last executing test programs: 56.576270202s ago: executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x0, 0xfffffffd}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000040)={0x200, 0xffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000d80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8000) r5 = timerfd_create(0x8, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) read$FUSE(r5, &(0x7f0000000d80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = open(0x0, 0x0, 0x0) fstat(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x10410, &(0x7f0000000500)=ANY=[@ANYRES32=r9, @ANYRES8=0x0, @ANYRES32, @ANYRES16=r7, @ANYRES32=r7, @ANYRESOCT=r8, @ANYBLOB="265c375a51dd6e984fce0e35aa96c075b7a887a364b494527514aff73c5f8f9989ef21cc069e9749551b6d5a0b704f77d9b09077243e32ffc64966b736db42aab2e410e539863f45da80db4be8760bc71f91ba7edfec2ea21d2382804f40246b00fc79187993087295f3cd7cf71b0d9e9188384c7b39000000f0fec0ee209e144676e71e63c3d74fc465d09040982fd6c163c833e2a0c13b5ced3d4d7684d79d50ab63ac97ad2205000000a6cd2b2716a000a9834983a3f1a768004374e58bcabab221000000fc0000000000000000000060760fff210803c9660c6600000f21c0352cd526bfdee0c1be60fa5c2f4100000000002db24e35df54193438cf37f0056a83adc6027b6d3c8b5080bcd890875e140ebf2752d44d86df030064002f247ebf418e5cdce9da8789f9b80b923f7e7c3c3fe093b770db6a8942332f5583b13bcc254f8b6dbe87a540e4be6456a47e096f633cacb030fda890fe3ca5eec7236cfcb7d54ce4271d270a27e872fc20159ba2fa0f62986a170e8df96150fabe007d18b523acecc942fe9f525c497b189f82f7881b7e5263298277cedd5c3b36f4fb466f6672f1637f84cf8c1010cc227984b60b9b224add9b085f52d2d9653990852dd60076480e62156214fd6e599dc863942128a1f6f1983283697f719022918e0000000000000000007833d6b3aca068b877da9f1b7ab02b78c8e2877f2a349fd8aeb95b87c0c7dff78c645d168bcb1af71f152d9629f7ee967979b1f28b7e6b2f739725b113101d3f19ab65f3e08cbf2a1795e0b3091d87149bd871c59a9895b3865047432d0b59651a173d0f8bc23661640e1b73e49ccd4d22f06d283fe4bda182a1063423201bc06a56125055bb38c03425a58952c518709dec1a2231e97bcf20720b0ae98e88695db8114c7457b425d3ef98e6d1412800f8ae90fef725aa8f7500"/690, @ANYRESOCT=r7], 0x2, 0x1c9, &(0x7f0000000300)="$eJzsmb/v0kAYxp+7lh8SY+Li4OIgRoxS2qKGhQETdxPw1yaRStACBmoCJA7ExcXRwcTVf8DBgcnBzc1VBzUxcZDRueaOsz0LKPhdmnzfT8L1ubv33nvvgGcAEARxaPn65efnZ1dqrQsAjqKInBr/bsQxXIv/9OLR+ef1qy9ff3z1bnDs8SKZjwEIw933NwG8bRgIVD8M/1xdVM8WeKSvg+Oc0jfBcEbpO+C4obQHhttK39f08IgSvmfdHfqdez3fs0XjiMYVTTVZ33LO0AGQV/UxbX48nT1o+743SopM+Huftal9xb/ub9ngqGv3J96vW0+fzEXfUuO2dn8OOBylq2BoKl1DDpZlxVeinf+kGec3djl/GsTxcirKIJEuwZIj4gsdjZxYLt6vr/qWluL/Q0jjArA29aFwsMxZZQIbY2J/YiZwVvMnE2bkH5Wg/7Ayns7KvX6763W9getWL9sXbfuSW5FGtGr/4n956U8FLX9mS2yWZTFpB8HImQDByIn67qrVHLf5ZvhDruHS/zhKp1c5xEdFHju3eQ+mXlw+hSoZW4snCIIgCIIgCIIgCIIgCILYi1Ng8ldQ9UdVuAX3moz+FQAA///3omlJ") r10 = open(&(0x7f0000000800)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x10410, &(0x7f0000000980)=ANY=[@ANYRES16=r6, @ANYRES8=r2, @ANYRES32=r3, @ANYRES16=r10, @ANYRESOCT=r10, @ANYRESOCT=r11, @ANYBLOB="265c375a51dd6e984fce0e35aa96c075b7a887a364b494527514aff73c5f8f9989ef21cc069e9749551b6d5a0b704f77d9b09077243e32ffc64966b736db42aab2e410e539863f45da80db4be8760bc71f91ba7edfec2ea21d2382804f40246b00fc79187993087295f3cd7cf71b0d9e9188384c7b39000000f0fec0ee209e144676e71e63c3d74fc465d09040982fd6c163c833e2a0c13b5ced3d4d7684d79d50ab63ac97ad2205000000a6cd2b2716a000a91f4983a3f1a768004374e58bcabab221000000fc0000000000000000000060760fff210803c9660c6600000f21c0352cd526bfdee0c1be60fa5c2f4100000000002db24e35df54193438cf37f0056a83adc6027b6d3c8b5080bcd890875e140ebf2752d44d86df030064002f247ebf418e5cdce9da8789f9b80b923f7e7c3c3fe093b770db6a8942332f5583b13bcc254f8b6dbe87a540e4be6456917e096f633cacb030fda890fe3ca5eec7236cfcb7d54ce4271d270a27e872fc20159ba2fa0f62986a170e8df96150fabe007d18b523acecc942fe9f525c497b189f82f7881b7e5263298277cedd5c0100f4fb466f6672f1637f84cf8c1010cc227984b60b9b224add9b085f52d2d9653990852dd60076480e62156214fd6e599dc863942128a1f6f1983283697f719022918e0000000000000000007833d6b3aca068b877da9f1b7ab02b78c8e2877f2a349fd8aeb95b87c0c7dff78c645d168bcb1af71f152d9629f7ee967979b1f28b7e6b2f739725b113301d3f19ab65f3e08cbf2a1795e0b3091d87149bd871c59a9895b3865047432d0b59651a173d0f8bc23661640e1b73e49ccd4d22f06d283fe4bda182a1063423201bc06a56125055bb38c03425a58952c518709dec1a2231e97bcf20720b0ae98e88695db8114c5557f725aa8f7500"/690, @ANYRESOCT=r10], 0x2, 0x1d7, &(0x7f0000002dc0)="$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") getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002fc0)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, 0x0) getresuid(&(0x7f00000061c0), 0x0, &(0x7f0000006240)) getegid() syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./bus\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYBLOB="00e0c6e4d9182ec69e599fd4d32ba9c5146fbc43a33914b2b1a5ce8843b193dc82dbc512b6fabfe6fbdd2a8bdeeda78e17b18f1b6e80c81cd67046e6a85e7160112d613e4c6dcab2404d58291ec130b9fd2785ce8dd5538f70998f2d50005813ba6c65cd3c25a8e730e1cd7b11cf7f6cc0fba6b670c64374abd09518ffba0c5eb2e602b1a64ac897fc6ce9bee1d70bef22f10c7776c2f5077cb1de63832b1bab15c6caf549a1cd58106494d92d1159033b2e27eceae339414a62aca9cf6a00c07e2a181dd9668a64b5eefc8e5ebc6564442a8d322e89a2fbbade22dc834cff72c09dc653db003038d250e81aee10888e78a3677d68cc60de6f7d361115e53becaa81ee364dd85d11c2e56a01b87e0b194b2a5d3115f3b257fa54acf273f953e6be39e5b67fcd3a564e71fdbdf8b4ef42c07a9525ae4d7c"], 0x1, 0x14fe, &(0x7f0000001580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0) chdir(&(0x7f0000000240)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0) chdir(0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xa18496, 0x0, 0x1, 0x0, &(0x7f0000000000)) 56.148310598s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@quota}, {@noload}, {@jqfmt_vfsold}]}, 0x2, 0x46a, &(0x7f0000000980)="$eJzs289vFFUcAPDvzLZFQWhFFEFUFI2NP1paUDl40WjiQRMTPeCxtoUACzW0JkKIVmPwaEi8G48m/gWe9GLUk4lXvBsSolxAT2tmd6Zsl93tLpRd6H4+yTbv7bzpe9+deTNv5s0EMLD2Zn+SiPsi4mJEjNayKyp5oazctSvnZv+9cm42iUrl3b+TarmrV87NFmWL9bbkmfE0Iv0iyStZbfHM2RMz5fL86Tw/uXTyw8nFM2dfOHZy5uj80flT04cOHTww9fJL0y+uS5xZfFd3f7KwZ9eb7194e/bwhQ9+/T7Jv4+GODox3EGZvVng/1SqGpc93U1ld4GtdelkqI8NoSuliBjK9+eLMRqluL7xRuONz/vaOOC2ys5Nm1ovXq4AG1gS/W4B0B/FiT67/i0+PRp63BEuv1q7AMrivpZ/akuGIs3LDDdc366nvRFxePm/b7JP3MR9CACAbv2YjX+ebzb+S6N+jLgtnxsai4j7I2J7RDwQETsi4sGIeCgidkbEw51Ve7xINE4N3Tj+SS/daoztZOO/V/K5rdXjv2L0F2OlPLe1Gv9wcuRYeX5//puMx/CmLD/Vpo6fXv/jq1bL6sd/2Ser//CqyaX00lDDDbq5maWZjiagOnD5s4jdQ83iT1ZmApKI2BURu7v719uKxLFnv9vTqlDT+POx8JrWYZ6p8m3EM7XtvxwN8ReS9vOTk/dEeX7/ZLFX3Oi338+/06r+W4p/HWTbf/Pq/b+xyFhSP1+72H0d5//8suU1zdrxN9//R5L3qsejkfy7j2eWlk5PRYwkb9XWqv9++vq6Rb4on8U/vq95/9+er5PF/0hEZDvxoxHxWEQ8nrf9iYh4MiL2tYn/l9eeOt5l/Embf7eusvjnmh7/VprQsP27T5RO/PxDq/o72/4Hq6nx/Jvq8W8NnTbwVn47AAAAuFuk1Wfgk3RiJZ2mExO1Z/h3xOa0vLC49NyRhY9OzdWelR+L4bS40zVadz90KlnOnyaO6tX3dH6vuFh+IL9v/HXp3mp+YnahPNfn2GHQbanr/9t3Xu//mb9Kq8uuzIh4vwM2Dv0ZBldj/0/71A6g95z/YXDp/zC49H8YXM36/6cN+VKP2gL0lvM/DK61+n/P3kYCes75HwaX/g8Dqd278cnNv/Iv0d9ELN/+KtI7ItLblRjpoINs6MSNx4oh4wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAu9H8AAAD//xjg70M=") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000e40)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="2e5113abb96490e8baa757031fd3113d8fd231aecab2c455591d3bec0b6d42a1d9572dc5078c0de5a68dc252aeb457f345aaef1744f717c71738086a77f819bf8ec2164ad9d225996868d5440c2a1f1759386c920214f5b07fdeaa34d7cbb895ee45108d8715e8678c9e65c8b76f3f4f2a1537de01264b0f6c5a5083f49b6737a25758553b72788c48c129ab89ff000e7d0b1da439dc5e7e6cfad150a664ab7d70dd127f473015976f8f2a3603f45a042d8c3578e6eb3060b986ee9e6b4dbf79896d68301c5d9ea34afe122934", @ANYBLOB="55a288cf517af1b04be776ee9c0ec53f9628c15cb14edefde39762fe236b4ce8c60a7c43543970516a02d827011407c1362a6f3ee218574d1d03907f069e233eb8845406027ad215c6cb94b3c1660b0b307d92fda8ceeaee13ddad398c29967c9b3a2a2f4e8bcaccaa614de8b11d51221fd15e41511f4946f3ea66f5e4386903f94da6eafe8f943cbc7fb75ab04f9afe9f69e5bc6c21ca487b92ca6050937ae8af3ec55050ee8cccf22ea07fbe0f0eac590000000000000000000000002c4a6956a304640a061636c8a834f9bdf9ce332357af4b2a62d0fda693f4f22bc69e7ac38c41e010a61f8de542f687", @ANYRES8, @ANYRES16, @ANYRES32, @ANYRES8, @ANYRES32], 0x0, 0x1c4, &(0x7f0000000440)="$eJzsVb/uEkEQ/uZu4UAtqG0lQqPA2fgG8gA+gAROJB7+4S5RCMVpQ2NhfAkSn8LCRHsLY0xssNBECyxJDGZ359YlasDkyO/3S/ZLyHzzzc7sDpedvZM8TAIAP9fzPmpQIFzARyIIAA3S2qas7Q+2W8YXof0O6y/ZfmabTGfvnmk6u9uL42iSTPcQImDfmh1y0KLDydunuwqhqMpFk9TX/+yfoec7SvC3NZyLE++iOOL/s52vRe9VwrHbAYxCB2R9eKE/52n5Fkci3n9lJeDxldx44uG7ct6v531JbvEUk9pA//IrodZI57W15qIAMoB8bE0doaYl0ADQSscPWsl0dmU07g2jYXQvDJG135znKxq1W7dHcdQm6xieJAIG8p5WrXgJwKff8QwWyDqaxDmA7Fw5f/Ph3LxkJVYBz8q1a+i6r0yNgDX5V9zEZVQAPMpkOGS1DllNQLXWBcFnpyOscwIbeKiowNX+/XiwAIHytCWEqdFZoSQdyoAoZEdFrl037S/Y1tl22S7Zrtjmb1f+JglV4Rt7zQwo43EvTSfq8dLMaKHRwprZ2eNd89eQ8pMEcHBwcHBwcHA4I/gVAAD//7B1VIM=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x18, 0x2, {0xb}}, 0x0) 55.613348349s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x24, 0x3a, 0xb, 0x0, 0x0, {0x4}, [@nested={0x4}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='%\x00'}]}]}, 0x24}}, 0x0) 55.162597818s ago: executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x57e, &(0x7f0000001440)="$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") chdir(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0x10f) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0), 0x20) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) sendmmsg$inet(r3, &(0x7f0000001880)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r5, 0x1, 0x0, 0x0, {0x24}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") mkdir(0x0, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000008fa000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20"], 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f00000005c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) 55.069022052s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000a40)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@grpquota}, {@noblock_validity}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x2e}}, {@resgid}, {@sysvgroups}, {@norecovery}, {@usrquota}]}, 0x1, 0x4d2, &(0x7f00000002c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 38.347282056s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000a40)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@grpquota}, {@noblock_validity}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x2e}}, {@resgid}, {@sysvgroups}, {@norecovery}, {@usrquota}]}, 0x1, 0x4d2, &(0x7f00000002c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 35.6301193s ago: executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x40, 0x0, 0x0, 0xfffffffd}, {0x6}]}) write$ppp(r0, &(0x7f00000010c0)="1e00", 0x2) 35.361482121s ago: executing program 0: r0 = io_uring_setup(0x3c8e, &(0x7f0000000100)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000001000)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r2 = syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_open_pts(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 34.987902528s ago: executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x140, &(0x7f0000000340)="$eJzs2r9Kw1AUBvAzCEpHR6dAJQqa/1pXHcXN3SHU3DR4Y0oiSPsC4iQoXAdfQvAJfALJ6KZLB18icturplEhk9fh+y394LTpyblwp2PlWeqxwiLaHF4fTpbzLDV6wU6feSykmX0iMmQoq+rWpm9ePutlRfYPX9Br9W322V2PxcElS3jk624JAAAAAAAAAAAAAAAAAAAAAABaMjsqdAYivWAJj7xatRiNT0LOo7wgWtLUoV6moXa4iAl+J+cTzNU35Fh2ZUrEXi7r7vzvb1RYGwj+2pyvc5YOnWI0tpI0jKM4OvX9oOduue6270yf5TSfaN6rnqisHtzaOpn9dCQ7M2v7Zs9t9s3U+S+sJOLqvPlvX+ePgICA8BFaXp//3/T+mxDRYtB9lPef3c/4sSr+xTj1vj4A/OY9AAD//3cgO3s=") openat(0xffffffffffffff9c, &(0x7f0000002540)='./file2\x00', 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x800) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = io_uring_setup(0x30d1, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001300), 0x8f) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000140)='1', 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) 33.759408196s ago: executing program 3: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[@ANYRES32=r2, @ANYBLOB="297c00f9c21980234eab918ac814309e197710e2d610b50fc9fa30d71b80aa11665fc7ff638d11ea1f12", @ANYRES32=r1, @ANYRES16, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC], 0x2, 0x1e8, &(0x7f00000001c0)="$eJzsmb2L1EAYxp+ZZHPnIYKNhY2FB57oZZOsyjVXnGApCKeo5eLF4zS7K7sRdhcEFxsbSwvB1sbSwsLKwr/AVgsVBAu3tBNG5iPJmM0u6weu6PuDnTwz8+adzLvkCSQgCOK/5cP7L+8enN24eBLAfqxiyYx/cooYbsW/fXT7xMPNc4+fvXnyqn3gzotyPgZAiPnX9wC83HKQgrl65PuzV/XBtTQugeO40ZfB4Gv5VSh0JwbDVRNzw9KdfUYksX+tk+xc30viQDahbCLZNOz15cLjEcMOgGV1dUIwa743GN5sJkncLYuayNaZmPpRMat+6vq2ODaRVU8I+X9duX9vJPumNgjA8/qF4AiNboBh2+gNLMH3/aIk1v4Pu0V+Z579L1Y8VeLg+p9aNLtH/oa9/8Oi9lvysPKIvKHzkUPjzAPtmI8L3/vPC2VcACamXq8kyflfyOxVFCoXhT9JZz9m+ZMLN/ePetq6Ve8Nhut7reZuvBu3o6hxJjgVBKejujIi3c7wv2XlTytW/tqUWI956DfTtBv2gbQb5v1It5bjbj/vfFbncOV/HGtHdQ5mnln5g7IEMz+ujlKtOdWRd6fuiSAIgiAIgiAIgiAIgiAIopojYNBfwgQzL0SriC6oN5TfAgAA//9RI2X0") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 33.07504644s ago: executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000007240)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='\v', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[], 0x1a) 32.8808658s ago: executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r2 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 32.796586322s ago: executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x18, &(0x7f0000000080)=ANY=[], 0x1, 0x6fd, &(0x7f0000000880)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000300)=""/104, 0x68) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 32.61545093s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000001000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='jbd2_handle_stats\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 32.456826624s ago: executing program 4: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xffff}], 0x1, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) 32.238969328s ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r1, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x400454de, &(0x7f0000000440)) 32.09434928s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0), 0x850}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x7, 0x301}, 0x14}}, 0x0) 31.938623913s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c710016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa73d897e3896d863081b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbd744e517e65ddab19e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f200004304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188541c300f5c1bf56705ba12d198e897186b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710f7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47cbb0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9ea410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be0a33c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06a6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c6062368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c5bed4b0d73dffb17a88aaad5921aee7dae6a2f3009d9cb434898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a64d903b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e7ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00000000000000000000000000006a728258ca3d846a000e80d5f43109a48ddc54cec5d7f78c80e010ed02ffc0846577cafcd9e0ad83149bfb08ba7b5b431311041deb5e5d65610ad6e8d6ed55e900071b4d37d9fadb17a0407e7251866b63faccfe936980f59ceaa9d6b6863024b482023799a4f30a225b560f320e89ed44130e78f8cf000ac3c743b08d4256f282fc36162ac4b59527a3b67560313914ff6ac4ac43cd0e79d6372da631de3fde6c29de3b43d3046df23019ecadd57f175a2443928b1bcb9be16f54936796c3b928dc07c70771622cef2fafeb239a3ca4"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 31.50361289s ago: executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x2c) prctl$PR_SET_SECUREBITS(0x8, 0x0) 31.475685954s ago: executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x20, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000380)=0x5) 31.421124273s ago: executing program 4: r0 = syz_io_uring_setup(0x40f, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80000004, 0x0, 0x4) syz_io_uring_setup(0x2bac, &(0x7f0000000340), &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x19, 0x0, 0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x18}) io_uring_enter(r0, 0x19be, 0x0, 0x0, 0x0, 0x0) 31.37278242s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) socket$igmp6(0xa, 0x3, 0x2) rt_tgsigqueueinfo(r2, r2, 0x6, &(0x7f0000000300)={0x2, 0x0, 0x3}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) write$UHID_CREATE(r1, &(0x7f0000001500)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000013c0)=""/111, 0x6f, 0xfde6, 0x1f, 0x9, 0x6, 0x2}}, 0x120) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r7}, 0x10) io_uring_setup(0x62df, &(0x7f0000000440)={0x0, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)='X'}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 31.329564467s ago: executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) msgget$private(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe01}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='bond_slave_1\x00') socket$inet(0x2, 0x3, 0x4) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000040)={0x0, r3, 0x0, 0x2}) socket(0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@uid_forget}, {@gid_forget}, {@uid}, {}, {}, {@lastblock}, {@iocharset={'iocharset', 0x3d, 'cp932'}}]}, 0x1, 0xc32, &(0x7f0000000e00)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=") creat(0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000000)={0xc8e8}) 30.381165772s ago: executing program 1: syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f0000000100)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f17be8a397ef4cdba04d1979e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e74"], 0x4, 0xc24, &(0x7f0000000d00)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000040)='./bus\x00', 0x0, r1) 30.142379708s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000680)=""/4080, 0xff0}, {&(0x7f0000000140)=""/118, 0x76}, {0x0, 0x900}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 30.017318217s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}]}]}, 0x3c}}, 0x0) 2.207953372s ago: executing program 3: epoll_create1(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1a02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) 1.926530956s ago: executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r2) 1.312217299s ago: executing program 4: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xffff}], 0x1, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) 0s ago: executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x20, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000380)=0x5) kernel console output (not intermixed with test programs): 3 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc070e53f29 code=0x7ffc0000 [ 92.414759][ T26] audit: type=1326 audit(1718881694.749:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4343 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc070e53f29 code=0x7ffc0000 [ 92.443411][ T26] audit: type=1326 audit(1718881694.749:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4343 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc070e53f29 code=0x7ffc0000 [ 92.468297][ T26] audit: type=1326 audit(1718881694.749:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4343 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc070e53f29 code=0x7ffc0000 [ 92.492753][ T26] audit: type=1326 audit(1718881694.749:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4343 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc070e53f29 code=0x7ffc0000 [ 92.505006][ T4327] XFS (loop4): Mounting V5 Filesystem [ 92.718648][ T4327] XFS (loop4): Ending clean mount [ 92.729661][ T4361] loop3: detected capacity change from 0 to 1764 [ 92.750198][ T4327] XFS (loop4): Quotacheck needed: Please wait. [ 92.901913][ T4327] XFS (loop4): Quotacheck: Done. [ 93.082677][ T3526] XFS (loop4): Unmounting Filesystem [ 93.347858][ T4373] loop0: detected capacity change from 0 to 128 [ 93.490381][ T4373] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.502151][ T4373] ext4 filesystem being mounted at /root/syzkaller-testdir3287018233/syzkaller.KaUY3A/46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 93.930906][ T4377] loop2: detected capacity change from 0 to 16 [ 93.995821][ T4377] erofs: (device loop2): mounted with root inode @ nid 36. [ 94.039656][ T4377] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 94.063002][ T4371] loop3: detected capacity change from 0 to 32768 [ 94.216528][ T4383] loop1: detected capacity change from 0 to 128 [ 94.264103][ T4383] ======================================================= [ 94.264103][ T4383] WARNING: The mand mount option has been deprecated and [ 94.264103][ T4383] and is ignored by this kernel. Remove the mand [ 94.264103][ T4383] option from the mount to silence this warning. [ 94.264103][ T4383] ======================================================= [ 94.648261][ T4389] loop0: detected capacity change from 0 to 2048 [ 94.658598][ T4380] loop4: detected capacity change from 0 to 32768 [ 94.748794][ T4389] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.759939][ T4389] ext4 filesystem being mounted at /root/syzkaller-testdir3287018233/syzkaller.KaUY3A/47/bus supports timestamps until 2038 (0x7fffffff) [ 94.943129][ T3642] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.011547][ T3619] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 95.069471][ T3642] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.115863][ T4403] loop4: detected capacity change from 0 to 1764 [ 95.166847][ T3642] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.254359][ T3619] usb 3-1: Using ep0 maxpacket: 32 [ 95.291465][ T3642] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.371558][ T3619] usb 3-1: config 0 has no interfaces? [ 95.377073][ T3619] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 95.391710][ T4401] loop0: detected capacity change from 0 to 32768 [ 95.417843][ T3619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.445157][ T3619] usb 3-1: config 0 descriptor?? [ 95.480515][ T4409] loop4: detected capacity change from 0 to 16 [ 95.521739][ T4401] XFS (loop0): Mounting V5 Filesystem [ 95.566766][ T4409] erofs: (device loop4): mounted with root inode @ nid 36. [ 95.599521][ T4409] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 95.693375][ T4401] XFS (loop0): Ending clean mount [ 95.743344][ T21] usb 3-1: USB disconnect, device number 4 [ 95.766066][ T3527] XFS (loop0): Unmounting Filesystem [ 95.800309][ T4404] chnl_net:caif_netlink_parms(): no params data found [ 95.851129][ T4398] loop3: detected capacity change from 0 to 65536 [ 95.936676][ T4426] loop4: detected capacity change from 0 to 512 [ 95.963524][ T4398] XFS (loop3): Mounting V5 Filesystem [ 95.996133][ T4398] XFS (loop3): Ending clean mount [ 96.020439][ T4398] XFS (loop3): Quotacheck needed: Please wait. [ 96.032966][ T4426] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nobarrier,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 96.061817][ T4426] ext4 filesystem being mounted at /root/syzkaller-testdir3119518103/syzkaller.Otm0iE/59/bus supports timestamps until 2038 (0x7fffffff) [ 96.077715][ T4404] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.104670][ T4398] XFS (loop3): Quotacheck: Done. [ 96.131817][ T4404] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.152351][ T4404] device bridge_slave_0 entered promiscuous mode [ 96.163614][ T4404] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.170762][ T4404] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.178967][ T4404] device bridge_slave_1 entered promiscuous mode [ 96.239638][ T3532] XFS (loop3): Unmounting Filesystem [ 96.311133][ T4404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.367588][ T4404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.481606][ T4446] syz-executor.0 sent an empty control message without MSG_MORE. [ 97.271777][ T1282] Bluetooth: hci3: command 0x0409 tx timeout [ 97.337832][ T4404] team0: Port device team_slave_0 added [ 97.408959][ T4404] team0: Port device team_slave_1 added [ 97.505701][ T4404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.515345][ T4404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.601715][ T4404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.654079][ T4404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.671368][ T4404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.702223][ T4445] loop2: detected capacity change from 0 to 32768 [ 97.708756][ T4404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.544514][ T4404] device hsr_slave_0 entered promiscuous mode [ 98.561990][ T4404] device hsr_slave_1 entered promiscuous mode [ 98.568745][ T4404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.611753][ T4404] Cannot create hsr debugfs directory [ 98.710599][ T3642] device hsr_slave_0 left promiscuous mode [ 98.727896][ T3642] device hsr_slave_1 left promiscuous mode [ 98.750457][ T3642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.768473][ T3642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.788927][ T3642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.806764][ T3642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.820714][ T3642] device bridge_slave_1 left promiscuous mode [ 98.839356][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.873772][ T3642] device bridge_slave_0 left promiscuous mode [ 98.890444][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.910336][ T4450] loop3: detected capacity change from 0 to 32768 [ 98.927248][ T4458] loop2: detected capacity change from 0 to 4096 [ 98.940475][ T3642] device veth1_macvtap left promiscuous mode [ 98.949233][ T3642] device veth0_macvtap left promiscuous mode [ 98.956454][ T3642] device veth1_vlan left promiscuous mode [ 98.962743][ T3642] device veth0_vlan left promiscuous mode [ 98.987170][ T4458] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 98.998427][ T4450] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (4450) [ 99.048284][ T4458] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 99.070236][ T4450] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 99.090600][ T4450] BTRFS info (device loop3): disabling tree log [ 99.101709][ T4450] BTRFS info (device loop3): metadata ratio 65537 [ 99.120524][ T4450] BTRFS info (device loop3): metadata ratio 64 [ 99.141357][ T4450] BTRFS info (device loop3): using free space tree [ 99.161147][ T4450] BTRFS info (device loop3): has skinny extents [ 99.204367][ T4456] loop0: detected capacity change from 0 to 32768 [ 99.247892][ T4456] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4456) [ 99.267020][ T4450] BTRFS info (device loop3): enabling ssd optimizations [ 99.292768][ T4478] loop2: detected capacity change from 0 to 512 [ 99.336167][ T4456] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 99.342529][ T4478] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 99.349741][ T1282] Bluetooth: hci3: command 0x041b tx timeout [ 99.357763][ T4456] BTRFS info (device loop0): allowing degraded mounts [ 99.366695][ T4478] EXT4-fs (loop2): mount failed [ 99.369037][ T26] kauditd_printk_skb: 517 callbacks suppressed [ 99.369053][ T26] audit: type=1804 audit(1718881702.019:2806): pid=4450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1453058945/syzkaller.T6BHRT/56/file0/file1" dev="loop3" ino=260 res=1 errno=0 [ 99.392425][ T4456] BTRFS info (device loop0): enabling disk space caching [ 99.432625][ T4456] BTRFS info (device loop0): force clearing of disk cache [ 99.439807][ T4456] BTRFS info (device loop0): turning on sync discard [ 99.461265][ T4456] BTRFS info (device loop0): turning off barriers [ 99.468887][ T4456] BTRFS info (device loop0): turning off discard [ 99.475649][ T4456] BTRFS info (device loop0): doing ref verification [ 99.510959][ T4456] BTRFS info (device loop0): disk space caching is enabled [ 99.530589][ T3642] team0 (unregistering): Port device team_slave_1 removed [ 99.530764][ T4478] loop2: detected capacity change from 0 to 256 [ 99.548478][ T3642] team0 (unregistering): Port device team_slave_0 removed [ 99.569136][ T3642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.571765][ T4456] BTRFS info (device loop0): has skinny extents [ 99.619360][ T4478] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.631124][ T3642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.746970][ T3642] bond0 (unregistering): Released all slaves [ 99.834528][ T4456] BTRFS info (device loop0): enabling ssd optimizations [ 99.838375][ T4500] loop2: detected capacity change from 0 to 128 [ 99.849183][ T4456] BTRFS info (device loop0): clearing free space tree [ 99.861313][ T4456] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 99.875405][ T4456] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 99.900284][ T4500] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 99.947874][ T4500] sysv_free_block: trying to free block not in datazone [ 99.955814][ T4500] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 100.263483][ T4517] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.376050][ T4517] FAT-fs (loop5): unable to read boot sector [ 100.494953][ T4525] loop3: detected capacity change from 0 to 128 [ 100.748934][ T4525] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.759871][ T4525] ext4 filesystem being mounted at /root/syzkaller-testdir1453058945/syzkaller.T6BHRT/59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 100.906325][ T26] audit: type=1326 audit(1718881703.509:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea5f21f29 code=0x7ff00000 [ 101.567091][ T26] audit: type=1326 audit(1718881703.519:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea5f21f29 code=0x7ff00000 [ 101.592369][ T4512] Bluetooth: hci3: command 0x040f tx timeout [ 101.599841][ T4534] loop0: detected capacity change from 0 to 1024 [ 101.610345][ T26] audit: type=1326 audit(1718881703.519:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea5f21f29 code=0x7ff00000 [ 101.710414][ T4534] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.755379][ T26] audit: type=1326 audit(1718881703.519:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea5f21f29 code=0x7ff00000 [ 101.931822][ T26] audit: type=1326 audit(1718881703.519:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea5f21f29 code=0x7ff00000 [ 101.958105][ T4404] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.994569][ T4404] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.010305][ T26] audit: type=1326 audit(1718881703.519:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea5f21f29 code=0x7ff00000 [ 102.056283][ T4404] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.063842][ T26] audit: type=1326 audit(1718881703.529:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea5f21f29 code=0x7ff00000 [ 102.105584][ T4404] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.150025][ T26] audit: type=1326 audit(1718881703.529:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea5f21f29 code=0x7ff00000 [ 102.226797][ T26] audit: type=1326 audit(1718881703.529:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea5f21f29 code=0x7ff00000 [ 102.402820][ T4404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.423926][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.436411][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.458419][ T4404] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.476464][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.489979][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.512381][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.519613][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.567588][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.575880][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.598322][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.610275][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.617486][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.628135][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.661792][ T4544] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 102.676427][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.686315][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.730501][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.739087][ T4544] loop2: detected capacity change from 0 to 256 [ 102.753351][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.765100][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.777643][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.786771][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.797964][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.835078][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.856741][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.900217][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.138052][ T4554] loop3: detected capacity change from 0 to 128 [ 103.253578][ T4555] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 103.263401][ T4555] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 103.272777][ T4555] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.022387][ T4512] Bluetooth: hci3: command 0x0419 tx timeout [ 104.154098][ T4559] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 104.434609][ T4569] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.471110][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.481798][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.494427][ T4569] FAT-fs (loop7): unable to read boot sector [ 104.518111][ T4404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.628803][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.652144][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.750981][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.762820][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.782284][ T4404] device veth0_vlan entered promiscuous mode [ 104.812599][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.829125][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.867172][ T4404] device veth1_vlan entered promiscuous mode [ 104.882386][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.913325][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.018115][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.045790][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.085150][ T4404] device veth0_macvtap entered promiscuous mode [ 105.148235][ T4404] device veth1_macvtap entered promiscuous mode [ 105.241160][ T4404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.251753][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.261463][ T4404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.261480][ T4404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.261498][ T4404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.261508][ T4404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.261521][ T4404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.261533][ T4404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.261547][ T4404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.272569][ T4404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.417922][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 105.438112][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.458882][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.460131][ T21] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.484343][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.524444][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.557374][ T4404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.616120][ T4404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.630415][ T4404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.645939][ T4404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.658430][ T4404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.671747][ T4404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.681594][ T21] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 105.681639][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.681662][ T21] usb 1-1: Product: syz [ 105.681680][ T21] usb 1-1: Manufacturer: syz [ 105.681694][ T21] usb 1-1: SerialNumber: syz [ 105.717416][ T4584] loop3: detected capacity change from 0 to 128 [ 105.728195][ T4404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.760697][ T4404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.773885][ T4404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.816926][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.827563][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.844602][ T4404] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.856336][ T4404] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.867680][ T4404] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.876952][ T4404] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.945380][ T4574] udc-core: couldn't find an available UDC or it's busy [ 105.977525][ T21] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 105.999406][ T4574] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 106.072112][ T4574] udc-core: couldn't find an available UDC or it's busy [ 106.089382][ T4574] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 106.092543][ T1234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.135363][ T21] usb 1-1: USB disconnect, device number 2 [ 106.154359][ T1234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.173186][ T21] usblp0: removed [ 106.178173][ T3681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.192010][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.197986][ T3681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.204975][ T4588] loop2: detected capacity change from 0 to 8192 [ 106.245662][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.277041][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 106.277056][ T26] audit: type=1804 audit(1718881708.929:2874): pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3332348361/syzkaller.CvGXXB/63/bus" dev="sda1" ino=1951 res=1 errno=0 [ 106.317870][ T4596] overlayfs: missing 'lowerdir' [ 106.346996][ T4588] loop2: p2 p3 p4 [ 106.351189][ T4588] loop2: p2 start 14935 is beyond EOD, truncated [ 106.400154][ T4588] loop2: p3 size 196608 extends beyond EOD, truncated [ 106.428736][ T4601] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.440345][ T4588] loop2: p4 start 4026530307 is beyond EOD, truncated [ 106.455000][ T4601] FAT-fs (loop7): unable to read boot sector [ 106.641566][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 106.805516][ T4591] loop4: detected capacity change from 0 to 32768 [ 106.823008][ T4611] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 106.878131][ T4591] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4591) [ 106.960894][ T3542] Bluetooth: unknown link type 36 [ 106.983165][ T4611] loop2: detected capacity change from 0 to 256 [ 107.002059][ T23] usb 2-1: config index 0 descriptor too short (expected 25275, got 18) [ 107.033969][ T23] usb 2-1: config 42 has too many interfaces: 147, using maximum allowed: 32 [ 107.051689][ T23] usb 2-1: config 42 has an invalid descriptor of length 0, skipping remainder of the config [ 107.062292][ T23] usb 2-1: config 42 has 0 interfaces, different from the descriptor's value: 147 [ 107.087934][ T23] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 107.097156][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.125489][ T4591] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 107.143595][ T4591] BTRFS info (device loop4): disabling tree log [ 107.163350][ T4591] BTRFS info (device loop4): metadata ratio 65537 [ 107.169853][ T4591] BTRFS info (device loop4): metadata ratio 64 [ 107.221683][ T4591] BTRFS info (device loop4): using free space tree [ 107.240903][ T4591] BTRFS info (device loop4): has skinny extents [ 107.542261][ T4591] BTRFS info (device loop4): enabling ssd optimizations [ 107.604032][ T26] audit: type=1804 audit(1718881710.259:2875): pid=4591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3119518103/syzkaller.Otm0iE/60/file0/file1" dev="loop4" ino=260 res=1 errno=0 [ 107.697440][ T4603] loop3: detected capacity change from 0 to 32768 [ 107.801718][ T23] usb 2-1: language id specifier not provided by device, defaulting to English [ 108.045329][ T23] usb 2-1: USB disconnect, device number 5 [ 108.622751][ T4610] loop0: detected capacity change from 0 to 32768 [ 108.694187][ T4610] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4610) [ 108.762469][ T4610] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 108.775165][ T4610] BTRFS info (device loop0): force clearing of disk cache [ 108.783301][ T4610] BTRFS info (device loop0): using free space tree [ 108.789984][ T4610] BTRFS info (device loop0): has skinny extents [ 108.812967][ T26] audit: type=1326 audit(1718881711.469:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fceafe45f29 code=0x0 [ 108.903984][ T4653] loop1: detected capacity change from 0 to 1024 [ 108.961165][ T4659] loop3: detected capacity change from 0 to 8 [ 109.022004][ T3569] Bluetooth: hci1: command 0x0409 tx timeout [ 109.063748][ T4659] SQUASHFS error: zlib decompression failed, data probably corrupt [ 109.079688][ T4610] BTRFS info (device loop0): enabling ssd optimizations [ 109.094079][ T4610] BTRFS info (device loop0): clearing free space tree [ 109.101282][ T4610] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 109.113716][ T4610] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 109.155929][ T4610] BTRFS info (device loop0): creating free space tree [ 109.162600][ T4659] SQUASHFS error: Failed to read block 0x9b: -5 [ 109.169945][ T4659] SQUASHFS error: Unable to read metadata cache entry [99] [ 109.182401][ T4659] SQUASHFS error: Unable to read inode 0x127 [ 109.187361][ T4610] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 109.198365][ T4610] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 109.640362][ T4687] input: syz1 as /devices/virtual/input/input7 [ 109.797365][ T4698] loop2: detected capacity change from 0 to 24 [ 109.811051][ T4697] loop1: detected capacity change from 0 to 512 [ 109.852872][ T4698] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 109.863638][ T4701] loop4: detected capacity change from 0 to 128 [ 109.892424][ T4698] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 109.929938][ T4704] loop3: detected capacity change from 0 to 1024 [ 109.936018][ T4697] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 109.961752][ T4697] ext4 filesystem being mounted at /root/syzkaller-testdir2396625879/syzkaller.3quMvu/8/file1 supports timestamps until 2038 (0x7fffffff) [ 109.987995][ T4701] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 110.102028][ T4704] hfsplus: xattr searching failed [ 110.139825][ T4709] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.284601][ T4704] hfsplus: xattr searching failed [ 110.374349][ T4704] hfsplus: xattr searching failed [ 110.834744][ T3681] hfsplus: b-tree write err: -5, ino 4 [ 111.578841][ T4735] loop2: detected capacity change from 0 to 24 [ 111.623241][ T4735] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 111.647476][ T4740] loop1: detected capacity change from 0 to 512 [ 111.657185][ T4735] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 111.690815][ T26] audit: type=1326 audit(1718881714.339:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4742 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52cc8d2f29 code=0x0 [ 111.737540][ T26] audit: type=1800 audit(1718881714.389:2878): pid=4745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1955 res=0 errno=0 [ 111.769225][ T26] audit: type=1804 audit(1718881714.389:2879): pid=4745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3119518103/syzkaller.Otm0iE/67/file0" dev="sda1" ino=1955 res=1 errno=0 [ 111.874608][ T4740] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 111.911544][ T4715] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.940332][ T4740] ext4 filesystem being mounted at /root/syzkaller-testdir2396625879/syzkaller.3quMvu/11/file1 supports timestamps until 2038 (0x7fffffff) [ 111.957416][ T4752] loop2: detected capacity change from 0 to 1024 [ 112.071528][ T4752] hfsplus: xattr searching failed [ 112.124442][ T4752] hfsplus: xattr searching failed [ 112.142556][ T4760] loop4: detected capacity change from 0 to 16 [ 112.198628][ T4760] erofs: (device loop4): mounted with root inode @ nid 36. [ 112.213694][ T4760] erofs: (device loop4): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 112.224051][ T4760] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 112.235849][ T4760] erofs: (device loop4): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 112.245890][ T4760] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 112.260397][ T4760] erofs: (device loop4): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 112.270175][ T4760] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 112.281849][ T4760] erofs: (device loop4): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 112.292292][ T4760] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 112.306064][ T4760] erofs: (device loop4): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 112.315983][ T4760] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 112.326019][ T4752] hfsplus: xattr searching failed [ 112.622878][ T4715] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 112.712119][ T4715] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 112.849676][ T4752] hfsplus: xattr searching failed [ 112.916389][ T4715] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.259156][ T4764] loop4: detected capacity change from 0 to 1024 [ 113.335216][ T1239] hfsplus: b-tree write err: -5, ino 4 [ 113.421906][ T4715] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 113.434930][ T4715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.463780][ T4715] usb 4-1: Product: syz [ 113.467971][ T4715] usb 4-1: Manufacturer: syz [ 113.472846][ T4773] input: syz1 as /devices/virtual/input/input8 [ 113.492783][ T4715] usb 4-1: SerialNumber: syz [ 113.588323][ T4778] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 113.632423][ T4777] loop2: detected capacity change from 0 to 1024 [ 113.686915][ T4777] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 113.747921][ T4741] udc-core: couldn't find an available UDC or it's busy [ 113.753279][ T4777] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 113.771656][ T4741] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 113.787072][ T4783] loop0: detected capacity change from 0 to 1024 [ 113.790369][ T4715] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 113.809476][ T4741] udc-core: couldn't find an available UDC or it's busy [ 113.818418][ T4741] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 113.839766][ T4715] usb 4-1: USB disconnect, device number 2 [ 113.847603][ T4715] usblp0: removed [ 113.942607][ T26] audit: type=1800 audit(1718881716.599:2880): pid=4777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=22 res=0 errno=0 [ 113.954259][ T4768] loop1: detected capacity change from 0 to 32768 [ 114.051947][ T4777] EXT4-fs error (device loop2): ext4_find_dest_de:2112: inode #2: block 48: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 114.130787][ T4787] loop0: detected capacity change from 0 to 8 [ 114.195266][ T3528] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 48: comm syz-executor.2: path /root/syzkaller-testdir3332348361/syzkaller.CvGXXB/77/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 114.212682][ T1239] hfsplus: b-tree write err: -5, ino 3 [ 114.229743][ T4787] overlayfs: failed to verify origin (/, ino=7, err=-1) [ 114.247530][ T3528] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 49: comm syz-executor.2: path /root/syzkaller-testdir3332348361/syzkaller.CvGXXB/77/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 114.252628][ T4787] overlayfs: failed to verify upper root origin [ 114.405238][ T4789] loop4: detected capacity change from 0 to 8 [ 114.465709][ T4797] input: syz1 as /devices/virtual/input/input9 [ 114.487476][ T4799] loop0: detected capacity change from 0 to 128 [ 114.500928][ T4789] SQUASHFS error: zlib decompression failed, data probably corrupt [ 114.511367][ T4789] SQUASHFS error: Failed to read block 0x9b: -5 [ 114.520462][ T4789] SQUASHFS error: Unable to read metadata cache entry [99] [ 114.536695][ T26] audit: type=1326 audit(1718881717.189:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15b1994f29 code=0x0 [ 114.562707][ T4789] SQUASHFS error: Unable to read inode 0x127 [ 114.577104][ T4799] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 114.706005][ T1234] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.764384][ T4812] loop4: detected capacity change from 0 to 1024 [ 114.823091][ T1234] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.837576][ T4816] loop3: detected capacity change from 0 to 8 [ 114.894664][ T4818] loop0: detected capacity change from 0 to 512 [ 114.929156][ T1234] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.953075][ T4816] overlayfs: failed to verify origin (/, ino=7, err=-1) [ 114.970036][ T4816] overlayfs: failed to verify upper root origin [ 114.981566][ T4818] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.001164][ T4818] ext4 filesystem being mounted at /root/syzkaller-testdir3287018233/syzkaller.KaUY3A/74/file0 supports timestamps until 2038 (0x7fffffff) [ 115.020609][ T1234] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.103965][ T4818] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #2: comm syz-executor.0: corrupted inode contents [ 115.147502][ T26] audit: type=1800 audit(1718881717.799:2882): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 115.209456][ T4818] EXT4-fs error (device loop0): ext4_dirty_inode:5993: inode #2: comm syz-executor.0: mark_inode_dirty error [ 115.232131][ T26] audit: type=1800 audit(1718881717.839:2883): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 115.289695][ T4818] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #2: comm syz-executor.0: corrupted inode contents [ 115.339232][ T4828] input: syz1 as /devices/virtual/input/input10 [ 115.396690][ T4818] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz-executor.0: mark_inode_dirty error [ 115.427214][ T4822] chnl_net:caif_netlink_parms(): no params data found [ 115.479168][ T4832] loop1: detected capacity change from 0 to 128 [ 115.502553][ T4834] netlink: 468 bytes leftover after parsing attributes in process `syz-executor.3'. [ 115.514832][ T4822] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.522834][ T4822] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.530903][ T4822] device bridge_slave_0 entered promiscuous mode [ 115.548981][ T4822] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.556460][ T4822] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.564797][ T4822] device bridge_slave_1 entered promiscuous mode [ 115.567087][ T4832] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 115.609458][ T4834] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 115.612733][ T4822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.643969][ T4822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.677516][ T4822] team0: Port device team_slave_0 added [ 115.718420][ T4822] team0: Port device team_slave_1 added [ 115.749813][ T4840] TCP: tcp_parse_options: Illegal window scaling value 250 > 14 received [ 115.801191][ T4822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.809923][ T4842] loop0: detected capacity change from 0 to 8 [ 115.824318][ T4844] loop1: detected capacity change from 0 to 512 [ 115.847465][ T4822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.875022][ T4822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.898417][ T4822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.921631][ T4822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.964317][ T4844] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 115.982908][ T4844] ext4 filesystem being mounted at /root/syzkaller-testdir2396625879/syzkaller.3quMvu/19/file1 supports timestamps until 2038 (0x7fffffff) [ 116.084411][ T4822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.146909][ T3681] hfsplus: b-tree write err: -5, ino 3 [ 116.230310][ T4822] device hsr_slave_0 entered promiscuous mode [ 116.238315][ T4822] device hsr_slave_1 entered promiscuous mode [ 116.247095][ T26] audit: type=1326 audit(1718881718.899:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4860 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00578cbf29 code=0x0 [ 116.269980][ T4822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.285329][ T4822] Cannot create hsr debugfs directory [ 116.330364][ T4864] loop4: detected capacity change from 0 to 1024 [ 116.382403][ T4631] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.417083][ T4864] hfsplus: xattr searching failed [ 116.468091][ T4864] hfsplus: xattr searching failed [ 116.499723][ T4864] hfsplus: xattr searching failed [ 116.546552][ T4864] hfsplus: xattr searching failed [ 116.608257][ T1234] device hsr_slave_0 left promiscuous mode [ 116.615389][ T9] hfsplus: b-tree write err: -5, ino 4 [ 116.622408][ T1234] device hsr_slave_1 left promiscuous mode [ 116.629265][ T1234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.637750][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.647685][ T1234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.655838][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.662559][ T4631] usb 1-1: Using ep0 maxpacket: 8 [ 116.670639][ T1234] device bridge_slave_1 left promiscuous mode [ 116.677099][ T1234] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.686651][ T1234] device bridge_slave_0 left promiscuous mode [ 116.693395][ T1234] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.713781][ T1234] device veth1_macvtap left promiscuous mode [ 116.719813][ T1234] device veth0_macvtap left promiscuous mode [ 116.726177][ T1234] device veth1_vlan left promiscuous mode [ 116.732116][ T1234] device veth0_vlan left promiscuous mode [ 116.781800][ T4631] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.800001][ T4631] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.810140][ T4631] usb 1-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 116.826258][ T4631] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.951243][ T1234] team0 (unregistering): Port device team_slave_1 removed [ 116.970969][ T1234] team0 (unregistering): Port device team_slave_0 removed [ 116.986776][ T1234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.001613][ T1234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.091379][ T1234] bond0 (unregistering): Released all slaves [ 117.183858][ T3307] Bluetooth: hci2: command 0x0409 tx timeout [ 117.233260][ T4885] loop1: detected capacity change from 0 to 512 [ 117.316330][ T4631] uclogic 0003:28BD:0075.0001: unknown main item tag 0x0 [ 117.346295][ T4885] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 117.372911][ T4631] uclogic 0003:28BD:0075.0001: unknown main item tag 0x0 [ 117.387566][ T4631] uclogic 0003:28BD:0075.0001: unknown main item tag 0x4 [ 117.389936][ T4895] loop4: detected capacity change from 0 to 1024 [ 117.405257][ T4885] ext4 filesystem being mounted at /root/syzkaller-testdir2396625879/syzkaller.3quMvu/24/file1 supports timestamps until 2038 (0x7fffffff) [ 117.427552][ T4631] uclogic 0003:28BD:0075.0001: unknown main item tag 0x0 [ 117.441148][ T4631] uclogic 0003:28BD:0075.0001: No inputs registered, leaving [ 117.460634][ T4631] uclogic 0003:28BD:0075.0001: hidraw0: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.0-1/input0 [ 117.491188][ T4898] loop3: detected capacity change from 0 to 8 [ 117.553280][ T4715] usb 1-1: USB disconnect, device number 3 [ 117.613737][ T4897] overlayfs: failed to verify origin (/, ino=7, err=-1) [ 117.620746][ T4897] overlayfs: failed to verify upper root origin [ 117.635913][ T4822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 117.645938][ T4822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 117.672669][ T4822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 117.706938][ T4822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 117.976494][ T4822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.022529][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.041017][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.073304][ T4822] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.098384][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.107835][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.127917][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.135072][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.197527][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.229364][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.256107][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.284484][ T4509] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.291663][ T4509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.331027][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.353958][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.410606][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.452500][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.471528][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.498573][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.518349][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.537989][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.563069][ T4904] loop1: detected capacity change from 0 to 40427 [ 118.570635][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.579817][ T1239] hfsplus: b-tree write err: -5, ino 3 [ 118.599172][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.618766][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.640211][ T4917] syz-executor.0 (4917): /proc/4916/oom_adj is deprecated, please use /proc/4916/oom_score_adj instead. [ 118.674493][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.729040][ T4904] F2FS-fs (loop1): Found nat_bits in checkpoint [ 118.831447][ T4931] TCP: tcp_parse_options: Illegal window scaling value 250 > 14 received [ 118.890716][ T4904] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 118.966900][ T4904] overlayfs: missing 'lowerdir' [ 119.012188][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.019771][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.076452][ T4822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.089075][ T4404] attempt to access beyond end of device [ 119.089075][ T4404] loop1: rw=2049, want=45120, limit=40427 [ 119.150637][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.009602][ T4944] loop4: detected capacity change from 0 to 32768 [ 120.033799][ T4944] XFS: noattr2 mount option is deprecated. [ 120.042239][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.065021][ T4509] Bluetooth: hci2: command 0x041b tx timeout [ 120.116759][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.142596][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.149308][ T4944] XFS (loop4): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems. [ 120.187791][ T4822] device veth0_vlan entered promiscuous mode [ 120.207521][ T4955] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 120.216116][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.236103][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.298127][ T4822] device veth1_vlan entered promiscuous mode [ 120.385212][ T4822] device veth0_macvtap entered promiscuous mode [ 120.479962][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.502683][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.558997][ T4822] device veth1_macvtap entered promiscuous mode [ 120.590336][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.609922][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.650402][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.688342][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.711593][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.728228][ T4934] loop0: detected capacity change from 0 to 32768 [ 120.735264][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.745305][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.755783][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.766073][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.776668][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.813773][ T4822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.821961][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.830779][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.841198][ T4934] XFS: ikeep mount option is deprecated. [ 120.849753][ T4934] XFS: ikeep mount option is deprecated. [ 120.867416][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.900076][ T26] audit: type=1326 audit(1718881723.549:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4971 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15b1994f29 code=0x0 [ 120.900276][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.956768][ T4934] XFS (loop0): Mounting V5 Filesystem [ 120.984572][ T4979] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 121.011858][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.016064][ T4979] loop4: detected capacity change from 0 to 256 [ 121.068197][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.088024][ T4934] XFS (loop0): Ending clean mount [ 121.121704][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.134814][ T26] audit: type=1804 audit(1718881723.789:2886): pid=4934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3287018233/syzkaller.KaUY3A/81/file0/bus" dev="loop0" ino=9289 res=1 errno=0 [ 121.190437][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.238159][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.269605][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.301124][ T4822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.335116][ T3527] XFS (loop0): Unmounting Filesystem [ 121.348621][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.396582][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.420391][ T4822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.454607][ T4822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.509760][ T4822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.562587][ T4822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.835645][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.851876][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.920163][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.998603][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.011078][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.076810][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.141804][ T4512] Bluetooth: hci2: command 0x040f tx timeout [ 122.160785][ T4970] loop3: detected capacity change from 0 to 40427 [ 122.235434][ T4970] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 122.253615][ T4970] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 122.298604][ T4970] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.329565][ T4995] loop0: detected capacity change from 0 to 1024 [ 122.461999][ T4512] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 122.522038][ T4995] hfsplus: xattr searching failed [ 122.553632][ T4970] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 122.562640][ T4995] hfsplus: xattr searching failed [ 122.569544][ T4970] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 122.596040][ T4995] hfsplus: xattr searching failed [ 122.679050][ T5000] hfsplus: xattr searching failed [ 122.699439][ T3532] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 122.699509][ T3532] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 122.724405][ T3532] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 122.747004][ T3532] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 122.767179][ T3532] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 122.799467][ T3532] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 122.821175][ T3532] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 122.831606][ T4512] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.831635][ T4512] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 122.831659][ T4512] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.992152][ T4512] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 123.009632][ T4512] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.020846][ T4512] usb 3-1: Product: syz [ 123.025498][ T4512] usb 3-1: Manufacturer: syz [ 123.030382][ T4512] usb 3-1: SerialNumber: syz [ 123.038000][ T1239] hfsplus: b-tree write err: -5, ino 4 [ 123.234844][ T4999] loop1: detected capacity change from 0 to 32768 [ 123.247249][ T5012] loop4: detected capacity change from 0 to 256 [ 123.283777][ T4990] udc-core: couldn't find an available UDC or it's busy [ 123.290983][ T4990] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 123.301773][ T4512] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 123.312622][ T4999] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4999) [ 123.362104][ T4999] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 123.371866][ T4990] udc-core: couldn't find an available UDC or it's busy [ 123.378823][ T4990] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 123.395091][ T4999] BTRFS info (device loop1): force zlib compression, level 3 [ 123.408149][ T4512] usb 3-1: USB disconnect, device number 5 [ 123.411735][ T4999] BTRFS info (device loop1): force clearing of disk cache [ 123.421118][ T4999] BTRFS info (device loop1): setting nodatasum [ 123.428930][ T4512] usblp0: removed [ 123.443841][ T4999] BTRFS info (device loop1): allowing degraded mounts [ 123.472994][ T4999] BTRFS info (device loop1): enabling disk space caching [ 123.480079][ T4999] BTRFS info (device loop1): disk space caching is enabled [ 123.518056][ T4999] BTRFS info (device loop1): has skinny extents [ 123.557573][ T5012] loop4: detected capacity change from 0 to 512 [ 123.632863][ T5028] loop3: detected capacity change from 0 to 16 [ 123.655962][ T5012] EXT4-fs (loop4): error: journal path ./file0 is not a block device [ 123.674001][ T4999] BTRFS info (device loop1): clearing free space tree [ 123.680808][ T4999] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 123.690576][ T4999] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 123.880017][ T5028] erofs: Unknown parameter 'ÿÿÿÿ' [ 124.222213][ T4509] Bluetooth: hci2: command 0x0419 tx timeout [ 124.386987][ T5028] loop3: detected capacity change from 0 to 16 [ 124.426163][ T5012] kvm: emulating exchange as write [ 124.486186][ T5028] erofs: (device loop3): mounted with root inode @ nid 36. [ 124.606074][ T5028] erofs: (device loop3): erofs_read_inode: unsupported i_format 36 of nid 37 [ 124.743629][ T5028] erofs: (device loop3): erofs_read_inode: unsupported i_format 36 of nid 37 [ 124.745821][ T5063] loop4: detected capacity change from 0 to 512 [ 124.856059][ T5063] EXT4-fs (loop4): 1 truncate cleaned up [ 124.871546][ T5063] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,quota,noload,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 124.949734][ T5063] EXT4-fs error (device loop4): ext4_nfs_get_inode:1433: inode #11: comm syz-executor.4: iget: Dir with htree data on filesystem without dir_index feature. [ 125.061025][ T3526] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor.4: path /root/syzkaller-testdir3119518103/syzkaller.Otm0iE/91/file0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 125.150841][ T3526] EXT4-fs error (device loop4): ext4_lookup:1855: inode #11: comm syz-executor.4: iget: Dir with htree data on filesystem without dir_index feature. [ 125.157708][ T5061] loop2: detected capacity change from 0 to 32768 [ 125.171467][ T4507] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 125.190117][ T3526] EXT4-fs error (device loop4): ext4_lookup:1855: inode #11: comm syz-executor.4: iget: Dir with htree data on filesystem without dir_index feature. [ 125.387099][ T5070] loop0: detected capacity change from 0 to 32768 [ 125.435414][ T5070] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5070) [ 125.487701][ T5070] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 125.492444][ T3642] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.508829][ T5070] BTRFS info (device loop0): force zlib compression, level 3 [ 125.528417][ T5070] BTRFS info (device loop0): force clearing of disk cache [ 125.541694][ T5070] BTRFS info (device loop0): setting nodatasum [ 125.541745][ T4507] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 125.548569][ T5070] BTRFS info (device loop0): allowing degraded mounts [ 125.578204][ T4507] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 125.588136][ T5070] BTRFS info (device loop0): enabling disk space caching [ 125.601564][ T5070] BTRFS info (device loop0): disk space caching is enabled [ 125.608389][ T4507] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.608811][ T5070] BTRFS info (device loop0): has skinny extents [ 125.633084][ T3587] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 125.703902][ T3642] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.766438][ T5107] loop2: detected capacity change from 0 to 16 [ 125.778890][ T3642] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.811622][ T4507] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 125.823128][ T5107] erofs: Unknown parameter 'ÿÿÿÿ' [ 125.837638][ T5070] BTRFS info (device loop0): clearing free space tree [ 125.841546][ T4507] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.846041][ T5070] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 125.865023][ T5070] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 125.868157][ T4507] usb 4-1: Product: syz [ 125.892563][ T3587] usb 2-1: Using ep0 maxpacket: 16 [ 125.901113][ T5107] loop2: detected capacity change from 0 to 16 [ 125.909061][ T4507] usb 4-1: Manufacturer: syz [ 125.914163][ T4507] usb 4-1: SerialNumber: syz [ 125.922838][ T3642] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.977196][ T5107] erofs: (device loop2): mounted with root inode @ nid 36. [ 126.044216][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 126.051489][ T3587] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 126.055837][ T5107] erofs: (device loop2): erofs_read_inode: unsupported i_format 36 of nid 37 [ 126.062210][ T3587] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 126.116015][ T5107] erofs: (device loop2): erofs_read_inode: unsupported i_format 36 of nid 37 [ 126.169714][ T5073] udc-core: couldn't find an available UDC or it's busy [ 126.180260][ T5073] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 126.194858][ T4507] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 126.197131][ T5073] udc-core: couldn't find an available UDC or it's busy [ 126.223446][ T5073] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 126.254632][ T3569] usb 4-1: USB disconnect, device number 3 [ 126.264607][ T3587] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=8f.af [ 126.275774][ T3569] usblp0: removed [ 126.280367][ T3587] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.289651][ T3587] usb 2-1: Product: syz [ 126.293963][ T3587] usb 2-1: Manufacturer: syz [ 126.298565][ T3587] usb 2-1: SerialNumber: syz [ 126.304735][ T3587] usb 2-1: config 0 descriptor?? [ 126.354526][ T3587] iuu_phoenix 2-1:0.0: required endpoints missing [ 126.387240][ T5118] loop2: detected capacity change from 0 to 512 [ 126.425288][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.432751][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.440874][ T5109] device bridge_slave_0 entered promiscuous mode [ 126.482948][ T5118] EXT4-fs (loop2): 1 truncate cleaned up [ 126.488605][ T5118] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,quota,noload,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 126.513463][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.520930][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.537099][ T5109] device bridge_slave_1 entered promiscuous mode [ 126.586886][ T3569] usb 2-1: USB disconnect, device number 6 [ 126.595412][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.606358][ T5118] EXT4-fs error (device loop2): ext4_nfs_get_inode:1433: inode #11: comm syz-executor.2: iget: Dir with htree data on filesystem without dir_index feature. [ 126.652618][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.699076][ T4822] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path /root/syzkaller-testdir3891262510/syzkaller.sGUmD4/9/file0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 126.713847][ T26] audit: type=1800 audit(1718881729.349:2887): pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1950 res=0 errno=0 [ 126.741731][ T4822] EXT4-fs error (device loop2): ext4_lookup:1855: inode #11: comm syz-executor.2: iget: Dir with htree data on filesystem without dir_index feature. [ 126.768282][ T4822] EXT4-fs error (device loop2): ext4_lookup:1855: inode #11: comm syz-executor.2: iget: Dir with htree data on filesystem without dir_index feature. [ 126.822461][ T5109] team0: Port device team_slave_0 added [ 126.846257][ T5109] team0: Port device team_slave_1 added [ 126.898820][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.928331][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.963078][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.975762][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.983094][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.024550][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.116150][ T5109] device hsr_slave_0 entered promiscuous mode [ 127.129646][ T5109] device hsr_slave_1 entered promiscuous mode [ 127.172446][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.180037][ T5109] Cannot create hsr debugfs directory [ 127.371891][ T26] audit: type=1326 audit(1718881730.029:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15b1994f29 code=0x0 [ 127.783911][ T3642] device hsr_slave_0 left promiscuous mode [ 127.790597][ T3642] device hsr_slave_1 left promiscuous mode [ 127.790665][ T5133] loop0: detected capacity change from 0 to 32768 [ 127.803880][ T3642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.811620][ T3642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.820064][ T5135] loop3: detected capacity change from 0 to 32768 [ 127.821187][ T3642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.835207][ T3642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.845634][ T3642] device bridge_slave_1 left promiscuous mode [ 127.851904][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.860404][ T3642] device bridge_slave_0 left promiscuous mode [ 127.867838][ T5135] XFS: ikeep mount option is deprecated. [ 127.875802][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.883831][ T5135] XFS: ikeep mount option is deprecated. [ 127.895808][ T3642] device veth1_macvtap left promiscuous mode [ 127.902152][ T4507] Bluetooth: hci0: command 0x0409 tx timeout [ 127.908934][ T3642] device veth0_macvtap left promiscuous mode [ 127.915384][ T3642] device veth1_vlan left promiscuous mode [ 127.921313][ T3642] device veth0_vlan left promiscuous mode [ 127.947556][ T5135] XFS (loop3): Mounting V5 Filesystem [ 128.082289][ T3642] bond1 (unregistering): Released all slaves [ 128.128371][ T5135] XFS (loop3): Ending clean mount [ 128.175875][ T26] audit: type=1804 audit(1718881730.829:2889): pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1453058945/syzkaller.T6BHRT/114/file0/bus" dev="loop3" ino=9289 res=1 errno=0 [ 128.271082][ T5159] loop1: detected capacity change from 0 to 512 [ 128.287357][ T3532] XFS (loop3): Unmounting Filesystem [ 128.307968][ T3642] team0 (unregistering): Port device team_slave_1 removed [ 128.358036][ T5159] EXT4-fs (loop1): 1 truncate cleaned up [ 128.359501][ T3642] team0 (unregistering): Port device team_slave_0 removed [ 128.363958][ T5159] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,quota,noload,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 128.427076][ T3642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.440539][ T5159] EXT4-fs error (device loop1): ext4_nfs_get_inode:1433: inode #11: comm syz-executor.1: iget: Dir with htree data on filesystem without dir_index feature. [ 128.466098][ T3642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.484404][ T4404] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor.1: path /root/syzkaller-testdir2396625879/syzkaller.3quMvu/40/file0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 128.566954][ T3642] bond0 (unregistering): Released all slaves [ 128.585202][ T4404] EXT4-fs error (device loop1): ext4_lookup:1855: inode #11: comm syz-executor.1: iget: Dir with htree data on filesystem without dir_index feature. [ 128.612182][ T4404] EXT4-fs error (device loop1): ext4_lookup:1855: inode #11: comm syz-executor.1: iget: Dir with htree data on filesystem without dir_index feature. [ 128.714323][ T26] audit: type=1800 audit(1718881731.369:2890): pid=5164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1952 res=0 errno=0 [ 129.046438][ T5175] loop3: detected capacity change from 0 to 1024 [ 129.080295][ T5109] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 129.094853][ T5109] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 129.288506][ T5177] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.297913][ T5177] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.307267][ T5177] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.548728][ T5109] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 129.669140][ T5175] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.883935][ T4507] Bluetooth: hci2: command 0x0409 tx timeout [ 129.916494][ T5144] chnl_net:caif_netlink_parms(): no params data found [ 130.009015][ T4634] Bluetooth: hci0: command 0x041b tx timeout [ 130.011692][ T5109] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 130.365893][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.541340][ T5144] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.720632][ T5144] device bridge_slave_0 entered promiscuous mode [ 131.274778][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.294425][ T5144] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.308274][ T5144] device bridge_slave_1 entered promiscuous mode [ 131.384695][ T5144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.406037][ T5144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.435596][ T5192] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 131.451623][ T5192] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 131.478609][ T5192] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.488034][ T5192] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.497039][ T5192] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.505824][ T5192] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.604123][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.645402][ T5144] team0: Port device team_slave_0 added [ 131.660719][ T5144] team0: Port device team_slave_1 added [ 131.736129][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.760160][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.808354][ T5144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.821640][ T5144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.878876][ T5144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.918993][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.933116][ T5144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.940559][ T5144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.981595][ T4496] Bluetooth: hci2: command 0x041b tx timeout [ 132.001166][ T5144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.061822][ T4496] Bluetooth: hci0: command 0x040f tx timeout [ 132.239021][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.370431][ T5221] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 132.379835][ T5221] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 132.389282][ T5221] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 132.543256][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.550223][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.590818][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.720005][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.727204][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.030503][ T3587] Bluetooth: hci3: command 0x0409 tx timeout [ 133.077577][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.086896][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.102096][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.110562][ T4634] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.117655][ T4634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.174813][ T5144] device hsr_slave_0 entered promiscuous mode [ 133.199789][ T5144] device hsr_slave_1 entered promiscuous mode [ 133.284730][ T5184] chnl_net:caif_netlink_parms(): no params data found [ 133.320320][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.342883][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.420968][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.434085][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.443067][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.453769][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.468433][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.478361][ T26] audit: type=1326 audit(1718881736.129:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5226 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52cc8d2f29 code=0x0 [ 133.479315][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.518659][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.537504][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.603013][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.623375][ T5109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.705033][ T5222] loop3: detected capacity change from 0 to 32768 [ 133.760671][ T5184] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.771336][ T5184] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.788534][ T5184] device bridge_slave_0 entered promiscuous mode [ 133.825284][ T5184] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.850399][ T5184] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.876405][ T5184] device bridge_slave_1 entered promiscuous mode [ 133.955743][ T5184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.988693][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.066656][ T5144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.078397][ T3307] Bluetooth: hci2: command 0x040f tx timeout [ 134.116223][ T5184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.141586][ T4502] Bluetooth: hci0: command 0x0419 tx timeout [ 134.153231][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.160706][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.190455][ T5184] team0: Port device team_slave_0 added [ 134.214004][ T5184] team0: Port device team_slave_1 added [ 134.296466][ T5144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.329535][ T5184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.341578][ T5184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.380845][ T5184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.393371][ T5247] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 134.406995][ T5184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.414819][ T5184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.440811][ T5184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.558675][ T5144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.602817][ T5184] device hsr_slave_0 entered promiscuous mode [ 134.628285][ T5184] device hsr_slave_1 entered promiscuous mode [ 134.642267][ T5184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.681531][ T5184] Cannot create hsr debugfs directory [ 134.709089][ T5245] loop3: detected capacity change from 0 to 32768 [ 134.728082][ T5144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.768014][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.781114][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.805068][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.821029][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.852103][ T5245] XFS (loop3): Mounting V5 Filesystem [ 134.872191][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.880746][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.893285][ T5109] device veth0_vlan entered promiscuous mode [ 134.915883][ T5261] loop0: detected capacity change from 0 to 2048 [ 134.940119][ T5109] device veth1_vlan entered promiscuous mode [ 134.950909][ T5245] XFS (loop3): Ending clean mount [ 134.958803][ T5245] XFS (loop3): Quotacheck needed: Please wait. [ 134.966153][ T5261] loop0: p3 < > p4 < > [ 134.970342][ T5261] loop0: partition table partially beyond EOD, truncated [ 134.992362][ T5261] loop0: p3 start 4284289 is beyond EOD, truncated [ 135.000218][ T3642] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.044334][ T5245] XFS (loop3): Quotacheck: Done. [ 135.051043][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 135.064308][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 135.092189][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.101000][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.125524][ T3532] XFS (loop3): Unmounting Filesystem [ 135.132837][ T4502] Bluetooth: hci3: command 0x041b tx timeout [ 135.146461][ T5109] device veth0_macvtap entered promiscuous mode [ 135.209172][ T3642] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.273777][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.288240][ T5109] device veth1_macvtap entered promiscuous mode [ 135.330870][ T3642] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.398643][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.418973][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.447931][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.467454][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.498814][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.530803][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.565364][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.581082][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.601260][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.738676][ T5275] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.748658][ T5275] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.758326][ T5275] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.402436][ T4504] Bluetooth: hci2: command 0x0419 tx timeout [ 136.433513][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.452652][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.514392][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.538351][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.549454][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.552781][ T5278] loop3: detected capacity change from 0 to 64 [ 136.566532][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.576399][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.586914][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.596830][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.607723][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.650968][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.677595][ T3642] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.698896][ T5280] loop0: detected capacity change from 0 to 2048 [ 136.727224][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.745446][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.784127][ T5109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.794750][ T5281] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.803041][ T5109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.821839][ T5109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.830677][ T5109] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.979212][ T5144] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 137.009307][ T5144] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 137.131954][ T5144] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 137.139294][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.147786][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.164138][ T5144] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 137.181571][ T4496] Bluetooth: hci3: command 0x040f tx timeout [ 137.201513][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.300069][ T3681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.353577][ T3681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.413223][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.554418][ T5144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.620377][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.632373][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.652326][ T5144] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.704706][ T5291] loop3: detected capacity change from 0 to 32768 [ 137.804042][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.822733][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.840442][ T4635] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.847570][ T4635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.863480][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.878075][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.888960][ T4635] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.896076][ T4635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.898733][ T5297] loop4: detected capacity change from 0 to 32768 [ 137.912654][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.929007][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.940151][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.956261][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.985468][ T5297] XFS (loop4): Mounting V5 Filesystem [ 138.019348][ T5291] XFS (loop3): Mounting V5 Filesystem [ 138.028213][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.044550][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.053866][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.077012][ T5297] XFS (loop4): Ending clean mount [ 138.101373][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.115101][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.123673][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.162733][ T5297] XFS (loop4): Quotacheck needed: Please wait. [ 138.170178][ T5291] XFS (loop3): Ending clean mount [ 138.197498][ T5144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.262493][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.270498][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.280086][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.284971][ T5297] XFS (loop4): Quotacheck: Done. [ 138.325134][ T5184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 138.376930][ T3532] XFS (loop3): Unmounting Filesystem [ 138.379509][ T5184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 138.401978][ T5184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 138.413388][ T5109] XFS (loop4): Unmounting Filesystem [ 138.591714][ T5184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 138.890254][ T5184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.920678][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.931778][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.948268][ T5144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.985104][ T5324] loop0: detected capacity change from 0 to 128 [ 139.002057][ T5184] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.009000][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.023061][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.051794][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.070929][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.091031][ T4502] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.098775][ T4502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.147607][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.158932][ T5328] loop4: detected capacity change from 0 to 64 [ 139.174912][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.191879][ T4502] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.199087][ T4502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.262501][ T4504] Bluetooth: hci3: command 0x0419 tx timeout [ 139.270617][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.280060][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.304747][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.327481][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.371956][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.394998][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.412318][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.431114][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.455128][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.515878][ T5184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.537661][ T5184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.630807][ T5343] loop3: detected capacity change from 0 to 2048 [ 139.637426][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.638334][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.663316][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.682539][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.701575][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.749542][ T5144] device veth0_vlan entered promiscuous mode [ 139.773980][ T5347] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.794364][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.828535][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.846623][ T5333] loop0: detected capacity change from 0 to 32768 [ 139.848036][ T5144] device veth1_vlan entered promiscuous mode [ 139.896745][ T5333] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5333) [ 139.901345][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.928850][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.952320][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.987832][ T5333] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 140.063590][ T5333] BTRFS info (device loop0): using free space tree [ 140.070188][ T5333] BTRFS info (device loop0): has skinny extents [ 140.094554][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.110728][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.130745][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.157309][ T5184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.201235][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.216271][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.236531][ T5144] device veth0_macvtap entered promiscuous mode [ 140.291752][ T5144] device veth1_macvtap entered promiscuous mode [ 140.328944][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.337503][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.345905][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.358311][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.439833][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.466717][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.528860][ T5184] device veth0_vlan entered promiscuous mode [ 140.535784][ T5333] BTRFS info (device loop0): enabling ssd optimizations [ 140.546331][ T5144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.556864][ T5144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.568404][ T5144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.578956][ T5144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.588822][ T5144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.601793][ T5144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.612300][ T5144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.630135][ T5144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.640212][ T5144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.650673][ T5144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.662490][ T5144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.669870][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.678475][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.686810][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.696645][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.712599][ T5144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.752853][ T5144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.763338][ T5144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.774621][ T5144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.785997][ T5144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.799586][ T5144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.822424][ T5144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.851707][ T5144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.866781][ T5345] loop4: detected capacity change from 0 to 32768 [ 140.873395][ T5144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.884434][ T5144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.931814][ T5144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.943811][ T5184] device veth1_vlan entered promiscuous mode [ 140.952761][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.960856][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.973044][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.126941][ T5380] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 141.144043][ T1282] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 141.152896][ T1282] Bluetooth: hci4: Injecting HCI hardware error event [ 141.160684][ T5345] XFS (loop4): Mounting V5 Filesystem [ 141.163005][ T3542] Bluetooth: hci4: hardware error 0x00 [ 141.199208][ T5144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.218782][ T5144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.228076][ T5144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.237299][ T5144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.252487][ T5383] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.293333][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.304928][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.335807][ T5184] device veth0_macvtap entered promiscuous mode [ 141.369601][ T3642] device hsr_slave_0 left promiscuous mode [ 141.393372][ T5345] XFS (loop4): Ending clean mount [ 141.402683][ T3642] device hsr_slave_1 left promiscuous mode [ 141.452508][ T3642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.459961][ T3642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.469366][ T5109] XFS (loop4): Unmounting Filesystem [ 141.493781][ T3642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.501235][ T3642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.539092][ T5389] loop0: detected capacity change from 0 to 16 [ 141.547733][ T3642] device bridge_slave_1 left promiscuous mode [ 141.562088][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.595636][ T3642] device bridge_slave_0 left promiscuous mode [ 141.599914][ T5389] erofs: (device loop0): mounted with root inode @ nid 36. [ 141.613195][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.644533][ T3642] device hsr_slave_0 left promiscuous mode [ 141.662029][ T3642] device hsr_slave_1 left promiscuous mode [ 141.671128][ T3642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.691916][ T3642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.706860][ T3642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.718283][ T3642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.728358][ T3642] device bridge_slave_1 left promiscuous mode [ 141.751622][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.783184][ T3642] device bridge_slave_0 left promiscuous mode [ 141.789402][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.862059][ T3642] device veth1_macvtap left promiscuous mode [ 141.864383][ T5387] loop3: detected capacity change from 0 to 40427 [ 141.868142][ T3642] device veth0_macvtap left promiscuous mode [ 141.907741][ T5395] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 141.913790][ T3642] device veth1_vlan left promiscuous mode [ 141.928920][ T5387] F2FS-fs (loop3): invalid crc value [ 141.937918][ T3642] device veth0_vlan left promiscuous mode [ 141.947547][ T3642] device veth1_macvtap left promiscuous mode [ 141.960216][ T5387] F2FS-fs (loop3): Found nat_bits in checkpoint [ 141.964401][ T5401] loop4: detected capacity change from 0 to 64 [ 141.971534][ T3642] device veth0_macvtap left promiscuous mode [ 141.982418][ T3642] device veth1_vlan left promiscuous mode [ 141.988234][ T3642] device veth0_vlan left promiscuous mode [ 142.044355][ T5387] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 142.087366][ T5387] F2FS-fs (loop3): Corrupted max_depth of 3: 4294967295 [ 142.525205][ T3642] team0 (unregistering): Port device team_slave_1 removed [ 142.543713][ T3642] team0 (unregistering): Port device team_slave_0 removed [ 142.557825][ T3642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.574147][ T3642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.648082][ T3642] bond0 (unregistering): Released all slaves [ 142.787734][ T3642] team0 (unregistering): Port device team_slave_1 removed [ 142.806757][ T3642] team0 (unregistering): Port device team_slave_0 removed [ 142.820556][ T3642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.837725][ T3642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.925224][ T3642] bond0 (unregistering): Released all slaves [ 142.995022][ T5395] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 143.006091][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.072218][ T5184] device veth1_macvtap entered promiscuous mode [ 143.149465][ T5184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.180973][ T5184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.199801][ T5184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.210411][ T5184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.227961][ T5184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.238670][ T5184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.257328][ T5184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.277388][ T5184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.297700][ T5184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.316120][ T26] audit: type=1804 audit(1718881745.969:2892): pid=5418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2770722888/syzkaller.gwFfMY/12/bus" dev="sda1" ino=1952 res=1 errno=0 [ 143.349499][ T3680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.379989][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.402416][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.422135][ T3680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.496313][ T5184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.508946][ T5184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.551847][ T5184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.571972][ T5184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.601166][ T5184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.629696][ T5184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.649989][ T5184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.673342][ T5184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.697304][ T5184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.697564][ T5412] loop0: detected capacity change from 0 to 32768 [ 143.715706][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.730310][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.754301][ T5412] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5412) [ 143.771923][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.785852][ T3680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.807920][ T5184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.822436][ T3680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.834183][ T5184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.852794][ T5184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.871115][ T5184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.914396][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.922407][ T5412] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 143.931058][ T5412] BTRFS info (device loop0): using free space tree [ 143.966391][ T5427] loop3: detected capacity change from 0 to 32768 [ 143.994215][ T5412] BTRFS info (device loop0): has skinny extents [ 144.016389][ T5429] loop2: detected capacity change from 0 to 512 [ 144.052624][ T5427] XFS: ikeep mount option is deprecated. [ 144.058291][ T5427] XFS: ikeep mount option is deprecated. [ 144.105709][ T5440] loop4: detected capacity change from 0 to 256 [ 144.145914][ T5427] XFS (loop3): Mounting V5 Filesystem [ 144.167092][ T5429] EXT4-fs (loop2): 1 orphan inode deleted [ 144.213626][ T3681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.234731][ T5429] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 144.244528][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.270058][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.271906][ T3681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.283043][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.309658][ T5412] BTRFS info (device loop0): enabling ssd optimizations [ 144.323964][ T26] audit: type=1800 audit(1718881746.979:2893): pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file2" dev="loop4" ino=1048615 res=0 errno=0 [ 144.327489][ T5429] ext4 filesystem being mounted at /root/syzkaller-testdir3207662637/syzkaller.BZfH1A/0/file1 supports timestamps until 2038 (0x7fffffff) [ 144.362627][ T5440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 144.384606][ T5440] FAT-fs (loop4): Filesystem has been set read-only [ 144.417457][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.506719][ T5462] loop4: detected capacity change from 0 to 64 [ 144.554179][ T5427] XFS (loop3): Ending clean mount [ 144.687268][ T5467] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.696458][ T26] audit: type=1804 audit(1718881747.339:2894): pid=5427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1453058945/syzkaller.T6BHRT/142/file0/bus" dev="loop3" ino=9289 res=1 errno=0 [ 144.993790][ T5467] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 145.021532][ T3532] XFS (loop3): Unmounting Filesystem [ 145.045302][ T5473] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.076950][ T5473] netlink: 'syz-executor.4': attribute type 25 has an invalid length. [ 145.094808][ T5473] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.104243][ T5473] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.113246][ T5473] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.121999][ T5473] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.419636][ T5474] chnl_net:caif_netlink_parms(): no params data found [ 145.784030][ T5474] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.811521][ T5474] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.819966][ T5474] device bridge_slave_0 entered promiscuous mode [ 145.911797][ T5474] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.918890][ T5474] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.920088][ T5495] loop3: detected capacity change from 0 to 4096 [ 145.962712][ T5474] device bridge_slave_1 entered promiscuous mode [ 146.032620][ T5495] ntfs3: Unknown parameter 'iocÝ©¨Ë et' [ 146.145482][ T5474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.193885][ T5474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.223428][ T3307] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 146.241549][ T3307] Bluetooth: hci0: Injecting HCI hardware error event [ 146.254116][ T3543] Bluetooth: hci0: hardware error 0x00 [ 146.287345][ T5502] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 146.374830][ T5508] loop4: detected capacity change from 0 to 2048 [ 146.396491][ T5474] team0: Port device team_slave_0 added [ 146.422462][ T5474] team0: Port device team_slave_1 added [ 146.470494][ T5508] loop4: p3 < > p4 < > [ 146.474827][ T5508] loop4: partition table partially beyond EOD, truncated [ 146.494186][ T5508] loop4: p3 start 4284289 is beyond EOD, truncated [ 146.594096][ T5474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.601153][ T5474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.708564][ T5474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.771954][ T5474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.786811][ T5474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.819224][ T3541] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 146.844777][ T5474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.956298][ T5474] device hsr_slave_0 entered promiscuous mode [ 147.008758][ T5474] device hsr_slave_1 entered promiscuous mode [ 147.051705][ T5474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.089795][ T5474] Cannot create hsr debugfs directory [ 147.107674][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 147.364881][ T5474] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.436112][ T5474] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.440894][ T5539] loop0: detected capacity change from 0 to 24 [ 147.523974][ T5539] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 147.538029][ T5474] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.585255][ T4503] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 147.621218][ T5474] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.659239][ T5539] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 147.833644][ T4503] usb 2-1: Using ep0 maxpacket: 8 [ 147.859093][ T5474] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 147.882144][ T5474] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 147.899683][ T5474] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 147.952075][ T4503] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.972165][ T4503] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.988675][ T4503] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 147.998305][ T4503] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.018699][ T5474] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 148.111014][ T5544] VFS: Lookup of 'file0' in romfs loop0 would have caused loop [ 148.256085][ T5474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.259550][ T5550] loop3: detected capacity change from 0 to 2048 [ 148.340334][ T5550] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.385388][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.399591][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.410265][ T5474] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.472136][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.495951][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.514088][ T4503] uclogic 0003:28BD:0075.0002: unknown main item tag 0x0 [ 148.526284][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.533458][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.554702][ T4503] uclogic 0003:28BD:0075.0002: unknown main item tag 0x0 [ 148.578061][ T4503] uclogic 0003:28BD:0075.0002: unknown main item tag 0x4 [ 148.605351][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.631569][ T4503] uclogic 0003:28BD:0075.0002: unknown main item tag 0x0 [ 148.659714][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.698373][ T4503] uclogic 0003:28BD:0075.0002: No inputs registered, leaving [ 148.713445][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.720629][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.733593][ T4503] uclogic 0003:28BD:0075.0002: hidraw0: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.1-1/input0 [ 148.761043][ T4503] usb 2-1: USB disconnect, device number 7 [ 148.804697][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.813941][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.825420][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.842904][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.876529][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.890200][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.915013][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.936904][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.948148][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.976335][ T5474] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.985097][ T5552] loop3: detected capacity change from 0 to 16 [ 149.018911][ T5474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.030087][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.049680][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.066785][ T5552] erofs: (device loop3): mounted with root inode @ nid 36. [ 149.068960][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.132077][ T5552] erofs: (device loop3): z_erofs_readpage: failed to read, err [-95] [ 149.192229][ T3569] Bluetooth: hci2: command 0x041b tx timeout [ 149.342262][ T3307] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 149.357213][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.367759][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.382451][ T3307] Bluetooth: hci1: Injecting HCI hardware error event [ 149.394393][ T5474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.402955][ T3538] Bluetooth: hci1: hardware error 0x00 [ 149.550700][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.561800][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.629977][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.643704][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.656283][ T5569] loop4: detected capacity change from 0 to 764 [ 149.695224][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.718324][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.734237][ T5474] device veth0_vlan entered promiscuous mode [ 149.786043][ T3642] device hsr_slave_0 left promiscuous mode [ 149.807077][ T3642] device hsr_slave_1 left promiscuous mode [ 149.814777][ T3642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.825363][ T5573] loop1: detected capacity change from 0 to 512 [ 149.841276][ T3642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.854276][ T3642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.863239][ T3642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.878027][ T3642] device bridge_slave_1 left promiscuous mode [ 149.880501][ T5576] syz-executor.3[5576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.889342][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.922979][ T5576] syz-executor.3[5576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.943961][ T3642] device bridge_slave_0 left promiscuous mode [ 150.009519][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.053553][ T3642] device veth1_macvtap left promiscuous mode [ 150.070071][ T3642] device veth0_macvtap left promiscuous mode [ 150.090433][ T3642] device veth1_vlan left promiscuous mode [ 150.108953][ T5573] EXT4-fs (loop1): Test dummy encryption mode enabled [ 150.117261][ T3642] device veth0_vlan left promiscuous mode [ 150.140696][ T5573] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz-executor.1: inline data xattr refers to an external xattr inode [ 150.189915][ T5573] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz-executor.1: couldn't read orphan inode 12 (err -117) [ 150.214309][ T5573] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,inode_readahead_blks=0x0000000000200000,sb=0x0000000000000001,prjquota,usrquota,usrjquota=,nojournal_checksum,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 150.366609][ T5573] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 150.437867][ T5573] loop_set_status: loop1 () has still dirty pages (nrpages=1) [ 150.626503][ T3642] team0 (unregistering): Port device team_slave_1 removed [ 150.653677][ T3642] team0 (unregistering): Port device team_slave_0 removed [ 150.682403][ T3642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.690605][ T5602] loop1: detected capacity change from 0 to 64 [ 150.708332][ T3642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.851261][ T3642] bond0 (unregistering): Released all slaves [ 151.613452][ T3569] Bluetooth: hci2: command 0x040f tx timeout [ 151.622883][ T5615] binder: 5612:5615 ioctl 4018620d 0 returned -22 [ 151.686756][ T5615] loop4: detected capacity change from 0 to 2048 [ 151.761880][ T5615] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.958554][ T5619] loop1: detected capacity change from 0 to 2048 [ 152.018205][ T5619] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 152.039167][ T5619] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 152.051018][ T5619] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 152.067290][ T5619] UDF-fs: Scanning with blocksize 512 failed [ 152.087489][ T5619] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.118114][ T26] audit: type=1800 audit(1718881754.769:2895): pid=5619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=851 res=0 errno=0 [ 153.671653][ T4635] Bluetooth: hci2: command 0x0419 tx timeout [ 182.621636][ T4510] Bluetooth: hci5: command 0x0409 tx timeout [ 182.701693][ T4510] Bluetooth: hci6: command 0x0409 tx timeout [ 183.181561][ T13] Bluetooth: hci7: command 0x0409 tx timeout [ 184.541562][ T13] Bluetooth: hci8: command 0x0409 tx timeout [ 184.711608][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 184.781825][ T13] Bluetooth: hci6: command 0x041b tx timeout [ 185.263731][ T4510] Bluetooth: hci7: command 0x041b tx timeout [ 186.631650][ T13] Bluetooth: hci8: command 0x041b tx timeout [ 186.781580][ T13] Bluetooth: hci5: command 0x040f tx timeout [ 186.861958][ T13] Bluetooth: hci6: command 0x040f tx timeout [ 187.341617][ T4510] Bluetooth: hci7: command 0x040f tx timeout [ 188.701633][ T13] Bluetooth: hci8: command 0x040f tx timeout [ 188.862685][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 188.951876][ T13] Bluetooth: hci6: command 0x0419 tx timeout [ 189.421526][ T13] Bluetooth: hci7: command 0x0419 tx timeout [ 190.781570][ T13] Bluetooth: hci8: command 0x0419 tx timeout [ 193.984384][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.990729][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.141493][ T4496] Bluetooth: hci9: command 0x0409 tx timeout [ 214.221461][ T4496] Bluetooth: hci9: command 0x041b tx timeout [ 216.301549][ T4496] Bluetooth: hci9: command 0x040f tx timeout [ 218.381462][ T13] Bluetooth: hci9: command 0x0419 tx timeout [ 247.821612][ T4496] Bluetooth: hci10: command 0x0409 tx timeout [ 247.901611][ T4496] Bluetooth: hci11: command 0x0409 tx timeout [ 248.221510][ T4496] Bluetooth: hci12: command 0x0409 tx timeout [ 249.581526][ T4496] Bluetooth: hci13: command 0x0409 tx timeout [ 249.901659][ T4496] Bluetooth: hci10: command 0x041b tx timeout [ 249.981597][ T4496] Bluetooth: hci11: command 0x041b tx timeout [ 250.302168][ T13] Bluetooth: hci12: command 0x041b tx timeout [ 251.661451][ T4496] Bluetooth: hci13: command 0x041b tx timeout [ 251.981622][ T13] Bluetooth: hci10: command 0x040f tx timeout [ 252.061574][ T13] Bluetooth: hci11: command 0x040f tx timeout [ 252.383517][ T13] Bluetooth: hci12: command 0x040f tx timeout [ 253.741486][ T13] Bluetooth: hci13: command 0x040f tx timeout [ 254.061564][ T4496] Bluetooth: hci10: command 0x0419 tx timeout [ 254.141607][ T4496] Bluetooth: hci11: command 0x0419 tx timeout [ 254.471562][ T4496] Bluetooth: hci12: command 0x0419 tx timeout [ 255.434187][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.440558][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.821449][ T13] Bluetooth: hci13: command 0x0419 tx timeout [ 257.501546][ T4496] Bluetooth: hci3: command 0x0406 tx timeout [ 267.741595][ T4496] Bluetooth: hci2: command 0x0406 tx timeout [ 277.351522][ T13] Bluetooth: hci14: command 0x0409 tx timeout [ 279.421489][ T3307] Bluetooth: hci14: command 0x041b tx timeout [ 281.501456][ T4496] Bluetooth: hci14: command 0x040f tx timeout [ 283.581650][ T13] Bluetooth: hci14: command 0x0419 tx timeout [ 303.581698][ T13] Bluetooth: hci5: command 0x0406 tx timeout [ 303.587789][ T13] Bluetooth: hci6: command 0x0406 tx timeout [ 303.601406][ T13] Bluetooth: hci7: command 0x0406 tx timeout [ 308.701651][ T13] Bluetooth: hci8: command 0x0406 tx timeout [ 313.031873][ T4496] Bluetooth: hci15: command 0x0409 tx timeout [ 313.101536][ T4496] Bluetooth: hci16: command 0x0409 tx timeout [ 313.191630][ T4496] Bluetooth: hci17: command 0x0409 tx timeout [ 313.661657][ T27] INFO: task kworker/0:2:1069 blocked for more than 143 seconds. [ 313.669420][ T27] Not tainted 5.15.161-syzkaller #0 [ 313.682488][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 313.697052][ T27] task:kworker/0:2 state:D stack:23392 pid: 1069 ppid: 2 flags:0x00004000 2024/06/20 11:11:56 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 313.707626][ T27] Workqueue: events linkwatch_event [ 313.752598][ T27] Call Trace: [ 313.756214][ T27] [ 313.759177][ T27] __schedule+0x12c4/0x45b0 [ 313.770347][ T27] ? mark_lock+0x98/0x340 [ 313.775909][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 313.787621][ T27] ? release_firmware_map_entry+0x190/0x190 [ 313.794853][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 313.800331][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 313.812644][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 313.817877][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 313.830752][ T27] schedule+0x11b/0x1f0 [ 313.837334][ T27] schedule_preempt_disabled+0xf/0x20 [ 313.847536][ T27] __mutex_lock_common+0xe34/0x25a0 [ 313.855286][ T27] ? linkwatch_event+0xa/0x50 [ 313.860759][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 313.870580][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 313.878839][ T27] ? print_irqtrace_events+0x210/0x210 [ 313.888976][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 313.897250][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 313.911406][ T27] mutex_lock_nested+0x17/0x20 [ 313.916200][ T27] linkwatch_event+0xa/0x50 [ 313.920719][ T27] process_one_work+0x8a1/0x10c0 [ 313.931864][ T27] ? worker_detach_from_pool+0x260/0x260 [ 313.937552][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 313.950615][ T27] ? kthread_data+0x4e/0xc0 [ 313.956392][ T27] ? wq_worker_running+0x97/0x170 [ 313.967902][ T27] worker_thread+0xaca/0x1280 [ 313.973985][ T27] kthread+0x3f6/0x4f0 [ 313.978074][ T27] ? rcu_lock_release+0x20/0x20 [ 313.990733][ T27] ? kthread_blkcg+0xd0/0xd0 [ 313.996506][ T27] ret_from_fork+0x1f/0x30 [ 314.000948][ T27] [ 314.009619][ T27] INFO: task kworker/0:3:1282 blocked for more than 143 seconds. [ 314.018635][ T27] Not tainted 5.15.161-syzkaller #0 [ 314.029990][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.040408][ T27] task:kworker/0:3 state:D stack:24632 pid: 1282 ppid: 2 flags:0x00004000 [ 314.055288][ T27] Workqueue: ipv6_addrconf addrconf_dad_work [