][ T6207] hfsplus: xattr search failed [ 133.597716][ T5924] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 133.638786][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.658014][ T5924] usb 3-1: Product: syz [ 133.663889][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 133.684124][ T5924] usb 3-1: Manufacturer: syz [ 133.688909][ T5924] usb 3-1: SerialNumber: syz [ 133.721625][ T5924] usb 3-1: config 0 descriptor?? [ 133.836519][ T5851] hfsplus: node 4:3 still has 1 user(s)! [ 133.842778][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 133.869470][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.885759][ T10] usb 6-1: config 0 has no interface number 0 [ 133.914258][ T10] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 133.943177][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.964665][ T5924] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 133.992926][ T10] usb 6-1: Product: syz [ 133.997164][ T10] usb 6-1: Manufacturer: syz [ 134.052746][ T10] usb 6-1: SerialNumber: syz [ 134.078450][ T10] usb 6-1: config 0 descriptor?? [ 134.100004][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 134.225799][ T5970] kernel write not supported for file [eventfd] (pid: 5970 comm: kworker/1:6) [ 134.226157][ T5897] usb 3-1: USB disconnect, device number 2 [ 135.655580][ T6234] loop3: detected capacity change from 0 to 1024 [ 135.693178][ T6234] EXT4-fs: Ignoring removed nobh option [ 135.721510][ T10] gspca_spca1528: reg_r err -71 [ 135.727450][ T10] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 135.734947][ T6234] EXT4-fs: Ignoring removed bh option [ 135.750535][ T6237] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.81'. [ 135.760127][ T6237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.81'. [ 135.783153][ T10] usb 6-1: USB disconnect, device number 2 [ 135.833165][ T5924] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 135.879895][ T6234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.965823][ T6234] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4112: comm syz.3.80: Allocating blocks 385-513 which overlap fs metadata [ 136.013313][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 136.032088][ T5924] usb 1-1: config 2 has an invalid interface number: 4 but max is 0 [ 136.048273][ T5924] usb 1-1: config 2 has no interface number 0 [ 136.078567][ T5924] usb 1-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=b2.da [ 136.108738][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.114714][ T6234] EXT4-fs (loop3): pa ffff8880556fa828: logic 16, phys. 129, len 24 [ 136.125196][ T6234] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5363: group 0, free 0, pa_free 8 [ 136.162363][ T5924] usb 1-1: Product: syz [ 136.197957][ T5924] usb 1-1: Manufacturer: syz [ 136.238943][ T5924] usb 1-1: SerialNumber: syz [ 136.291103][ T5924] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 136.431188][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.449709][ T5924] snd-usb-audio 1-1:2.4: probe with driver snd-usb-audio failed with error -2 [ 136.540750][ T5924] usb 1-1: USB disconnect, device number 2 [ 136.627360][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.959734][ T6232] loop2: detected capacity change from 0 to 32768 [ 137.247199][ T6232] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 138.536184][ T5844] ocfs2: Unmounting device (7,2) on (node local) [ 139.136598][ T6268] loop0: detected capacity change from 0 to 32768 [ 139.221833][ T6268] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.90 (6268) [ 139.511952][ T6268] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 139.583593][ T6268] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm [ 139.704928][ T6268] BTRFS info (device loop0): using free-space-tree [ 139.913079][ T5149] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 139.913467][ T5837] Bluetooth: hci6: command 0xfc11 tx timeout [ 139.981925][ T6272] sp0: Synchronizing with TNC [ 140.141184][ T6302] binder: 6301:6302 ioctl c0306201 2000000003c0 returned -14 [ 140.537559][ T6309] loop1: detected capacity change from 0 to 1024 [ 140.566615][ T6309] EXT4-fs: Ignoring removed nobh option [ 140.608588][ T6309] EXT4-fs: Ignoring removed bh option [ 140.721343][ T6309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.877725][ T6309] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4112: comm syz.1.98: Allocating blocks 385-513 which overlap fs metadata [ 141.079703][ T6309] EXT4-fs (loop1): pa ffff8880556fa9f8: logic 16, phys. 129, len 24 [ 141.087837][ T6309] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5363: group 0, free 0, pa_free 8 [ 141.168434][ T5842] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.560410][ T6068] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 141.620161][ T6320] loop5: detected capacity change from 0 to 1024 [ 141.688710][ T6068] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 141.799194][ T6320] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.821124][ T6320] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 142.031108][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.115105][ T6320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.397283][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.418505][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.440108][ T6327] loop0: detected capacity change from 0 to 512 [ 142.650577][ T6327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.763097][ T6327] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.840229][ T5848] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.169992][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.300405][ T6354] loop3: detected capacity change from 0 to 128 [ 147.091460][ T6385] loop0: detected capacity change from 0 to 2048 [ 147.166159][ T6385] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 147.230250][ T6385] UDF-fs: Scanning with blocksize 512 failed [ 147.294863][ T6385] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.624290][ T6394] netlink: 'syz.4.124': attribute type 1 has an invalid length. [ 147.853675][ T6400] loop1: detected capacity change from 0 to 2048 [ 147.928061][ T6400] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.948214][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 148.155677][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 148.165362][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.187939][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.222529][ T43] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 148.238337][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.258812][ T43] usb 5-1: config 0 descriptor?? [ 148.501264][ T6410] process 'syz.0.128' launched './file0' with NULL argv: empty string added [ 148.682081][ T6415] netlink: 2020 bytes leftover after parsing attributes in process `syz.1.131'. [ 148.710527][ T43] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 148.723154][ T6415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.131'. [ 148.740959][ T43] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 148.753110][ T43] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 148.774466][ T43] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 148.798524][ T43] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 148.818178][ T43] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 148.837131][ T43] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 148.860532][ T43] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 148.912269][ T43] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 148.951790][ T43] hid-rmi 0003:06CB:81A7.0003: unbalanced collection at end of report description [ 148.989449][ T43] hid-rmi 0003:06CB:81A7.0003: parse failed [ 149.042603][ T43] hid-rmi 0003:06CB:81A7.0003: probe with driver hid-rmi failed with error -22 [ 149.070711][ T43] usb 5-1: USB disconnect, device number 2 [ 151.406025][ T30] audit: type=1800 audit(1749921986.931:20): pid=6443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.140" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 153.429772][ T6023] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.036009][ T6023] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.225115][ T6023] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.318636][ T6499] loop2: detected capacity change from 0 to 128 [ 154.370439][ T6499] EXT4-fs: Ignoring removed nobh option [ 154.436078][ T6499] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.586126][ T6023] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.605323][ T6499] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.408977][ T6023] bridge_slave_1: left allmulticast mode [ 155.435477][ T6023] bridge_slave_1: left promiscuous mode [ 155.452219][ T5844] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.484783][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.578947][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.589295][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.604430][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.623439][ T6023] bridge_slave_0: left allmulticast mode [ 155.629145][ T6023] bridge_slave_0: left promiscuous mode [ 155.635735][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.655794][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.704252][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.122986][ T5917] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 156.339624][ T5917] usb 3-1: config 0 has no interfaces? [ 156.381449][ T5917] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.399841][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.453045][ T5917] usb 3-1: Product: syz [ 156.476151][ T5917] usb 3-1: Manufacturer: syz [ 156.502596][ T5917] usb 3-1: SerialNumber: syz [ 156.567349][ T5917] usb 3-1: config 0 descriptor?? [ 156.766080][ T6553] loop4: detected capacity change from 0 to 1024 [ 156.810280][ T6553] EXT4-fs: Ignoring removed nobh option [ 156.813697][ T6519] loop5: detected capacity change from 0 to 32768 [ 156.847090][ T6553] EXT4-fs: Ignoring removed bh option [ 156.865173][ T43] usb 3-1: USB disconnect, device number 3 [ 156.949088][ T6519] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 156.996175][ T6553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.199449][ T6553] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4112: comm syz.4.169: Allocating blocks 385-513 which overlap fs metadata [ 157.290446][ T6553] EXT4-fs (loop4): pa ffff8880556fa2b8: logic 16, phys. 129, len 24 [ 157.298597][ T6553] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5363: group 0, free 0, pa_free 8 [ 157.687781][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.714450][ T5944] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 157.748703][ T5848] ocfs2: Unmounting device (7,5) on (node local) [ 157.763816][ T5149] Bluetooth: hci5: command tx timeout [ 157.883836][ T5944] usb 1-1: Using ep0 maxpacket: 16 [ 157.901798][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.913330][ T5924] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 158.037071][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.175937][ T5944] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 158.347770][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.684168][ T5944] usb 1-1: config 0 descriptor?? [ 158.916914][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.985993][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.000836][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.023552][ T5924] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 159.026986][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.033334][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.068655][ T6023] bond0 (unregistering): Released all slaves [ 159.092105][ T5924] usb 3-1: config 0 descriptor?? [ 159.339139][ T6568] Zero length message leads to an empty skb [ 159.350353][ T5944] usbhid 1-1:0.0: can't add hid device: -71 [ 159.363516][ T5944] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 159.391632][ T5944] usb 1-1: USB disconnect, device number 3 [ 159.566201][ T5924] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 159.604465][ T5924] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 159.738027][ T5924] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE [ 159.833007][ T5149] Bluetooth: hci5: command tx timeout [ 159.947975][ T5924] cp2112 0003:10C4:EA90.0004: error requesting SMBus config [ 159.984799][ T5924] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -5 [ 160.002991][ T6023] hsr_slave_0: left promiscuous mode [ 160.036821][ T6023] hsr_slave_1: left promiscuous mode [ 160.062096][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.096674][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.134397][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.184342][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.440953][ T6023] veth1_macvtap: left promiscuous mode [ 160.449083][ T6585] loop5: detected capacity change from 0 to 8192 [ 160.465947][ T6023] veth0_macvtap: left promiscuous mode [ 160.490945][ T6585] vfat: Unknown parameter '٘z HU1ZI葮MG*07j‰R?H>@`e/.O+{FN\?tZ~94N$'^-tk'Rƹ_'"R!&Yne[HxLAk"' [ 160.510468][ T6023] veth1_vlan: left promiscuous mode [ 160.526600][ T6023] veth0_vlan: left promiscuous mode [ 160.617627][ T5917] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 160.658908][ T5917] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.888635][ T6601] loop4: detected capacity change from 0 to 2048 [ 161.019422][ T6601] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.623912][ T10] usb 3-1: USB disconnect, device number 4 [ 161.693226][ T5924] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 161.883271][ T5924] usb 6-1: Using ep0 maxpacket: 8 [ 161.913262][ T5149] Bluetooth: hci5: command tx timeout [ 161.920278][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.943397][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.955042][ T5924] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 161.975480][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.013609][ T5924] usb 6-1: config 0 descriptor?? [ 162.258406][ T5917] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 162.323388][ T5917] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 162.853401][ T6023] team0 (unregistering): Port device team_slave_1 removed [ 162.942316][ T6023] team0 (unregistering): Port device team_slave_0 removed [ 163.569278][ T6634] Bluetooth: MGMT ver 1.23 [ 163.575899][ T6634] Bluetooth: hci0: service_discovery: too big uuid_count value 65062 [ 163.995782][ T5149] Bluetooth: hci5: command tx timeout [ 164.116783][ T5924] usbhid 6-1:0.0: can't add hid device: -71 [ 164.133438][ T5924] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 164.187412][ T5924] usb 6-1: USB disconnect, device number 3 [ 165.177636][ T6524] chnl_net:caif_netlink_parms(): no params data found [ 165.420771][ T5924] IPVS: starting estimator thread 0... [ 165.439618][ T6658] tipc: Started in network mode [ 165.449235][ T6658] tipc: Node identity ac1414aa, cluster identity 4711 [ 165.479142][ T6658] tipc: Enabled bearer , priority 10 [ 165.533091][ T6660] IPVS: using max 21 ests per chain, 50400 per kthread [ 165.644599][ T10] libceph: connect (1)[c::]:6789 error -101 [ 165.651092][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 165.677197][ T6661] ceph: No mds server is up or the cluster is laggy [ 165.962441][ T6673] netlink: 'syz.4.197': attribute type 1 has an invalid length. [ 166.238360][ T6673] bond1: entered promiscuous mode [ 166.271098][ T6673] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.434607][ T6674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.455914][ T6674] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 166.534122][ T6674] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 166.541169][ T6691] loop1: detected capacity change from 0 to 256 [ 166.604321][ T5924] tipc: Node number set to 2886997162 [ 166.617812][ T6691] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 166.644724][ T6674] bond1: (slave ip6gre1): making interface the new active one [ 166.668942][ T6674] ip6gre1: entered promiscuous mode [ 166.685794][ T6674] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 166.687318][ T6691] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 166.840485][ T6524] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.873359][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.902395][ T6524] bridge_slave_0: entered allmulticast mode [ 166.926090][ T6524] bridge_slave_0: entered promiscuous mode [ 166.966422][ T6524] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.999699][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.039527][ T6524] bridge_slave_1: entered allmulticast mode [ 167.070182][ T6524] bridge_slave_1: entered promiscuous mode [ 167.328380][ T6697] loop4: detected capacity change from 0 to 512 [ 167.351435][ T6697] EXT4-fs: Ignoring removed orlov option [ 167.493916][ T6697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.687561][ T6697] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.700372][ T6524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.828994][ T6524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.316395][ T6524] team0: Port device team_slave_0 added [ 168.375349][ T6524] team0: Port device team_slave_1 added [ 168.638236][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.753473][ T5944] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 168.886693][ T6524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.910661][ T6524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.983397][ T5944] usb 3-1: Using ep0 maxpacket: 32 [ 169.004456][ T5944] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 169.030809][ T6524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.066649][ T5944] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 169.089618][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 169.120972][ T5944] usb 3-1: Product: syz [ 169.139231][ T5944] usb 3-1: Manufacturer: syz [ 169.168867][ T6524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.186470][ T5944] usb 3-1: SerialNumber: syz [ 169.235743][ T5944] usb 3-1: config 0 descriptor?? [ 169.240891][ T6524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.285848][ T6711] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 169.373023][ T6524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.748042][ T5944] usb 3-1: USB disconnect, device number 5 [ 170.039708][ T6524] hsr_slave_0: entered promiscuous mode [ 170.138205][ T6524] hsr_slave_1: entered promiscuous mode [ 170.180791][ T6524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.242390][ T6524] Cannot create hsr debugfs directory [ 171.385096][ T6717] loop4: detected capacity change from 0 to 40427 [ 172.422166][ T6524] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 172.503761][ T6768] input: syz1 as /devices/virtual/input/input8 [ 172.542709][ T6524] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 172.671690][ T6524] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 174.113012][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 174.312020][ T6790] input: syz0 as /devices/virtual/input/input9 [ 174.313122][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 174.400370][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.432406][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.470172][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.514764][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 174.525559][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.554475][ T10] usb 5-1: config 0 descriptor?? [ 175.080118][ T10] koneplus 0003:1E7D:2E22.0007: item fetching failed at offset 0/2 [ 175.112144][ T10] koneplus 0003:1E7D:2E22.0007: parse failed [ 175.161376][ T10] koneplus 0003:1E7D:2E22.0007: probe with driver koneplus failed with error -22 [ 175.427650][ T6798] loop5: detected capacity change from 0 to 2048 [ 175.471704][ T5944] usb 5-1: USB disconnect, device number 3 [ 175.943404][ T5970] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 176.119543][ T5970] usb 2-1: config 0 has no interfaces? [ 176.142087][ T5970] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.163576][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.175080][ T5970] usb 2-1: Product: syz [ 176.181547][ T5970] usb 2-1: Manufacturer: syz [ 176.199913][ T5970] usb 2-1: SerialNumber: syz [ 176.262769][ T5970] usb 2-1: config 0 descriptor?? [ 176.576110][ T5970] usb 2-1: USB disconnect, device number 3 [ 177.632640][ T6809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.236'. [ 179.169309][ T6823] loop0: detected capacity change from 0 to 64 [ 179.262372][ T6825] loop1: detected capacity change from 0 to 512 [ 179.340404][ T6524] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 179.393765][ T6825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.445157][ T6825] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.602374][ T30] audit: type=1800 audit(1749922015.121:21): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.241" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 179.732933][ T30] audit: type=1800 audit(1749922015.151:22): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.241" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 180.143424][ T6832] loop0: detected capacity change from 0 to 40427 [ 180.223284][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.323255][ T6832] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 180.379902][ T6524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.714278][ T6861] netlink: 'syz.1.246': attribute type 10 has an invalid length. [ 180.735313][ T6524] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.800560][ T6861] netlink: 40 bytes leftover after parsing attributes in process `syz.1.246'. [ 180.885465][ T6860] syz.0.242: attempt to access beyond end of device [ 180.885465][ T6860] loop0: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 180.929615][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.936905][ T6024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.010430][ T6860] syz.0.242: attempt to access beyond end of device [ 181.010430][ T6860] loop0: rw=2049, sector=79872, nr_sectors = 2048 limit=40427 [ 181.044573][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.051825][ T6024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.154250][ T6865] fuse: root generation should be zero [ 181.185282][ T6861] team0: Port device geneve0 added [ 181.241568][ T6860] syz.0.242: attempt to access beyond end of device [ 181.241568][ T6860] loop0: rw=2049, sector=49152, nr_sectors = 2048 limit=40427 [ 181.382095][ T6860] syz.0.242: attempt to access beyond end of device [ 181.382095][ T6860] loop0: rw=2049, sector=51200, nr_sectors = 2048 limit=40427 [ 181.423182][ T5970] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 181.458185][ T6860] syz.0.242: attempt to access beyond end of device [ 181.458185][ T6860] loop0: rw=2049, sector=57344, nr_sectors = 1080 limit=40427 [ 181.635147][ T5970] usb 6-1: Using ep0 maxpacket: 16 [ 181.669607][ T5970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 181.719516][ T5970] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 181.733103][ T5970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.760449][ T6881] loop4: detected capacity change from 0 to 512 [ 181.767022][ T5970] usb 6-1: Product: syz [ 181.773383][ T5970] usb 6-1: Manufacturer: syz [ 181.788194][ T5970] usb 6-1: SerialNumber: syz [ 181.799266][ T5842] syz-executor: attempt to access beyond end of device [ 181.799266][ T5842] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 181.843761][ T5842] CPU: 1 UID: 0 PID: 5842 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 181.843812][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.843834][ T5842] Call Trace: [ 181.843845][ T5842] [ 181.843858][ T5842] dump_stack_lvl+0x16c/0x1f0 [ 181.843931][ T5842] f2fs_handle_critical_error+0x621/0x9f0 [ 181.843979][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.844025][ T5842] ? f2fs_build_fault_attr+0x53/0x1f0 [ 181.844072][ T5842] f2fs_write_end_io+0x785/0xc20 [ 181.844123][ T5842] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 181.844177][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.844232][ T5842] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 181.844279][ T5842] bio_endio+0x70d/0x850 [ 181.844318][ T5842] submit_bio_noacct+0x56d/0x1eb0 [ 181.844376][ T5842] __submit_merged_bio+0x33c/0x770 [ 181.844430][ T5842] __submit_merged_write_cond+0x319/0x3f0 [ 181.844491][ T5842] f2fs_write_cache_pages+0x2067/0x2570 [ 181.844576][ T5842] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 181.844641][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.844684][ T5842] ? __lock_acquire+0x622/0x1c90 [ 181.844753][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.844840][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.844936][ T5842] ? check_path.constprop.0+0x24/0x50 [ 181.844989][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.845041][ T5842] f2fs_write_data_pages+0x4ad/0xd90 [ 181.845111][ T5842] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 181.845182][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.845227][ T5842] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 181.845287][ T5842] do_writepages+0x27a/0x600 [ 181.845352][ T5842] ? __pfx_do_writepages+0x10/0x10 [ 181.845407][ T5842] ? do_raw_spin_unlock+0x172/0x230 [ 181.845447][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.845490][ T5842] ? _raw_spin_unlock+0x28/0x50 [ 181.845548][ T5842] filemap_fdatawrite_wbc+0x104/0x160 [ 181.845608][ T5842] ? __pfx_stack_trace_save+0x10/0x10 [ 181.845659][ T5842] __filemap_fdatawrite_range+0xb2/0xf0 [ 181.845705][ T5842] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 181.845749][ T5842] ? check_path.constprop.0+0x24/0x50 [ 181.845853][ T5842] ? find_held_lock+0x2b/0x80 [ 181.845905][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.845950][ T5842] ? do_raw_spin_unlock+0x172/0x230 [ 181.845989][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.846039][ T5842] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 181.846117][ T5842] block_operations+0x2a3/0xfd0 [ 181.846186][ T5842] ? __pfx_block_operations+0x10/0x10 [ 181.846241][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.846340][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.846385][ T5842] ? down_write+0x14d/0x200 [ 181.846423][ T5842] ? __pfx_down_write+0x10/0x10 [ 181.846463][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.846506][ T5842] ? rcu_is_watching+0x12/0xc0 [ 181.846558][ T5842] f2fs_write_checkpoint+0x2b8/0x4c60 [ 181.846625][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.846668][ T5842] ? kfree+0x2b4/0x4d0 [ 181.846722][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.846770][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.846832][ T5842] ? rcu_is_watching+0x12/0xc0 [ 181.846883][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.846926][ T5842] ? kthread_stop+0x273/0x650 [ 181.846990][ T5842] kill_f2fs_super+0x3c2/0x470 [ 181.847050][ T5842] ? __pfx_kill_f2fs_super+0x10/0x10 [ 181.847108][ T5842] ? lockdep_hardirqs_on+0x7c/0x110 [ 181.847185][ T5842] deactivate_locked_super+0xc1/0x1a0 [ 181.847224][ T5842] deactivate_super+0xde/0x100 [ 181.847262][ T5842] cleanup_mnt+0x225/0x450 [ 181.847305][ T5842] task_work_run+0x150/0x240 [ 181.847344][ T5842] ? __pfx_task_work_run+0x10/0x10 [ 181.847378][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.847425][ T5842] ? __pfx___x64_sys_umount+0x10/0x10 [ 181.847480][ T5842] exit_to_user_mode_loop+0xeb/0x110 [ 181.847522][ T5842] do_syscall_64+0x3f6/0x4c0 [ 181.847560][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.847596][ T5842] RIP: 0033:0x7f96e258fc57 [ 181.847623][ T5842] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 181.847656][ T5842] RSP: 002b:00007ffedfebd168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 181.847690][ T5842] RAX: 0000000000000000 RBX: 00007f96e2610925 RCX: 00007f96e258fc57 [ 181.847717][ T5842] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffedfebd220 [ 181.847738][ T5842] RBP: 00007ffedfebd220 R08: 0000000000000000 R09: 0000000000000000 [ 181.847758][ T5842] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffedfebe2b0 [ 181.847781][ T5842] R13: 00007f96e2610925 R14: 000000000002c44f R15: 00007ffedfebe2f0 [ 181.847829][ T5842] [ 181.848933][ T5842] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 182.283250][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.353157][ T5970] usb 6-1: config 0 descriptor?? [ 182.389067][ T5970] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 182.421371][ T5970] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 182.443467][ T6881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.456845][ T6881] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.591672][ T6881] EXT4-fs (loop4): shut down requested (2) [ 182.662661][ T6524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.831209][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.997838][ T5970] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 183.443537][ T6068] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 183.609987][ T6068] usb 3-1: config 0 has no interfaces? [ 183.625850][ T5970] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 183.650534][ T6068] usb 3-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 183.662439][ T5970] em28xx 6-1:0.0: board has no eeprom [ 183.677849][ T6068] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.728980][ T6068] usb 3-1: Product: syz [ 183.741189][ T6068] usb 3-1: Manufacturer: syz [ 183.755519][ T6068] usb 3-1: SerialNumber: syz [ 183.775891][ T5970] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 183.805716][ T6068] usb 3-1: config 0 descriptor?? [ 183.826791][ T5970] em28xx 6-1:0.0: dvb set to bulk mode. [ 183.858046][ T6068] em28xx 6-1:0.0: Binding DVB extension [ 183.891734][ T5970] usb 6-1: USB disconnect, device number 4 [ 183.945887][ T5970] em28xx 6-1:0.0: Disconnecting em28xx [ 184.086408][ T43] usb 3-1: USB disconnect, device number 6 [ 184.198293][ T6068] em28xx 6-1:0.0: Registering input extension [ 184.240040][ T5970] em28xx 6-1:0.0: Closing input extension [ 184.302262][ T6524] veth0_vlan: entered promiscuous mode [ 184.347132][ T5970] em28xx 6-1:0.0: Freeing device [ 184.401085][ T6524] veth1_vlan: entered promiscuous mode [ 184.570794][ T6524] veth0_macvtap: entered promiscuous mode [ 184.597695][ T6524] veth1_macvtap: entered promiscuous mode [ 184.697505][ T6524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.759728][ T6524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.817222][ T6524] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.873046][ T6524] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.902762][ T6524] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.922901][ T6524] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.274443][ T5837] Bluetooth: hci5: command 0x0405 tx timeout [ 186.338275][ T6949] loop0: detected capacity change from 0 to 64 [ 186.385810][ T6949] hfs: Unknown parameter '0x0000000000000000' [ 186.456804][ T6945] loop1: detected capacity change from 0 to 40427 [ 186.497564][ T5990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.508631][ T6945] F2FS-fs (loop1): invalid crc value [ 186.607524][ T5990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.628564][ T6945] F2FS-fs (loop1): Start checkpoint disabled! [ 186.656152][ T6945] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 186.826426][ T6027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.933226][ T6027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.944066][ T1145] kworker/u8:6: attempt to access beyond end of device [ 186.944066][ T1145] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 187.020855][ T1145] CPU: 0 UID: 0 PID: 1145 Comm: kworker/u8:6 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 187.020907][ T1145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.020932][ T1145] Workqueue: writeback wb_workfn (flush-7:1) [ 187.021005][ T1145] Call Trace: [ 187.021017][ T1145] [ 187.021031][ T1145] dump_stack_lvl+0x16c/0x1f0 [ 187.021096][ T1145] f2fs_handle_critical_error+0x621/0x9f0 [ 187.021153][ T1145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.021199][ T1145] ? f2fs_build_fault_attr+0x53/0x1f0 [ 187.021249][ T1145] f2fs_write_end_io+0x785/0xc20 [ 187.021303][ T1145] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 187.021361][ T1145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.021418][ T1145] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 187.021467][ T1145] bio_endio+0x70d/0x850 [ 187.021509][ T1145] submit_bio_noacct+0x56d/0x1eb0 [ 187.021571][ T1145] __submit_merged_bio+0x33c/0x770 [ 187.021628][ T1145] __submit_merged_write_cond+0x319/0x3f0 [ 187.021694][ T1145] f2fs_write_cache_pages+0x2067/0x2570 [ 187.021786][ T1145] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 187.021853][ T1145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.021896][ T1145] ? ieee80211_inform_bss+0x781/0x1140 [ 187.021963][ T1145] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 187.022118][ T1145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.022176][ T1145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.022231][ T1145] f2fs_write_data_pages+0x4ad/0xd90 [ 187.022299][ T1145] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 187.022373][ T1145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.022417][ T1145] ? __lock_acquire+0xb8a/0x1c90 [ 187.022478][ T1145] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 187.022540][ T1145] do_writepages+0x27a/0x600 [ 187.022609][ T1145] ? __pfx_do_writepages+0x10/0x10 [ 187.022666][ T1145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.022711][ T1145] ? reacquire_held_locks+0xcd/0x1f0 [ 187.022769][ T1145] ? writeback_sb_inodes+0x3a4/0xf90 [ 187.022841][ T1145] __writeback_single_inode+0x160/0xfb0 [ 187.022907][ T1145] ? __pfx___writeback_single_inode+0x10/0x10 [ 187.022964][ T1145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.023008][ T1145] ? do_raw_spin_unlock+0x172/0x230 [ 187.023050][ T1145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.023103][ T1145] writeback_sb_inodes+0x601/0xf90 [ 187.023194][ T1145] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 187.023334][ T1145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.023378][ T1145] ? rcu_is_watching+0x12/0xc0 [ 187.023424][ T1145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.023469][ T1145] ? queue_io+0x3f6/0x520 [ 187.023528][ T1145] wb_writeback+0x419/0xb70 [ 187.023600][ T1145] ? __pfx_wb_writeback+0x10/0x10 [ 187.023656][ T1145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.023716][ T1145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.023760][ T1145] ? mark_held_locks+0x49/0x80 [ 187.023828][ T1145] wb_workfn+0x14d/0xbe0 [ 187.023895][ T1145] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 187.023956][ T1145] ? __pfx_wb_workfn+0x10/0x10 [ 187.024022][ T1145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.024072][ T1145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.024119][ T1145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.024164][ T1145] ? rcu_is_watching+0x12/0xc0 [ 187.024214][ T1145] process_one_work+0x9cf/0x1b70 [ 187.024271][ T1145] ? __pfx_process_one_work+0x10/0x10 [ 187.024307][ T1145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.024360][ T1145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.024401][ T1145] ? assign_work+0x1a0/0x250 [ 187.024463][ T1145] worker_thread+0x6c8/0xf10 [ 187.024522][ T1145] ? __pfx_worker_thread+0x10/0x10 [ 187.024557][ T1145] kthread+0x3c5/0x780 [ 187.024590][ T1145] ? __pfx_kthread+0x10/0x10 [ 187.024623][ T1145] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.024664][ T1145] ? rcu_is_watching+0x12/0xc0 [ 187.024706][ T1145] ? __pfx_kthread+0x10/0x10 [ 187.024740][ T1145] ret_from_fork+0x5d7/0x6f0 [ 187.024789][ T1145] ? __pfx_kthread+0x10/0x10 [ 187.024821][ T1145] ret_from_fork_asm+0x1a/0x30 [ 187.024883][ T1145] [ 187.909103][ T1145] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 188.400258][ T6971] loop6: detected capacity change from 0 to 256 [ 188.441396][ T6971] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.493009][ T6971] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 188.635522][ T6971] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 189.203435][ T5917] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 189.363031][ T5917] usb 3-1: device descriptor read/64, error -71 [ 189.642938][ T5917] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 189.833422][ T5917] usb 3-1: device descriptor read/64, error -71 [ 190.026899][ T5917] usb usb3-port1: attempt power cycle [ 190.806883][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 190.823031][ T5917] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 190.905337][ T5917] usb 3-1: device descriptor read/8, error -71 [ 191.037546][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 191.131754][ T10] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 191.154121][ T5917] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 191.182313][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.225172][ T5917] usb 3-1: device descriptor read/8, error -71 [ 191.241736][ T10] usb 5-1: Product: syz [ 191.261566][ T10] usb 5-1: Manufacturer: syz [ 191.274189][ T10] usb 5-1: SerialNumber: syz [ 191.286300][ T10] usb 5-1: config 0 descriptor?? [ 191.363755][ T5917] usb usb3-port1: unable to enumerate USB device [ 191.614003][ T10] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 192.956732][ T10] gspca_sunplus: reg_r err -71 [ 192.957688][ T5837] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 192.971083][ T5837] Bluetooth: hci3: Injecting HCI hardware error event [ 192.979548][ T5837] Bluetooth: hci3: hardware error 0x00 [ 193.023069][ T10] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 193.129016][ T10] usb 5-1: USB disconnect, device number 4 [ 193.144646][ T7047] loop6: detected capacity change from 0 to 1024 [ 193.154367][ T7047] hfsplus: unable to find HFS+ superblock [ 193.721281][ T7056] loop2: detected capacity change from 0 to 128 [ 193.802411][ T7056] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 194.301478][ T5844] FAT-fs (loop2): error, invalid access to FAT (entry 0x0affffff) [ 194.373366][ T5844] FAT-fs (loop2): Filesystem has been set read-only [ 195.273266][ T5837] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 196.693400][ T7097] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 196.816866][ T30] audit: type=1326 audit(1749922032.331:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f819572ab19 code=0x7ffc0000 [ 196.933027][ T30] audit: type=1326 audit(1749922032.331:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f819572ab19 code=0x7ffc0000 [ 197.142454][ T30] audit: type=1326 audit(1749922032.331:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f819572ab19 code=0x7ffc0000 [ 197.293165][ T30] audit: type=1326 audit(1749922032.331:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819578e929 code=0x7ffc0000 [ 197.352814][ T6022] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.442274][ T30] audit: type=1326 audit(1749922032.331:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f819572ab19 code=0x7ffc0000 [ 197.525795][ T30] audit: type=1326 audit(1749922032.331:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819578e929 code=0x7ffc0000 [ 197.595155][ T30] audit: type=1326 audit(1749922032.331:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f819572ab19 code=0x7ffc0000 [ 197.741114][ T30] audit: type=1326 audit(1749922032.331:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819578e929 code=0x7ffc0000 [ 197.884668][ T30] audit: type=1326 audit(1749922032.371:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819578e929 code=0x7ffc0000 [ 197.962672][ T30] audit: type=1326 audit(1749922032.371:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.6.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f819572ab19 code=0x7ffc0000 [ 197.998121][ T6022] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.491773][ T6022] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.075116][ T6022] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.129013][ T7122] capability: warning: `syz.6.311' uses 32-bit capabilities (legacy support in use) [ 199.830846][ T5149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 199.853222][ T5149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 199.861340][ T5149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 199.872158][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 199.889083][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.483075][ T6022] bridge_slave_1: left allmulticast mode [ 200.545556][ T6022] bridge_slave_1: left promiscuous mode [ 200.552340][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.769445][ T6022] bridge_slave_0: left allmulticast mode [ 200.802907][ T6022] bridge_slave_0: left promiscuous mode [ 200.811938][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.916999][ T5837] Bluetooth: hci3: command tx timeout [ 202.373050][ T6068] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 202.397102][ T7172] netlink: 'syz.1.335': attribute type 10 has an invalid length. [ 202.408388][ T7172] netlink: 40 bytes leftover after parsing attributes in process `syz.1.335'. [ 202.586388][ T6068] usb 1-1: config 0 has no interfaces? [ 202.592196][ T6068] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 202.638314][ T6068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.707529][ T6068] usb 1-1: config 0 descriptor?? [ 202.953411][ T6068] usb 1-1: USB disconnect, device number 4 [ 203.838745][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.845221][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.993344][ T5837] Bluetooth: hci3: command tx timeout [ 204.050110][ T6022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.271912][ T6022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.336029][ T6022] bond0 (unregistering): Released all slaves [ 204.502108][ T7172] dummy0: entered promiscuous mode [ 205.750981][ T7192] input: syz0 as /devices/virtual/input/input11 [ 206.073185][ T5837] Bluetooth: hci3: command tx timeout [ 206.082432][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.341'. [ 206.331897][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033d85400: rx timeout, send abort [ 207.066539][ T7132] chnl_net:caif_netlink_parms(): no params data found [ 208.153842][ T5837] Bluetooth: hci3: command tx timeout [ 209.098012][ T7218] loop6: detected capacity change from 0 to 40427 [ 209.283789][ T7218] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 209.336615][ T6022] hsr_slave_0: left promiscuous mode [ 209.715766][ T6022] hsr_slave_1: left promiscuous mode [ 209.757642][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.832137][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.049653][ T7218] syz.6.345: attempt to access beyond end of device [ 210.049653][ T7218] loop6: rw=2049, sector=77824, nr_sectors = 2208 limit=40427 [ 210.057257][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.087669][ T7218] syz.6.345: attempt to access beyond end of device [ 210.087669][ T7218] loop6: rw=2049, sector=80032, nr_sectors = 1888 limit=40427 [ 210.099037][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.129279][ T7218] syz.6.345: attempt to access beyond end of device [ 210.129279][ T7218] loop6: rw=2049, sector=49152, nr_sectors = 2048 limit=40427 [ 210.170354][ T7218] syz.6.345: attempt to access beyond end of device [ 210.170354][ T7218] loop6: rw=2049, sector=51200, nr_sectors = 2048 limit=40427 [ 210.403363][ T7218] syz.6.345: attempt to access beyond end of device [ 210.403363][ T7218] loop6: rw=2049, sector=57344, nr_sectors = 20480 limit=40427 [ 210.479920][ T7218] syz.6.345: attempt to access beyond end of device [ 210.479920][ T7218] loop6: rw=2049, sector=81920, nr_sectors = 3928 limit=40427 [ 210.708007][ T6022] veth1_macvtap: left promiscuous mode [ 210.773352][ T6022] veth0_macvtap: left promiscuous mode [ 210.783489][ T6022] veth1_vlan: left promiscuous mode [ 210.788842][ T6022] veth0_vlan: left promiscuous mode [ 211.729203][ T6524] syz-executor: attempt to access beyond end of device [ 211.729203][ T6524] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 212.003832][ T6524] CPU: 1 UID: 0 PID: 6524 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 212.003883][ T6524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.003905][ T6524] Call Trace: [ 212.003926][ T6524] [ 212.003940][ T6524] dump_stack_lvl+0x16c/0x1f0 [ 212.004008][ T6524] f2fs_handle_critical_error+0x621/0x9f0 [ 212.004057][ T6524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.004101][ T6524] ? f2fs_build_fault_attr+0x53/0x1f0 [ 212.004148][ T6524] f2fs_write_end_io+0x785/0xc20 [ 212.004200][ T6524] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 212.004253][ T6524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.004308][ T6524] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 212.004355][ T6524] bio_endio+0x70d/0x850 [ 212.004396][ T6524] submit_bio_noacct+0x56d/0x1eb0 [ 212.004455][ T6524] __submit_merged_bio+0x33c/0x770 [ 212.004510][ T6524] __submit_merged_write_cond+0x319/0x3f0 [ 212.004571][ T6524] f2fs_write_cache_pages+0x2067/0x2570 [ 212.004655][ T6524] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 212.004714][ T6524] ? ring_buffer_lock_reserve+0x6ca/0x11b0 [ 212.004775][ T6524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.004823][ T6524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.004866][ T6524] ? rb_commit+0x11f/0x9f0 [ 212.004921][ T6524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.004982][ T6524] ? ring_buffer_unlock_commit+0x2e8/0x620 [ 212.005087][ T6524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.005132][ T6524] ? mod_memcg_lruvec_state+0x394/0x610 [ 212.005195][ T6524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.005239][ T6524] ? __mod_zone_page_state+0xcc/0x1a0 [ 212.005297][ T6524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.005349][ T6524] f2fs_write_data_pages+0x4ad/0xd90 [ 212.005413][ T6524] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 212.005483][ T6524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.005528][ T6524] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 212.005587][ T6524] do_writepages+0x27a/0x600 [ 212.005652][ T6524] ? __pfx_do_writepages+0x10/0x10 [ 212.005707][ T6524] ? do_raw_spin_unlock+0x172/0x230 [ 212.005748][ T6524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.005792][ T6524] ? _raw_spin_unlock+0x28/0x50 [ 212.005850][ T6524] filemap_fdatawrite_wbc+0x104/0x160 [ 212.005922][ T6524] __filemap_fdatawrite_range+0xb2/0xf0 [ 212.005968][ T6524] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 212.006072][ T6524] ? find_held_lock+0x2b/0x80 [ 212.006119][ T6524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.006163][ T6524] ? do_raw_spin_unlock+0x172/0x230 [ 212.006205][ T6524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.006257][ T6524] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 212.006337][ T6524] block_operations+0x2a3/0xfd0 [ 212.006401][ T6524] ? __pfx___schedule+0x10/0x10 [ 212.006459][ T6524] ? __pfx_block_operations+0x10/0x10 [ 212.006574][ T6524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.006617][ T6524] ? down_write+0x14d/0x200 [ 212.006655][ T6524] ? __pfx_down_write+0x10/0x10 [ 212.006695][ T6524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.006739][ T6524] ? rcu_is_watching+0x12/0xc0 [ 212.006791][ T6524] f2fs_write_checkpoint+0x2b8/0x4c60 [ 212.006875][ T6524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.006924][ T6524] ? kfree+0x2b4/0x4d0 [ 212.006979][ T6524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.007027][ T6524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.007071][ T6524] ? rcu_is_watching+0x12/0xc0 [ 212.007115][ T6524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.007159][ T6524] ? kthread_stop+0x273/0x650 [ 212.007222][ T6524] kill_f2fs_super+0x3c2/0x470 [ 212.007283][ T6524] ? __pfx_kill_f2fs_super+0x10/0x10 [ 212.007343][ T6524] ? lockdep_hardirqs_on+0x7c/0x110 [ 212.007421][ T6524] deactivate_locked_super+0xc1/0x1a0 [ 212.007461][ T6524] deactivate_super+0xde/0x100 [ 212.007501][ T6524] cleanup_mnt+0x225/0x450 [ 212.007543][ T6524] task_work_run+0x150/0x240 [ 212.007583][ T6524] ? __pfx_task_work_run+0x10/0x10 [ 212.007617][ T6524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.007665][ T6524] ? __pfx___x64_sys_umount+0x10/0x10 [ 212.007721][ T6524] exit_to_user_mode_loop+0xeb/0x110 [ 212.007764][ T6524] do_syscall_64+0x3f6/0x4c0 [ 212.007803][ T6524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.007840][ T6524] RIP: 0033:0x7f819578fc57 [ 212.007868][ T6524] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 212.007904][ T6524] RSP: 002b:00007ffc8a377168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 212.007945][ T6524] RAX: 0000000000000000 RBX: 00007f8195810925 RCX: 00007f819578fc57 [ 212.007969][ T6524] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8a377220 [ 212.007991][ T6524] RBP: 00007ffc8a377220 R08: 0000000000000000 R09: 0000000000000000 [ 212.008014][ T6524] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc8a3782b0 [ 212.008037][ T6524] R13: 00007f8195810925 R14: 000000000003375c R15: 00007ffc8a3782f0 [ 212.008086][ T6524] [ 212.008099][ T6524] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 214.274087][ T7265] [ 214.276449][ T7265] ====================================================== [ 214.283462][ T7265] WARNING: possible circular locking dependency detected [ 214.290478][ T7265] 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 Not tainted [ 214.297583][ T7265] ------------------------------------------------------ [ 214.304593][ T7265] syz.4.361/7265 is trying to acquire lock: [ 214.310480][ T7265] ffffffff908b47e8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xb36/0x1870 [ 214.320296][ T7265] [ 214.320296][ T7265] but task is already holding lock: [ 214.327656][ T7265] ffff8880260158b0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 214.338941][ T7265] [ 214.338941][ T7265] which lock already depends on the new lock. [ 214.338941][ T7265] [ 214.349344][ T7265] [ 214.349344][ T7265] the existing dependency chain (in reverse order) is: [ 214.358355][ T7265] [ 214.358355][ T7265] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 214.366988][ T7265] blk_alloc_queue+0x619/0x760 [ 214.372286][ T7265] blk_mq_alloc_queue+0x175/0x290 [ 214.377854][ T7265] __blk_mq_alloc_disk+0x29/0x120 [ 214.383428][ T7265] loop_add+0x49e/0xb70 [ 214.388117][ T7265] loop_init+0x164/0x270 [ 214.392902][ T7265] do_one_initcall+0x123/0x6e0 [ 214.398204][ T7265] kernel_init_freeable+0x5c2/0x900 [ 214.403942][ T7265] kernel_init+0x1c/0x2b0 [ 214.408802][ T7265] ret_from_fork+0x5d7/0x6f0 [ 214.413937][ T7265] ret_from_fork_asm+0x1a/0x30 [ 214.419236][ T7265] [ 214.419236][ T7265] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 214.426472][ T7265] fs_reclaim_acquire+0x102/0x150 [ 214.432040][ T7265] kmem_cache_alloc_node_noprof+0x57/0x3b0 [ 214.438382][ T7265] __alloc_skb+0x2b2/0x380 [ 214.443345][ T7265] alloc_uevent_skb+0x7d/0x210 [ 214.448642][ T7265] kobject_uevent_env+0xca4/0x1870 [ 214.454314][ T7265] kobject_synth_uevent+0x7d4/0x8a0 [ 214.460047][ T7265] bus_uevent_store+0x3d/0x90 [ 214.465257][ T7265] bus_attr_store+0x74/0xb0 [ 214.470304][ T7265] sysfs_kf_write+0xf2/0x150 [ 214.475423][ T7265] kernfs_fop_write_iter+0x354/0x510 [ 214.481253][ T7265] vfs_write+0x6c7/0x1150 [ 214.486114][ T7265] ksys_write+0x12a/0x250 [ 214.490973][ T7265] do_syscall_64+0xcd/0x4c0 [ 214.495999][ T7265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.502417][ T7265] [ 214.502417][ T7265] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 214.510271][ T7265] __lock_acquire+0x126f/0x1c90 [ 214.515677][ T7265] lock_acquire+0x179/0x350 [ 214.520727][ T7265] __mutex_lock+0x199/0xb90 [ 214.525760][ T7265] kobject_uevent_env+0xb36/0x1870 [ 214.531400][ T7265] loop_set_status+0x9c9/0xb90 [ 214.536700][ T7265] loop_set_status_old+0x162/0x1d0 [ 214.542361][ T7265] lo_ioctl+0xb3f/0x2760 [ 214.547149][ T7265] blkdev_ioctl+0x277/0x6d0 [ 214.552179][ T7265] __x64_sys_ioctl+0x18e/0x210 [ 214.557483][ T7265] do_syscall_64+0xcd/0x4c0 [ 214.562520][ T7265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.568938][ T7265] [ 214.568938][ T7265] other info that might help us debug this: [ 214.568938][ T7265] [ 214.579156][ T7265] Chain exists of: [ 214.579156][ T7265] uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 214.579156][ T7265] [ 214.592927][ T7265] Possible unsafe locking scenario: [ 214.592927][ T7265] [ 214.600367][ T7265] CPU0 CPU1 [ 214.605720][ T7265] ---- ---- [ 214.611074][ T7265] lock(&q->q_usage_counter(io)#24); [ 214.616474][ T7265] lock(fs_reclaim); [ 214.623070][ T7265] lock(&q->q_usage_counter(io)#24); [ 214.630975][ T7265] lock(uevent_sock_mutex); [ 214.635569][ T7265] [ 214.635569][ T7265] *** DEADLOCK *** [ 214.635569][ T7265] [ 214.643702][ T7265] 3 locks held by syz.4.361/7265: [ 214.648718][ T7265] #0: ffff888142729400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2c/0xb90 [ 214.658172][ T7265] #1: ffff8880260158b0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 214.669982][ T7265] #2: ffff8880260158e8 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 214.681963][ T7265] [ 214.681963][ T7265] stack backtrace: [ 214.687847][ T7265] CPU: 0 UID: 0 PID: 7265 Comm: syz.4.361 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 214.687883][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.687899][ T7265] Call Trace: [ 214.687912][ T7265] [ 214.687923][ T7265] dump_stack_lvl+0x116/0x1f0 [ 214.687971][ T7265] print_circular_bug+0x275/0x350 [ 214.688015][ T7265] check_noncircular+0x14c/0x170 [ 214.688063][ T7265] __lock_acquire+0x126f/0x1c90 [ 214.688113][ T7265] lock_acquire+0x179/0x350 [ 214.688155][ T7265] ? kobject_uevent_env+0xb36/0x1870 [ 214.688190][ T7265] ? __pfx___might_resched+0x10/0x10 [ 214.688229][ T7265] __mutex_lock+0x199/0xb90 [ 214.688253][ T7265] ? kobject_uevent_env+0xb36/0x1870 [ 214.688285][ T7265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.688321][ T7265] ? kobject_uevent_env+0xb36/0x1870 [ 214.688354][ T7265] ? __pfx___mutex_lock+0x10/0x10 [ 214.688385][ T7265] ? __asan_memcpy+0x3c/0x60 [ 214.688411][ T7265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.688444][ T7265] ? kobject_get_path+0x8e/0x2a0 [ 214.688472][ T7265] ? kobject_uevent_env+0xb36/0x1870 [ 214.688504][ T7265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.688537][ T7265] kobject_uevent_env+0xb36/0x1870 [ 214.688573][ T7265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.688606][ T7265] ? __asan_memcpy+0x3c/0x60 [ 214.688633][ T7265] loop_set_status+0x9c9/0xb90 [ 214.688671][ T7265] loop_set_status_old+0x162/0x1d0 [ 214.688704][ T7265] ? __pfx_loop_set_status_old+0x10/0x10 [ 214.688736][ T7265] ? __lock_acquire+0x622/0x1c90 [ 214.688788][ T7265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.688821][ T7265] ? find_held_lock+0x2b/0x80 [ 214.688855][ T7265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.688906][ T7265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.688944][ T7265] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 214.688977][ T7265] lo_ioctl+0xb3f/0x2760 [ 214.689008][ T7265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.689041][ T7265] ? __lock_acquire+0xb8a/0x1c90 [ 214.689085][ T7265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.689118][ T7265] ? kasan_save_stack+0x42/0x60 [ 214.689146][ T7265] ? kasan_save_stack+0x33/0x60 [ 214.689174][ T7265] ? kasan_save_track+0x14/0x30 [ 214.689202][ T7265] ? kasan_save_free_info+0x3b/0x60 [ 214.689244][ T7265] ? __kasan_slab_free+0x51/0x70 [ 214.689274][ T7265] ? kfree+0x2b4/0x4d0 [ 214.689316][ T7265] ? tomoyo_path_number_perm+0x470/0x580 [ 214.689347][ T7265] ? security_file_ioctl+0x9b/0x240 [ 214.689379][ T7265] ? __x64_sys_ioctl+0xb7/0x210 [ 214.689423][ T7265] ? do_syscall_64+0xcd/0x4c0 [ 214.689447][ T7265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.689481][ T7265] ? __pfx_lo_ioctl+0x10/0x10 [ 214.689527][ T7265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.689562][ T7265] ? kasan_quarantine_put+0x10a/0x240 [ 214.689589][ T7265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.689622][ T7265] ? lockdep_hardirqs_on+0x7c/0x110 [ 214.689665][ T7265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.689700][ T7265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.689733][ T7265] ? find_held_lock+0x2b/0x80 [ 214.689767][ T7265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.689803][ T7265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.689836][ T7265] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 214.689868][ T7265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.689900][ T7265] ? blkdev_common_ioctl+0x1dd/0x2480 [ 214.689936][ T7265] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 214.689967][ T7265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.690000][ T7265] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 214.690032][ T7265] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 214.690065][ T7265] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 214.690122][ T7265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.690155][ T7265] ? find_held_lock+0x2b/0x80 [ 214.690186][ T7265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.690221][ T7265] ? __pfx_lo_ioctl+0x10/0x10 [ 214.690253][ T7265] blkdev_ioctl+0x277/0x6d0 [ 214.690283][ T7265] ? __pfx_blkdev_ioctl+0x10/0x10 [ 214.690317][ T7265] ? __pfx_blkdev_ioctl+0x10/0x10 [ 214.690348][ T7265] __x64_sys_ioctl+0x18e/0x210 [ 214.690395][ T7265] do_syscall_64+0xcd/0x4c0 [ 214.690421][ T7265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.690449][ T7265] RIP: 0033:0x7f793db8e929 [ 214.690471][ T7265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.690497][ T7265] RSP: 002b:00007f793ea73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.690522][ T7265] RAX: ffffffffffffffda RBX: 00007f793ddb5fa0 RCX: 00007f793db8e929 [ 214.690540][ T7265] RDX: 00002000000001c0 RSI: 0000000000004c02 RDI: 0000000000000004 [ 214.690557][ T7265] RBP: 00007f793dc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 214.690574][ T7265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.690590][ T7265] R13: 0000000000000000 R14: 00007f793ddb5fa0 R15: 00007ffc0c6cd9d8 [ 214.690618][ T7265] [ 215.362436][ T7266] loop1: detected capacity change from 0 to 32768 [ 215.530215][ T7266] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 215.530244][ T7266] allowing incompatible features above 0.0: (unknown version) [ 215.530260][ T7266] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 215.569691][ T7266] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 215.579951][ T7266] bcachefs (loop1): initializing new filesystem [ 215.596301][ T7266] bcachefs (loop1): going read-write [ 215.674082][ T7266] bcachefs (loop1): marking superblocks [ 215.687796][ T7266] bcachefs (loop1): initializing freespace [ 215.698819][ T7266] bcachefs (loop1): done initializing freespace [ 215.709130][ T7266] bcachefs (loop1): reading snapshots table [ 215.715158][ T7266] bcachefs (loop1): reading snapshots done [ 215.747799][ T7266] bcachefs (loop1): done starting filesystem [ 215.878862][ T7266] syz.1.362 (7266) used greatest stack depth: 18424 bytes left [ 215.924736][ T5835] bcachefs (loop1): shutting down [ 215.943212][ T5835] bcachefs (loop1): going read-only [ 215.948521][ T5835] bcachefs (loop1): finished waiting for writes to stop [ 215.961276][ T5835] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 216.038914][ T5835] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4 [ 216.067432][ T5835] bcachefs (loop1): clean shutdown complete, journal seq 5 [ 216.095060][ T5835] bcachefs (loop1): marking filesystem clean [ 216.107963][ T6022] team0 (unregistering): Port device team_slave_1 removed [ 216.142028][ T5835] bcachefs (loop1): shutdown complete [ 216.219730][ T6022] team0 (unregistering): Port device team_slave_0 removed [ 216.503965][ T7280] netlink: 2048 bytes leftover after parsing attributes in process `syz.6.356'. [ 216.542932][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.6.356'. [ 216.891205][ T7256] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.911333][ T7256] bridge_slave_1: left allmulticast mode [ 216.925574][ T7256] bridge_slave_1: left promiscuous mode [ 216.939573][ T7256] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.149215][ T7132] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.176995][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.201837][ T7132] bridge_slave_0: entered allmulticast mode [ 217.228812][ T7132] bridge_slave_0: entered promiscuous mode [ 217.248233][ T7132] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.264580][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.271990][ T7132] bridge_slave_1: entered allmulticast mode [ 217.297311][ T7132] bridge_slave_1: entered promiscuous mode [ 217.354306][ T7132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.458267][ T7132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.586328][ T7132] team0: Port device team_slave_0 added [ 217.618288][ T7132] team0: Port device team_slave_1 added [ 217.731159][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.748484][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.776930][ T7132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.803952][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.810925][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.846217][ T7132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.924603][ T7132] hsr_slave_0: entered promiscuous mode [ 217.932119][ T7132] hsr_slave_1: entered promiscuous mode [ 217.938551][ T7132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.948533][ T7132] Cannot create hsr debugfs directory [ 218.109906][ T7132] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 218.122748][ T7132] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 218.136654][ T7132] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 218.148815][ T7132] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 218.243906][ T7132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.263331][ T7132] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.276697][ T6027] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.283852][ T6027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.315262][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.322381][ T6022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.600676][ T7132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.899090][ T7132] veth0_vlan: entered promiscuous mode [ 218.918492][ T7132] veth1_vlan: entered promiscuous mode [ 218.952507][ T7132] veth0_macvtap: entered promiscuous mode [ 218.968512][ T7132] veth1_macvtap: entered promiscuous mode [ 218.988387][ T7132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.005229][ T7132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.018906][ T7132] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.030822][ T7132] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.043494][ T7132] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.052221][ T7132] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.106547][ T7132] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 219.147059][ T5990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.157229][ T7132] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 219.168069][ T5990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.242741][ T6023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.265392][ T6023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.348258][ T7132] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)