last executing test programs: 9m41.516791829s ago: executing program 32 (id=322): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000009c0)="f2b4e4f180ec3860b99bb254602fb717f9437cd2547fce2306325491a0ec68779f10729ed1f62f6e2c132ca90d49aa95a1ed03f8c6b4f274bf080197a2f4c0fad41128ae51096ffcba1b5266add485ebbd308420c601f47062eb3fcbbb91207f65d852dd8966f195f9c9300b939bb8395eedebf432e9f4518e838779a8d8c8283797a2116396f1fcef6cad72ccc5f1784bdfdebd04af58f57424c27be084c48079913780d2c30a94a2f7891b3ca75c", 0xaf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="3d9d40048b0db2fcd67430041c2e4f80978623d85d64555c0bcbf8be05bddc1167992ebe4a9cee1bdb9dd4ba350b5f22f5e376cd", 0x34}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 8m15.565986322s ago: executing program 33 (id=780): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x4, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6}, 0x10) 7m26.793196462s ago: executing program 34 (id=1076): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000440)='.', 0x1}], 0x1}, 0x0) 6m34.777798263s ago: executing program 35 (id=1402): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@usrjquota_path={'usrjquota', 0x3d, './file2'}}]}, 0x1, 0x437, &(0x7f0000000900)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x48, 0x8, 0xffff, 0xf, 0x1, 0xffffffffffffffbd], 0x1, 0x0, 0x0, [{}]}, 0x88) 6m26.243948823s ago: executing program 1 (id=1462): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000280)={0x8, 0x101, 0x1, 0x0, 0x0, [{{r0}}]}) 6m26.008254748s ago: executing program 1 (id=1463): socket(0x10, 0x803, 0x0) epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m25.202183086s ago: executing program 1 (id=1466): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0xffff5f11, 0xfffd, 0xfffffffffffffffb, 0xb, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x28, 0x4, 0x2}) 6m23.986418613s ago: executing program 1 (id=1472): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2000004c, &(0x7f0000002c00)=ANY=[], 0xfe, 0x152b, &(0x7f0000000140)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x25080, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x2000, 0x56) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0x19, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2833b738e062a00000000f730b7ecb98454c0b900", [0x204]}) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) 6m23.302827438s ago: executing program 1 (id=1478): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}, 0x1b1}], 0x1, 0x12000, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x30000004}) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x7c0e, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m22.463341596s ago: executing program 1 (id=1483): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 6m22.157881983s ago: executing program 36 (id=1483): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 5m31.487773505s ago: executing program 6 (id=1829): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="fb", 0x1) r1 = accept(r0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x20004884}, 0x20008899) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000200)={0x0, 0x2c, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdcc}, 0x1, 0x0, 0x0, 0x44808}, 0x4) 5m31.3066593s ago: executing program 6 (id=1830): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 5m30.187968614s ago: executing program 6 (id=1837): openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x4c1ab3ea8b989809, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20902, 0x0) write$sequencer(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="810100000000000081", @ANYRES32=r1], 0x10) 5m28.595719469s ago: executing program 6 (id=1845): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x12040cc, &(0x7f00000003c0)={[{@shortname_winnt}, {@shortname_winnt}, {@numtail}, {}, {@rodir}, {@utf8}, {@fat=@discard}, {@fat=@nfs_nostale_ro}, {@rodir}, {@shortname_mixed}, {@rodir}, {@utf8no}, {@utf8}]}, 0x0, 0x2ad, &(0x7f0000000580)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhYsH3ehmaOMnCNKCGFBqI+pCmNqJhoxJyMRIRGx3bv0cxaUrBfULdOPOvbgpguCmC3GkyUybpgHTapza/H9Q5u05886c4cyEdwYy2b75/EG56FlFu6FY0igmbWhHyuxGgbFgGWvHk+q2oQvTXz/8f/3W7Su5fH5x2Zil3MrFrDFm9sybR09enH3XmL7xcvZ1QluZO9tfsh+3/tn6d/v7Srj1qmSb1Wq1Ya+6jlkreWXLmGuuY3uOKVU8p94wXf1Ft1qrtYxdWZtJ1eqO5xm70jJlp2UaVdOot4x9zy5VjGVZZialURM/ckZhc3nZzg1lMIjCVL/Gej1nx/t2Fjb/xKAAAMDJElX9f7/kmZJnKtUD9f3h+j+mI9T/0kjX/8dVi3oAGKrd+j8VXL8HUf8DAAAAAAAAAAAAAAAAAAAAAPA32PH9tO/76XAZ/iUkJSWF/0c9TgwH8z/aur64l5TcZ81Cs9BZdvpzRZXkytH8hPStfT4EOvHS5fzivGnL6K27HuSvNwtxJcL8UKZ//kIn33Tnr2tCqe79Z5XWXP/8bJ/8ZmFS58/5iWDPjiyl9f6uqnK11j6v9/OfLhhz6Wq+J3+qvR4AAAAAAKeBZfYcun9v91smfG1IT3+ncf/5gNI/eT7Qc389rv/GoztuAAAAAABGiTepsu26Tt1rPT7tQfj7B79lg1LUh5McdOVxSUHLq5MyF4MEMUm9XROHWvoH8V+b5c/SwetiLvLpPnbgx/fO1U8PO1fAIOlRfioBAAAAGIaw6B+LeiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIywQd8iFq5/nJeQde0uHs1RAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACfDjwAAAP//5JwTUw==") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 5m28.124951479s ago: executing program 6 (id=1848): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ppoll(&(0x7f0000000080)=[{r0, 0x29}, {r0, 0x8402}], 0x2, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_create(0x2, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r2, 0xe54aef35e9c2845d, &(0x7f0000000280)={{}, {0x0, 0x9}}, 0x0) 5m27.527913403s ago: executing program 6 (id=1850): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000001c0)={0x7ff, 0x6, 0x3, 0x8, 0x40, "27347c571aa4d085b048cb807394b6224c1989", 0x0, 0x8001}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x800) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) 5m27.038964854s ago: executing program 37 (id=1850): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000001c0)={0x7ff, 0x6, 0x3, 0x8, 0x40, "27347c571aa4d085b048cb807394b6224c1989", 0x0, 0x8001}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x800) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) 4m24.915903259s ago: executing program 8 (id=2171): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r1, 0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4m24.707685174s ago: executing program 8 (id=2172): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r1, 0x0, &(0x7f0000002500)="94", 0x1, 0x852}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000000440)='/', 0x1, 0xa}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000800)={0x28, 0x5, r1, 0x0, &(0x7f0000000100)='d', 0x1, 0x100000000}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000240)={0x18, r1, 0x1440, 0x280000000}) 4m24.589621897s ago: executing program 8 (id=2173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4", 0x19}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m23.649730937s ago: executing program 8 (id=2179): syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1e3, &(0x7f0000000140)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) unshare(0x6020400) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 4m23.013232481s ago: executing program 8 (id=2182): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x32, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000800000/0x800000)=nil, 0x800000}) 4m22.379931475s ago: executing program 8 (id=2184): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x10041, &(0x7f00000001c0)={@align=0x1, {0x7, 0xeb, 0xfff, 0x7}}, 0x9, 0x0, 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 4m21.7267538s ago: executing program 38 (id=2184): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x10041, &(0x7f00000001c0)={@align=0x1, {0x7, 0xeb, 0xfff, 0x7}}, 0x9, 0x0, 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 4m12.114578623s ago: executing program 7 (id=2226): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000a000)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x159b, 0x1c881, 0x8, 0xd1}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m11.79811999s ago: executing program 7 (id=2227): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x2000, 0x1) 4m11.416815949s ago: executing program 7 (id=2229): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000f00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000180)={0x28, r4, r2}) 4m10.975308698s ago: executing program 7 (id=2231): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 4m10.660483865s ago: executing program 7 (id=2232): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 4m9.943860111s ago: executing program 7 (id=2233): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000240)={r2, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x40}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x9}, &(0x7f0000000300)=0x8) 4m9.397128873s ago: executing program 39 (id=2233): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000240)={r2, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x40}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x9}, &(0x7f0000000300)=0x8) 3m28.133155627s ago: executing program 9 (id=2506): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg$kcm(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/80, 0x50}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000340)="b8", 0x1}], 0x1}, 0x4000001) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811) 3m27.100401119s ago: executing program 9 (id=2515): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x101001a, 0x0, 0xfb, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x3, {0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000380)={&(0x7f0000000080)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0x4, 0x18020028, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x28, 0x5, 0x8c0020, 0x0, 0xfff9, 0x80000000, 0x8000}}, 0x50) unlink(&(0x7f0000000100)='./file0/file0\x00') 3m26.760523447s ago: executing program 9 (id=2517): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000079"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000380)={0xa, 0x4e1d, 0x4, @mcast2}, 0x1c) capset(0x0, 0x0) sendto$inet6(r2, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 3m26.519980733s ago: executing program 9 (id=2519): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 3m26.303152427s ago: executing program 9 (id=2521): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x29, 0x0, 0x81, 0xffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ba3000/0x3000)=nil, 0x3000, 0xa}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f00007d4000/0x4000)=nil, 0x4000, 0xfffffffffffffffe}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) 3m25.859928327s ago: executing program 9 (id=2522): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000800)=""/248, 0xf8, 0x0, 0x0, 0x0) 3m25.224269431s ago: executing program 40 (id=2522): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000800)=""/248, 0xf8, 0x0, 0x0, 0x0) 2m9.342551622s ago: executing program 5 (id=2925): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r2, 0xff}, &(0x7f0000000080)=0x8) 2m8.798293224s ago: executing program 5 (id=2928): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}, 0x1, 0xff07}, 0x2000000) 2m7.515978042s ago: executing program 5 (id=2933): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2}, 0x10) 2m6.462211405s ago: executing program 5 (id=2937): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000100)={[{@nobarrier}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') mknod$loop(&(0x7f0000000240)='./file2\x00', 0x40, 0x0) 2m5.461288027s ago: executing program 5 (id=2940): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141042, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r2 = eventfd2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10044, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000300)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) shutdown(r0, 0x0) 2m3.152559249s ago: executing program 5 (id=2955): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000004c0)='./mnt\x00', 0x840, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x249, &(0x7f00000007c0)="$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") symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84842, 0x181) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0xee00) 2m2.742275928s ago: executing program 41 (id=2955): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000004c0)='./mnt\x00', 0x840, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x249, &(0x7f00000007c0)="$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") symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84842, 0x181) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0xee00) 4.853700326s ago: executing program 0 (id=3852): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x6703a, 0x5922b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.544561437s ago: executing program 3 (id=3859): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) 3.347894731s ago: executing program 0 (id=3861): socket(0xa, 0x5, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xb0bc, 0x100, 0xfffffffe, 0x1b7}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.283428943s ago: executing program 3 (id=3862): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x1c2}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$unix(r2, &(0x7f0000000440)=@file={0x1}, 0x6e) 2.9820152s ago: executing program 3 (id=3864): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0xfffd, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) 2.809294494s ago: executing program 0 (id=3866): unshare(0x400) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r4, 0x11, 0x36, 0xffffffffffffffff, &(0x7f0000000340)=0xfffffffffffffdb7) 2.204163108s ago: executing program 0 (id=3870): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) 1.857002686s ago: executing program 4 (id=3872): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x81fffffe, 0x4, 0xc1, 0x4f, 0x3, 0xbd, 0x80, 0x6, 0x1, 0x44, 0x8, 0x3, 0x500}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xfb, 0x44, 0x87, 0xa, 0x6, 0x7, 0x6}, {0x1fd, 0x8, 0xd, 0x21, 0x25, 0x9, 0x1, 0x16, 0x3, 0x15, 0x0, 0x7, 0x4}], 0x20000002}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x8000000000000000, 0x3fe, 0x0, 0x1000, 0x2, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x3, 0x2, 0x4, 0x63, 0x1aa], 0xeeee0000, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.539787143s ago: executing program 4 (id=3874): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x80000001) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000200)="28352d520b797fc4fe1fa5803d672592fbc91145f2fb20f2ebf2295fd36592d304d9ed56dba9740177688fa176f52a0d57ad07d5b474c6d650cd22e941e51288338a004d", 0x44}], 0x1) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 1.539352503s ago: executing program 2 (id=3875): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @private2, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) 1.532848034s ago: executing program 0 (id=3876): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000895}, 0xc000) 1.291175159s ago: executing program 2 (id=3877): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1.26956576s ago: executing program 4 (id=3878): mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000001, 0x2172, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 991.921426ms ago: executing program 4 (id=3879): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x2000) 991.604466ms ago: executing program 2 (id=3880): r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d1e000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x2d, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x348}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r0, &(0x7f000001a600)=""/102385, 0x18ff1, 0x7fffffffffffffff, 0x0) 743.208612ms ago: executing program 4 (id=3881): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffc}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) 740.592822ms ago: executing program 2 (id=3882): socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x370, 0xc000, 0xc, 0x803e3}) syz_emit_ethernet(0x6e, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\t', 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x9, 0x2f, 0xff, @loopback, @local, [@fragment={0x3c, 0x0, 0x27, 0x1, 0x0, 0x14, 0x68}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 614.865245ms ago: executing program 3 (id=3883): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) 546.379797ms ago: executing program 4 (id=3884): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200008c6, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB="00646d61736b3d309a02003030303030303030303135322c696f63686172e8ffffff69736f383835392d312c6769643d00000000000000", @ANYRES16, @ANYRESHEX, @ANYRES64, @ANYRESOCT], 0x81, 0x14ff, &(0x7f0000002a80)="$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") write$bt_hci(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 462.522929ms ago: executing program 0 (id=3885): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 388.002911ms ago: executing program 2 (id=3886): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x3e, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 346.994272ms ago: executing program 3 (id=3887): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x56f2be14c64fc14d}, 0x400c000) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 217.360314ms ago: executing program 2 (id=3888): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) 0s ago: executing program 3 (id=3889): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x0, r1}) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x3, 0x4) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 479] bond0: entered promiscuous mode [ 403.558200][T12479] bond_slave_0: entered promiscuous mode [ 403.578078][T12479] bond_slave_1: entered promiscuous mode [ 403.587803][ T5892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.646613][T12479] bond0: left promiscuous mode [ 403.658821][T12479] bond_slave_0: left promiscuous mode [ 403.688962][T12479] bond_slave_1: left promiscuous mode [ 404.057039][T12480] bond0: entered promiscuous mode [ 404.187321][T12480] bond_slave_0: entered promiscuous mode [ 404.334178][T12480] bond_slave_1: entered promiscuous mode [ 404.563020][T12480] bond0: left promiscuous mode [ 404.567983][T12480] bond_slave_0: left promiscuous mode [ 404.594748][T12480] bond_slave_1: left promiscuous mode [ 404.888711][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1950'. [ 406.428443][ T5810] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 406.620612][ T5810] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 406.653784][ T5810] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.679719][ T5810] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 406.719860][ T5810] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.740413][ T5810] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 406.772057][ T5810] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 406.808368][ T5810] usb 9-1: Product: syz [ 406.823231][ T5810] usb 9-1: Manufacturer: syz [ 406.845811][ T5810] cdc_wdm 9-1:1.0: skipping garbage [ 406.865045][ T5810] cdc_wdm 9-1:1.0: skipping garbage [ 406.922346][ T5810] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 406.950067][ T5810] cdc_wdm 9-1:1.0: Unknown control protocol [ 407.160639][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 407.167618][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 407.175926][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 407.182722][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 407.199007][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 407.206142][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 407.212765][ T5775] usb 9-1: USB disconnect, device number 3 [ 407.219587][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 407.219615][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 407.219643][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 407.326520][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1962'. [ 407.355949][T12543] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.365727][T12543] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.374793][T12543] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.383892][T12543] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.432467][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1962'. [ 410.756843][T12628] netlink: 'syz.9.1985': attribute type 1 has an invalid length. [ 410.801379][T12628] netlink: 'syz.9.1985': attribute type 22 has an invalid length. [ 410.829438][T12628] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.837239][T12628] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.652449][T12653] netlink: 'syz.7.1994': attribute type 1 has an invalid length. [ 411.771251][T12653] bond2: entered promiscuous mode [ 411.807764][T12653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 411.990232][T12660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 412.059588][T12660] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 412.142492][T12660] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 412.184494][T12660] bond2: (slave vti0): making interface the new active one [ 412.223655][T12660] vti0: entered promiscuous mode [ 412.250433][T12660] bond2: (slave vti0): Enslaving as an active interface with an up link [ 413.333992][T12704] loop9: detected capacity change from 0 to 4096 [ 413.369074][T12704] EXT4-fs (loop9): Test dummy encryption mode enabled [ 413.407882][T12704] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.770977][T12108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.099051][ T172] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 414.319770][ T172] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 414.340924][ T172] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.388358][ T172] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 414.397442][ T172] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.455293][ T172] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 414.478378][ T172] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 414.497899][ T172] usb 8-1: Product: syz [ 414.513106][ T172] usb 8-1: Manufacturer: syz [ 414.533417][ T172] cdc_wdm 8-1:1.0: skipping garbage [ 414.553794][ T172] cdc_wdm 8-1:1.0: skipping garbage [ 414.579141][ T172] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 414.608514][ T172] cdc_wdm 8-1:1.0: Unknown control protocol [ 414.863850][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 414.870539][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 414.877128][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 414.883780][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 414.898655][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 414.908393][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 414.915766][ T5775] usb 8-1: USB disconnect, device number 5 [ 414.922093][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 414.922121][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 414.922137][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 415.117771][T12719] loop9: detected capacity change from 0 to 32768 [ 415.140395][T12719] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.2008 (12719) [ 415.220072][T12719] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 415.309193][T12719] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 415.318096][T12719] BTRFS info (device loop9): turning on sync discard [ 415.341224][T12719] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 415.413808][T12719] BTRFS info (device loop9): use zstd compression, level 3 [ 415.421660][T12719] BTRFS info (device loop9): turning on async discard [ 415.431252][T12719] BTRFS warning (device loop9): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 415.443921][T12719] BTRFS info (device loop9): trying to use backup root at mount time [ 415.509928][T12719] BTRFS info (device loop9): enabling auto defrag [ 415.516453][T12719] BTRFS info (device loop9): enabling ssd optimizations [ 415.584471][T12719] BTRFS info (device loop9): using free space tree [ 415.684364][ T2950] BTRFS warning (device loop9): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 415.742374][T12719] BTRFS error (device loop9): failed to load root extent [ 415.758466][T12719] BTRFS warning (device loop9): try to load backup roots slot 1 [ 415.772512][ T8707] BTRFS warning (device loop9): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 415.855422][T12719] BTRFS warning (device loop9): couldn't read tree root [ 415.873251][T12719] BTRFS warning (device loop9): try to load backup roots slot 2 [ 415.905485][ T6415] BTRFS error (device loop9): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 415.937524][T12719] BTRFS warning (device loop9): couldn't read tree root [ 415.957789][T12719] BTRFS warning (device loop9): try to load backup roots slot 3 [ 416.024580][T12719] BTRFS info (device loop9): rebuilding free space tree [ 416.110282][T12719] BTRFS info (device loop9): checking UUID tree [ 416.789606][T12108] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 419.418605][T12844] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 419.911189][T12860] loop8: detected capacity change from 0 to 512 [ 420.050563][T12860] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.101437][T12860] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.326038][ T27] audit: type=1800 audit(1784166472.417:1892): pid=12860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2039" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 420.480739][T11008] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.841847][T12882] loop9: detected capacity change from 0 to 1024 [ 420.968114][T12882] hfsplus: request for non-existent node 3 in B*Tree [ 420.999850][T12882] hfsplus: request for non-existent node 3 in B*Tree [ 421.566681][T12872] loop7: detected capacity change from 0 to 32768 [ 421.610139][T12872] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.2043 (12872) [ 421.712701][T12872] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 421.756963][T12872] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 421.783576][T12872] BTRFS info (device loop7): setting nodatacow, compression disabled [ 421.822478][T12872] BTRFS info (device loop7): setting datasum, datacow enabled [ 421.856575][T12872] BTRFS info (device loop7): force clearing of disk cache [ 421.880516][T12872] BTRFS info (device loop7): enabling ssd optimizations [ 421.907921][T12872] BTRFS info (device loop7): using spread ssd allocation scheme [ 421.928410][T12872] BTRFS info (device loop7): turning on sync discard [ 421.935281][T12872] BTRFS info (device loop7): turning on flush-on-commit [ 421.968447][T12872] BTRFS info (device loop7): not using ssd optimizations [ 421.992453][T12872] BTRFS info (device loop7): not using spread ssd allocation scheme [ 422.028854][T12872] BTRFS info (device loop7): using free space tree [ 422.231323][T12872] BTRFS info (device loop7): rebuilding free space tree [ 422.749103][ T8480] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 422.816948][T10785] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 422.954612][ T8480] usb 10-1: Using ep0 maxpacket: 32 [ 422.978246][ T8480] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.990974][ T8480] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.002039][ T8480] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 423.078553][ T8480] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.145983][ T8480] usb 10-1: config 0 descriptor?? [ 423.199179][ T8480] hub 10-1:0.0: USB hub found [ 423.521830][ T8480] hub 10-1:0.0: 1 port detected [ 424.278588][ T8480] hub 10-1:0.0: activate --> -90 [ 424.693756][ T9] usb 10-1: USB disconnect, device number 2 [ 424.693870][ T8480] usb 10-1-port1: cannot disable (err = -71) [ 426.279471][T12999] loop9: detected capacity change from 0 to 1024 [ 426.348661][T12999] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 426.406175][T12999] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 426.623316][T12999] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 426.651577][T13001] loop8: detected capacity change from 0 to 40427 [ 426.689337][T13001] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 426.697204][T13001] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 426.717445][T12999] EXT4-fs (loop9): orphan cleanup on readonly fs [ 426.750169][T13001] F2FS-fs (loop8): Found nat_bits in checkpoint [ 426.801888][T12999] EXT4-fs error (device loop9): ext4_free_blocks:6694: comm syz.9.2068: Freeing blocks not in datazone - block = 0, count = 4096 [ 426.844528][T13001] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 426.851747][T13001] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 426.948759][T12999] EXT4-fs (loop9): Remounting filesystem read-only [ 426.955460][T12999] EXT4-fs (loop9): 1 orphan inode deleted [ 427.023197][T12999] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 427.610521][T12108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.494504][ T27] audit: type=1326 audit(1784166480.587:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13036 comm="syz.7.2078" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe186b9de59 code=0x0 [ 428.518217][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.357045][T13084] loop8: detected capacity change from 0 to 256 [ 430.438903][T13084] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 430.584003][T13084] loop8: detected capacity change from 256 to 1 [ 430.618118][T13089] bio_check_eod: 3 callbacks suppressed [ 430.618210][T13089] syz.8.2093: attempt to access beyond end of device [ 430.618210][T13089] loop8: rw=2049, sector=160, nr_sectors = 1 limit=1 [ 430.648726][T13089] Buffer I/O error on dev loop8, logical block 160, lost sync page write [ 430.694927][T13089] syz.8.2093: attempt to access beyond end of device [ 430.694927][T13089] loop8: rw=0, sector=160, nr_sectors = 1 limit=1 [ 430.747637][T13084] syz.8.2093: attempt to access beyond end of device [ 430.747637][T13084] loop8: rw=524288, sector=184, nr_sectors = 32 limit=1 [ 430.811822][T13084] syz.8.2093: attempt to access beyond end of device [ 430.811822][T13084] loop8: rw=0, sector=184, nr_sectors = 8 limit=1 [ 430.870916][ T27] audit: type=1800 audit(1784166482.957:1894): pid=13084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2093" name="file1" dev="loop8" ino=1048680 res=0 errno=0 [ 430.875383][T13084] syz.8.2093: attempt to access beyond end of device [ 430.875383][T13084] loop8: rw=0, sector=160, nr_sectors = 1 limit=1 [ 431.165044][ T5762] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 432.154110][T13141] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 432.162468][T13141] IPv6: NLM_F_CREATE should be set when creating new route [ 432.698045][T13149] loop7: detected capacity change from 0 to 128 [ 432.703483][T13150] loop8: detected capacity change from 0 to 1024 [ 432.727945][T13150] EXT4-fs: Ignoring removed nomblk_io_submit option [ 432.840488][T13150] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.900774][ T27] audit: type=1800 audit(1784166484.987:1895): pid=13149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2109" name="file2" dev="loop7" ino=1048682 res=0 errno=0 [ 432.940480][T13138] loop9: detected capacity change from 0 to 40427 [ 432.950008][T13138] F2FS-fs (loop9): Invalid SB checksum offset: 0 [ 432.956511][T13138] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 432.966946][T13138] F2FS-fs (loop9): invalid crc value [ 433.278189][T13138] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0 [ 433.316823][T13138] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 433.793843][T12108] syz-executor: attempt to access beyond end of device [ 433.793843][T12108] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 433.825900][T11008] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.888190][T12108] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 436.177819][ T27] audit: type=1326 audit(1784166488.257:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.4.2125" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99e099de59 code=0x0 [ 436.926514][T13244] loop9: detected capacity change from 0 to 512 [ 436.942272][T13244] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 437.007255][T13244] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.021141][T13244] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.118712][T13245] loop8: detected capacity change from 0 to 8192 [ 437.235418][T12108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.404637][ T5082] Bluetooth: hci2: command 0x0406 tx timeout [ 437.437167][T13254] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 437.662687][T13259] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 437.923203][T13267] loop7: detected capacity change from 0 to 1024 [ 438.094077][ T27] audit: type=1326 audit(1784166490.187:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13270 comm="syz.8.2139" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe78979de59 code=0x0 [ 438.472688][T13282] loop7: detected capacity change from 0 to 512 [ 440.044203][T13308] "syz.7.2148" (13308) uses obsolete ecb(arc4) skcipher [ 440.451302][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.457689][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.624201][T13316] loop7: detected capacity change from 0 to 2048 [ 440.731461][ T5910] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 440.915687][T13326] futex_wake_op: syz.9.2151 tries to shift op by -1; fix this program [ 441.665464][T13350] netlink: 'syz.9.2159': attribute type 1 has an invalid length. [ 441.710970][T13350] bond1: entered promiscuous mode [ 441.716616][T13350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.880880][T13350] bond1: (slave veth3): making interface the new active one [ 441.903441][T13350] veth3: entered promiscuous mode [ 441.918667][T13350] bond1: (slave veth3): Enslaving as an active interface with an up link [ 441.932052][T13354] netlink: 'syz.8.2160': attribute type 1 has an invalid length. [ 442.422190][T13366] loop9: detected capacity change from 0 to 4096 [ 442.539034][ T8481] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 442.643028][T13366] ntfs: volume version 3.1. [ 442.750970][ T8481] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.793363][ T8481] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 442.833176][ T8481] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.881164][ T8481] usb 8-1: config 0 descriptor?? [ 443.155722][ T8481] usbhid 8-1:0.0: can't add hid device: -71 [ 443.171348][ T8481] usbhid: probe of 8-1:0.0 failed with error -71 [ 443.203441][ T8481] usb 8-1: USB disconnect, device number 6 [ 443.568519][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2169'. [ 443.577474][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2169'. [ 443.648340][T13395] netlink: 'syz.9.2169': attribute type 15 has an invalid length. [ 443.694751][T13395] netdevsim netdevsim9 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 443.703610][T13395] netdevsim netdevsim9 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 443.712318][T13395] netdevsim netdevsim9 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 443.721220][T13395] netdevsim netdevsim9 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 443.795142][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2169'. [ 443.828577][ T8481] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 443.839835][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2169'. [ 443.866052][T13395] netlink: 'syz.9.2169': attribute type 15 has an invalid length. [ 443.895338][T13395] netdevsim netdevsim9 netdevsim0: set [0, 2] type 1 family 0 port 60387 - 0 [ 443.904308][T13395] netdevsim netdevsim9 netdevsim1: set [0, 2] type 1 family 0 port 60387 - 0 [ 443.913216][T13395] netdevsim netdevsim9 netdevsim2: set [0, 2] type 1 family 0 port 60387 - 0 [ 443.922242][T13395] netdevsim netdevsim9 netdevsim3: set [0, 2] type 1 family 0 port 60387 - 0 [ 444.052750][ T8481] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.088400][ T8481] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 444.097530][ T8481] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.159750][ T8481] usb 8-1: config 0 descriptor?? [ 444.589132][T13370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.619270][T13370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.675139][T13423] netlink: 'syz.9.2176': attribute type 4 has an invalid length. [ 444.769150][T13427] netlink: 'syz.9.2176': attribute type 4 has an invalid length. [ 445.088638][ T8481] aiptek 8-1:0.0: Aiptek using 400 ms programming speed [ 445.097748][ T8481] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input13 [ 445.129391][T13438] loop8: detected capacity change from 0 to 16 [ 445.209226][T13438] erofs: (device loop8): mounted with root inode @ nid 36. [ 445.229589][T13436] netlink: 'syz.4.2180': attribute type 10 has an invalid length. [ 445.402962][T13436] team0: Device veth1_vlan failed to register rx_handler [ 445.650548][ T5829] usb 8-1: USB disconnect, device number 7 [ 445.650602][ C1] aiptek 8-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 446.017564][T13446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2183'. [ 446.386145][ T5892] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.695382][ T5892] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.907357][ T5892] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.258962][ T5892] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.757617][T13487] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.2191'. [ 447.838616][T13487] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2191'. [ 448.095419][ T5082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 448.114616][ T5082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 448.124365][ T5082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 448.141088][ T5082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 448.166037][ T5082] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 448.174920][ T5082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 448.559389][T13505] overlayfs: failed to clone upperpath [ 448.933191][T13513] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2199'. [ 449.423241][T13510] loop7: detected capacity change from 0 to 32768 [ 449.495303][T13510] [ 449.495303][T13510] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 449.495303][T13510] [ 449.626883][ T27] audit: type=1800 audit(1784166501.717:1898): pid=13510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2198" name="file1" dev="loop7" ino=4 res=0 errno=0 [ 449.901863][T13510] ERROR: (device loop7): xtSearch: stack overrun! [ 449.901863][T13510] [ 449.999897][T13490] chnl_net:caif_netlink_parms(): no params data found [ 450.080339][T13510] ERROR: (device loop7): xtSearch: stack overrun! [ 450.080339][T13510] [ 450.150630][T13510] xtLookup: xtSearch returned -5 [ 450.172737][T13510] ERROR: (device loop7): xtTruncate: stack overrun! [ 450.172737][T13510] [ 450.278532][ T5780] Bluetooth: hci0: command tx timeout [ 450.697660][ T5892] hsr_slave_0: left promiscuous mode [ 450.713359][ T5892] hsr_slave_1: left promiscuous mode [ 450.734987][ T5892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.810605][ T5892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.839339][ T5892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.865113][ T5892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.897980][ T5892] bridge_slave_1: left allmulticast mode [ 450.904212][ T5892] bridge_slave_1: left promiscuous mode [ 450.917613][ T8698] [ 450.917613][ T8698] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 450.917613][ T8698] [ 450.942948][ T8698] [ 450.942948][ T8698] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 450.942948][ T8698] [ 450.967691][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.968204][T13560] loop9: detected capacity change from 0 to 512 [ 450.982530][ T8698] [ 450.982530][ T8698] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 450.982530][ T8698] [ 450.987838][T13560] EXT4-fs: Ignoring removed i_version option [ 450.999116][ T5892] bridge_slave_0: left allmulticast mode [ 450.999144][ T5892] bridge_slave_0: left promiscuous mode [ 450.999358][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.018346][ T8698] [ 451.018346][ T8698] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 451.018346][ T8698] [ 451.060067][T13560] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 451.071587][T13560] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 451.074264][ T8698] JFS: metapage_get_blocks failed [ 451.087879][ T8698] [ 451.087879][ T8698] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 451.087879][ T8698] [ 451.102687][T10785] [ 451.102687][T10785] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 451.102687][T10785] [ 451.117514][ T5892] veth1_macvtap: left promiscuous mode [ 451.127050][ T5892] veth0_macvtap: left promiscuous mode [ 451.128384][T10785] [ 451.128384][T10785] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 451.128384][T10785] [ 451.134042][T13560] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.168192][ T5892] veth1_vlan: left promiscuous mode [ 451.186832][ T5892] veth0_vlan: left promiscuous mode [ 451.212656][T13560] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.472820][T13566] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 451.487328][T12108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.368389][ T5780] Bluetooth: hci0: command tx timeout [ 452.745528][ T5892] team0 (unregistering): Port device team_slave_1 removed [ 452.847796][ T5892] team0 (unregistering): Port device team_slave_0 removed [ 452.931359][ T5892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.030789][ T5892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.692524][ T5892] bond0 (unregistering): Released all slaves [ 453.872654][T13569] netlink: 'syz.4.2218': attribute type 1 has an invalid length. [ 453.899400][T13569] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 453.967765][T13578] batadv_slave_1: entered promiscuous mode [ 453.996955][T13578] batadv_slave_1: left promiscuous mode [ 454.004854][T13579] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2212'. [ 454.038693][T13579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.253714][T13579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.404541][T13490] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.412156][T13490] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.436702][T13490] bridge_slave_0: entered allmulticast mode [ 454.439412][ T5780] Bluetooth: hci0: command tx timeout [ 454.454396][T13490] bridge_slave_0: entered promiscuous mode [ 454.478727][T13601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2217'. [ 454.539847][T13490] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.547175][T13490] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.554804][T13490] bridge_slave_1: entered allmulticast mode [ 454.571911][T13490] bridge_slave_1: entered promiscuous mode [ 454.740060][T13490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.763031][T13607] loop9: detected capacity change from 0 to 1024 [ 454.792237][T13490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.833492][T13607] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.092178][T13490] team0: Port device team_slave_0 added [ 455.108705][T13607] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #2: block 16: comm syz.9.2219: lblock 0 mapped to illegal pblock 16 (length 1) [ 455.131912][T13490] team0: Port device team_slave_1 added [ 455.163667][T13613] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #2: block 16: comm syz.9.2219: lblock 0 mapped to illegal pblock 16 (length 1) [ 455.208486][T13490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.216042][T13490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.257327][T13490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.277707][T13490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.284803][T13490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.315851][T13490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.357794][T12108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.499853][T13490] hsr_slave_0: entered promiscuous mode [ 455.547348][T13490] hsr_slave_1: entered promiscuous mode [ 455.578763][T13490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.587450][T13490] Cannot create hsr debugfs directory [ 456.528059][ T5780] Bluetooth: hci0: command tx timeout [ 458.800995][T13490] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 458.855647][T13490] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 458.902088][T13490] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 458.946427][T13490] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 459.131983][T13490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.173405][T13490] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.197312][ T8698] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.204569][ T8698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.249725][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.256894][ T8704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.050179][ T5082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 460.061424][ T5082] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 460.077651][ T5082] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 460.090177][ T5082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 460.097989][ T5082] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 460.105516][ T5082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 460.332604][T13490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.721803][T13490] veth0_vlan: entered promiscuous mode [ 460.783262][T13698] chnl_net:caif_netlink_parms(): no params data found [ 460.830248][T13490] veth1_vlan: entered promiscuous mode [ 461.012929][T13490] veth0_macvtap: entered promiscuous mode [ 461.078341][T13490] veth1_macvtap: entered promiscuous mode [ 461.185553][T13698] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.195372][T13698] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.205534][T13698] bridge_slave_0: entered allmulticast mode [ 461.224441][T13698] bridge_slave_0: entered promiscuous mode [ 461.240588][T13698] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.247970][T13698] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.260176][T13698] bridge_slave_1: entered allmulticast mode [ 461.268096][T13698] bridge_slave_1: entered promiscuous mode [ 461.352166][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.391889][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.416876][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.440044][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.460491][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.484540][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.509553][T13490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.566549][T13698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.577633][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.590963][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.601930][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.613137][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.625765][T13490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.636724][T13698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.684593][T13490] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.695912][T13490] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.713163][T13490] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.727945][T13490] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.785021][T13698] team0: Port device team_slave_0 added [ 461.815532][T13698] team0: Port device team_slave_1 added [ 461.925955][T13698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.938702][T13698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.964676][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.982420][T13698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.014960][T13698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.026474][T13698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.052471][ C1] vkms_vblank_simulate: vblank timer overrun [ 462.066099][T13698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.191994][T13698] hsr_slave_0: entered promiscuous mode [ 462.203254][ T5082] Bluetooth: hci2: command tx timeout [ 462.215528][T13698] hsr_slave_1: entered promiscuous mode [ 462.222112][T13698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.232110][T13698] Cannot create hsr debugfs directory [ 462.243942][ T6415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.278867][ T6415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.551001][ T8704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.577637][ T8704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.703232][T13764] netlink: 'syz.9.2247': attribute type 10 has an invalid length. [ 462.922913][T13764] team0: Device veth1_vlan failed to register rx_handler [ 463.838567][T13764] syz.9.2247 (13764) used greatest stack depth: 19432 bytes left [ 464.220164][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.231825][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.244669][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.259296][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.270169][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.284181][ T5082] Bluetooth: hci2: command tx timeout [ 464.308127][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.373905][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.458350][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.503353][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.514557][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.557021][T13805] loop2: detected capacity change from 0 to 7 [ 465.582887][T13805] Dev loop2: unable to read RDB block 7 [ 465.596153][T13800] bridge0: entered allmulticast mode [ 465.605520][T13803] bridge_slave_1: left allmulticast mode [ 465.614555][T13805] loop2: unable to read partition table [ 465.622930][T13803] bridge_slave_1: left promiscuous mode [ 465.624415][T13805] loop2: partition table beyond EOD, truncated [ 465.641849][T13803] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.662612][T13805] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 465.694225][T13803] bridge_slave_0: left allmulticast mode [ 465.732598][T13803] bridge_slave_0: left promiscuous mode [ 465.741626][T13803] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.368951][ T5082] Bluetooth: hci2: command tx timeout [ 466.437974][T13822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2261'. [ 466.583059][T13827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2263'. [ 466.728809][T13698] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 466.751278][T13698] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 466.774366][T13698] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 466.793837][T13698] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 467.107060][T13698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.155410][T13698] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.196839][ T8708] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.204079][ T8708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.240778][ T8708] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.247973][ T8708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.343222][T13698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 467.357976][T13698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.680245][T13848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2269'. [ 467.847631][T13698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.999251][T13698] veth0_vlan: entered promiscuous mode [ 468.019915][T13698] veth1_vlan: entered promiscuous mode [ 468.081705][T13698] veth0_macvtap: entered promiscuous mode [ 468.108546][T13698] veth1_macvtap: entered promiscuous mode [ 468.146844][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.160463][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.175222][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.186215][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.196958][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.211792][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.238653][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.264763][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.277573][T13698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.312556][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.337952][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.349425][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.361226][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.378034][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.396500][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.419001][T13698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.439554][ T5082] Bluetooth: hci2: command tx timeout [ 468.472266][T13698] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.510590][T13698] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.544270][T13698] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.558331][T13698] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.816844][ T6415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.838970][ T6415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.905747][ T6415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.935593][ T6415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.066046][T13893] netlink: 'syz.0.2285': attribute type 12 has an invalid length. [ 470.387802][T13905] loop2: detected capacity change from 0 to 16 [ 470.410892][T13905] erofs: (device loop2): mounted with root inode @ nid 36. [ 470.896362][T13919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2293'. [ 471.476028][T13935] netlink: 'syz.9.2297': attribute type 4 has an invalid length. [ 471.547829][T13938] netlink: 'syz.9.2297': attribute type 4 has an invalid length. [ 471.900187][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2299'. [ 471.949665][T13944] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2299'. [ 472.259775][T13954] overlayfs: failed to clone upperpath [ 472.787400][T13972] sctp: [Deprecated]: syz.4.2307 (pid 13972) Use of int in maxseg socket option. [ 472.787400][T13972] Use struct sctp_assoc_value instead [ 473.617878][T13996] netlink: 'syz.0.2315': attribute type 1 has an invalid length. [ 473.671473][T13996] macvlan2: entered promiscuous mode [ 473.687129][T13996] macvlan2: entered allmulticast mode [ 474.076703][T14003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.117583][T14003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.167399][T14003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.196667][T14003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.220446][T14003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.243529][T14003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.273176][T14003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.315071][T14003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.355049][T14003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.409687][T14003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.438915][T14003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.476791][T14003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.519535][T14003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.538369][T14003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.118748][T14029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2325'. [ 475.787282][T14052] loop9: detected capacity change from 0 to 1024 [ 475.844330][T14052] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.201886][T14052] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #2: block 16: comm syz.9.2329: lblock 0 mapped to illegal pblock 16 (length 1) [ 476.376006][T12108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.379499][T14089] loop9: detected capacity change from 0 to 256 [ 477.444520][T14089] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 478.248196][T14108] loop9: detected capacity change from 0 to 512 [ 478.321774][T14108] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 478.435993][T14108] EXT4-fs (loop9): 1 truncate cleaned up [ 478.499899][T14108] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.747700][T14125] sctp: [Deprecated]: syz.0.2345 (pid 14125) Use of int in maxseg socket option. [ 478.747700][T14125] Use struct sctp_assoc_value instead [ 478.778834][T14108] EXT4-fs error (device loop9): ext4_update_inline_data:357: inode #15: comm syz.9.2342: missing inline data xattr [ 478.845695][T14108] EXT4-fs (loop9): Remounting filesystem read-only [ 478.968770][T12108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.576745][T14180] xt_hashlimit: size too large, truncated to 1048576 [ 484.061239][T14259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2379'. [ 484.124773][T14259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2379'. [ 485.904062][T14308] ref_ctr_offset mismatch. inode: 0xcaa offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 486.203356][T14317] loop0: detected capacity change from 0 to 512 [ 486.264235][T14317] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 486.348896][T14317] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2393: invalid indirect mapped block 9 (level 0) [ 486.456431][T14317] EXT4-fs (loop0): 1 truncate cleaned up [ 486.558522][T14317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.639315][T14332] overlayfs: failed to clone upperpath [ 486.975435][T13490] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.423063][T14357] netlink: 'syz.2.2407': attribute type 1 has an invalid length. [ 487.482196][T14357] netlink: 'syz.2.2407': attribute type 4 has an invalid length. [ 487.517876][T14357] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2407'. [ 489.478520][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 489.668445][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 489.686438][ T9] usb 10-1: config 0 has an invalid interface number: 34 but max is 0 [ 489.698167][ T9] usb 10-1: config 0 has no interface number 0 [ 489.736667][ T9] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 489.768135][ T9] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 489.811760][ T9] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 489.828411][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.855510][ T9] usb 10-1: Product: syz [ 489.867326][ T9] usb 10-1: Manufacturer: syz [ 489.879960][ T9] usb 10-1: SerialNumber: syz [ 489.893242][ T9] usb 10-1: config 0 descriptor?? [ 489.914432][T14405] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 489.922940][T14405] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 490.192652][T14405] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 490.224350][T14405] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 490.462656][ T9] asix 10-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 491.668887][ T9] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 491.702739][ T9] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 491.740409][ T9] asix: probe of 10-1:0.34 failed with error -71 [ 491.774848][ T9] usb 10-1: USB disconnect, device number 4 [ 492.198134][T14479] netlink: 'syz.0.2440': attribute type 8 has an invalid length. [ 492.436864][T14488] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 492.763456][T14496] loop9: detected capacity change from 0 to 4096 [ 492.797681][T14496] EXT4-fs: Ignoring removed orlov option [ 492.828186][T14496] EXT4-fs (loop9): Test dummy encryption mode enabled [ 492.873866][T14496] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.184956][T12108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.328466][T12474] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 494.347255][T14548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2458'. [ 494.368418][T14548] netlink: 'syz.2.2458': attribute type 7 has an invalid length. [ 494.376260][T14548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2458'. [ 494.412722][T14548] erspan0: entered promiscuous mode [ 494.424790][T14548] gretap0: entered promiscuous mode [ 494.439173][T14551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2458'. [ 494.481926][T14551] netlink: 'syz.2.2458': attribute type 7 has an invalid length. [ 494.509591][T14551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2458'. [ 494.542763][T12474] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.568492][T12474] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 494.598067][T12474] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.632041][T12474] usb 10-1: config 0 descriptor?? [ 494.872075][T12474] usbhid 10-1:0.0: can't add hid device: -71 [ 494.889155][T12474] usbhid: probe of 10-1:0.0 failed with error -71 [ 494.918612][T12474] usb 10-1: USB disconnect, device number 5 [ 495.508528][T12474] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 495.701291][T12474] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.728356][T12474] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 495.756492][T12474] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.787264][T12474] usb 10-1: config 0 descriptor?? [ 495.854666][T14597] overlayfs: failed to clone upperpath [ 496.016106][T14601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.659253][T12474] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 496.689321][T12474] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input14 [ 497.323438][T12474] usb 10-1: USB disconnect, device number 6 [ 497.329588][ C0] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 497.467068][T14637] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 498.364866][T14665] netlink: 'syz.4.2486': attribute type 1 has an invalid length. [ 498.419313][T14665] 8021q: adding VLAN 0 to HW filter on device bond3 [ 498.496783][T14665] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 498.510912][T14672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2488'. [ 498.739286][ T9] IPVS: starting estimator thread 0... [ 498.859702][T14680] IPVS: using max 17 ests per chain, 40800 per kthread [ 498.974741][T14686] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 499.944414][T14719] overlayfs: failed to clone upperpath [ 500.280957][T14732] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2504'. [ 500.399139][T14732] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2504'. [ 500.620651][T14736] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2505'. [ 501.893664][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.903683][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.932523][ T2950] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.970229][ T2950] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 502.999418][ T2950] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 2] type 1 family 0 port 60387 - 0 [ 503.038535][ T2950] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.261133][ T2950] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.297642][ T2950] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 503.318665][ T2950] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 2] type 1 family 0 port 60387 - 0 [ 503.348501][ T2950] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.624638][ T2950] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.668514][ T2950] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 503.705370][ T2950] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 2] type 1 family 0 port 60387 - 0 [ 503.758860][ T2950] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.971238][ T2950] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.038924][ T2950] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 504.078337][ T2950] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 2] type 1 family 0 port 60387 - 0 [ 504.112483][ T2950] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.419993][T14831] netlink: 'syz.0.2531': attribute type 30 has an invalid length. [ 504.427899][T14831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2531'. [ 504.553911][T14834] netlink: 'syz.0.2531': attribute type 30 has an invalid length. [ 504.564864][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 504.578806][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2531'. [ 504.591931][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 504.602498][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 504.612511][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 504.625166][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 504.637508][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 506.778442][ T5780] Bluetooth: hci1: command tx timeout [ 507.103918][T14891] overlayfs: failed to clone upperpath [ 507.817968][T14835] chnl_net:caif_netlink_parms(): no params data found [ 508.674036][T14835] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.686312][T14835] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.710862][T14835] bridge_slave_0: entered allmulticast mode [ 508.730520][T14835] bridge_slave_0: entered promiscuous mode [ 508.791008][T14835] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.815678][T14835] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.835331][T14835] bridge_slave_1: entered allmulticast mode [ 508.843850][T14835] bridge_slave_1: entered promiscuous mode [ 508.849984][ T5780] Bluetooth: hci1: command tx timeout [ 509.261112][ T2950] hsr_slave_0: left promiscuous mode [ 509.294172][ T2950] hsr_slave_1: left promiscuous mode [ 509.305315][ T2950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.328855][ T2950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.503449][ T2950] veth1_macvtap: left promiscuous mode [ 509.517933][ T2950] veth0_macvtap: left promiscuous mode [ 509.559602][ T2950] veth0_vlan: left promiscuous mode [ 510.918362][ T5780] Bluetooth: hci1: command tx timeout [ 511.233163][ T2950] bond1 (unregistering): (slave veth3): Releasing backup interface [ 511.241655][ T2950] veth3 (unregistering): left promiscuous mode [ 511.611204][ T2950] bond1 (unregistering): Released all slaves [ 513.018514][ T5780] Bluetooth: hci1: command tx timeout [ 513.084268][ T2950] team0 (unregistering): Port device team_slave_1 removed [ 513.303660][ T2950] team0 (unregistering): Port device team_slave_0 removed [ 513.476588][T15002] loop0: detected capacity change from 0 to 1024 [ 513.511343][ T2950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.553283][T15002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.647378][ T2950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.727315][T13490] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.356317][T15007] loop0: detected capacity change from 0 to 32768 [ 514.407159][T15007] JBD2: Ignoring recovery information on journal [ 514.527914][T15007] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 514.684198][ T2950] bond0 (unregistering): Released all slaves [ 514.800588][T14835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.849664][T14987] netlink: 'syz.2.2574': attribute type 1 has an invalid length. [ 514.877691][T14987] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 514.881164][T14988] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 514.931615][T14989] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode [ 515.081006][T14835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.266119][T14835] team0: Port device team_slave_0 added [ 515.298005][T14835] team0: Port device team_slave_1 added [ 515.401637][T14835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.441907][T14835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.543326][T14835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.614413][T14835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.657870][T14835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.707533][T13490] ocfs2: Unmounting device (7,0) on (node local) [ 515.744411][T14835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.002694][T14835] hsr_slave_0: entered promiscuous mode [ 516.019172][T14835] hsr_slave_1: entered promiscuous mode [ 516.048924][T14835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 516.058313][T14835] Cannot create hsr debugfs directory [ 519.235528][T14835] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 519.275494][T14835] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 519.315906][T14835] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 519.360131][T14835] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 519.653388][T14835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.714049][T14835] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.770809][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.778123][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.864683][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.872022][ T4334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.737967][T14835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.627494][T15193] loop0: detected capacity change from 0 to 16 [ 521.675843][T15193] erofs: (device loop0): erofs_read_inode: unsupported i_format 16 of nid 36 [ 521.776919][T14835] veth0_vlan: entered promiscuous mode [ 521.812003][T14835] veth1_vlan: entered promiscuous mode [ 521.951322][T14835] veth0_macvtap: entered promiscuous mode [ 521.999635][T14835] veth1_macvtap: entered promiscuous mode [ 522.085274][T14835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.136998][T14835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.175709][T14835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.217107][T14835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.240765][T14835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.271745][T14835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.302309][T14835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.335357][T14835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.380192][T14835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.427277][T14835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.480869][T14835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.510955][T14835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.537947][T14835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.569791][T14835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.608478][T14835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.630540][T14835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.676961][T14835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.721146][T14835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.780301][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2616'. [ 522.860378][T15207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2616'. [ 523.008603][T14835] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.017394][T14835] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.027493][T14835] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.036884][T14835] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.256908][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.283293][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.387506][ T5890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.414613][ T5890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.148560][ T9090] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 524.246329][T15243] block device autoloading is deprecated and will be removed. [ 524.363095][ T9090] usb 6-1: Using ep0 maxpacket: 16 [ 524.387334][ T9090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 524.415751][ T9090] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 524.427993][ T9090] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.467555][ T9090] usb 6-1: Product: syz [ 524.479929][ T9090] usb 6-1: Manufacturer: syz [ 524.498450][ T9090] usb 6-1: SerialNumber: syz [ 524.529985][ T9090] usb 6-1: config 0 descriptor?? [ 524.557944][ T9090] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 524.578453][ T9090] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 525.180597][ T9090] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 525.823828][ T9090] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 525.847011][ T9090] em28xx 6-1:0.0: board has no eeprom [ 525.950285][ T9090] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 525.988610][ T9090] em28xx 6-1:0.0: dvb set to bulk mode. [ 525.994458][ T8481] em28xx 6-1:0.0: Binding DVB extension [ 526.039711][ T9090] usb 6-1: USB disconnect, device number 3 [ 526.082997][ T9090] em28xx 6-1:0.0: Disconnecting em28xx [ 526.177274][ T8481] em28xx 6-1:0.0: Registering input extension [ 526.229684][ T9090] em28xx 6-1:0.0: Closing input extension [ 526.286694][ T9090] em28xx 6-1:0.0: Freeing device [ 526.938416][ T9090] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 527.195635][ T9090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.221485][ T9090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.252326][ T9090] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 527.290939][ T9090] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 527.318566][ T9090] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.349228][ T9090] usb 6-1: config 0 descriptor?? [ 527.820581][ T9090] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 527.854194][ T9090] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 528.302026][T12875] usb 6-1: USB disconnect, device number 4 [ 529.014223][T15327] tipc: Failed to remove unknown binding: 66,0,0/0:2807416686/2807416687 [ 530.574168][T15347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2643'. [ 532.412937][T15283] netlink: 'syz.2.2631': attribute type 1 has an invalid length. [ 532.422458][T15283] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 532.427113][T15286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2631'. [ 532.445592][T15286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2631'. [ 532.866306][T15364] netlink: 'syz.2.2649': attribute type 13 has an invalid length. [ 533.178904][T15373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.872530][T15386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2651'. [ 534.423195][T12875] libceph: connect (1)[c::]:6789 error -101 [ 534.466301][T12875] libceph: mon0 (1)[c::]:6789 connect error [ 534.533640][T15398] ceph: No mds server is up or the cluster is laggy [ 534.670040][T15412] overlayfs: upper fs does not support file handles, falling back to index=off. [ 535.893954][T15429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2661'. [ 536.339275][T15440] netlink: 'syz.0.2664': attribute type 1 has an invalid length. [ 536.427084][T15440] bond1: entered promiscuous mode [ 536.450440][T15440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 536.708902][T15440] bond1: (slave bridge1): making interface the new active one [ 536.737112][T15440] bridge1: entered promiscuous mode [ 536.777877][T15440] bridge1: left promiscuous mode [ 537.667888][T15441] loop5: detected capacity change from 0 to 40427 [ 537.704207][T15441] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 537.713923][T15441] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 537.764476][T15441] F2FS-fs (loop5): invalid crc value [ 537.811954][T15441] F2FS-fs (loop5): Found nat_bits in checkpoint [ 538.033795][T15441] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 538.052946][T15441] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 538.210713][T15498] F2FS-fs (loop5): Stopped filesystem due to reason: 0 [ 538.311068][T15441] F2FS-fs (loop5): do_checkpoint failed err:-5, stop checkpoint [ 540.619569][T15555] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2688'. [ 542.040725][T15580] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.048636][T15580] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.251117][T15580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.355637][T15580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.368925][T15601] overlayfs: failed to clone upperpath [ 544.290236][T15580] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.308419][T15580] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.318827][T15580] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.338685][T15580] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.617298][T15615] bridge1: entered promiscuous mode [ 544.648813][T15615] bridge1: entered allmulticast mode [ 544.685791][T15615] team0: Port device bridge1 added [ 544.723619][T15617] bridge0: port 3(team0) entered blocking state [ 544.797518][T15617] bridge0: port 3(team0) entered disabled state [ 544.813974][T15617] team0: entered allmulticast mode [ 544.823646][T15617] team_slave_0: entered allmulticast mode [ 544.830950][T15617] team_slave_1: entered allmulticast mode [ 544.841019][T15617] team0: entered promiscuous mode [ 544.846215][T15617] team_slave_0: entered promiscuous mode [ 544.855271][T15617] team_slave_1: entered promiscuous mode [ 544.866891][T15617] bridge0: port 3(team0) entered blocking state [ 544.873418][T15617] bridge0: port 3(team0) entered forwarding state [ 544.890334][T15619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2710'. [ 544.914495][T15619] team0: left allmulticast mode [ 544.924378][T15619] team_slave_0: left allmulticast mode [ 544.934762][T15619] team_slave_1: left allmulticast mode [ 544.944501][T15619] team0: left promiscuous mode [ 544.950552][T15619] team_slave_0: left promiscuous mode [ 544.956469][T15619] team_slave_1: left promiscuous mode [ 544.963208][T15619] bridge0: port 3(team0) entered disabled state [ 544.973854][T15619] bridge_slave_1: left allmulticast mode [ 544.979756][T15619] bridge_slave_1: left promiscuous mode [ 544.985832][T15619] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.000523][T15619] bridge_slave_0: left allmulticast mode [ 545.006248][T15619] bridge_slave_0: left promiscuous mode [ 545.013170][T15619] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.465484][T15676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2729'. [ 548.778896][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888063ff6400: rx timeout, send abort [ 549.058374][T15724] loop5: detected capacity change from 0 to 32768 [ 549.279040][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888063ff4800: rx timeout, send abort [ 549.287483][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888063ff6400: abort rx timeout. Force session deactivation [ 549.787493][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888063ff4800: abort rx timeout. Force session deactivation [ 552.396795][T15806] xt_hashlimit: size too large, truncated to 1048576 [ 552.577693][T15809] loop0: detected capacity change from 0 to 512 [ 552.686368][T15813] loop5: detected capacity change from 0 to 1024 [ 552.846691][T15813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.880663][T15809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 552.929243][T15809] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 553.329992][T14835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.608060][T15832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2765'. [ 555.737049][T15887] overlayfs: failed to clone upperpath [ 556.035166][T15895] netlink: 'syz.2.2781': attribute type 10 has an invalid length. [ 556.094904][T15895] macvlan1: entered allmulticast mode [ 556.155830][T15895] veth1_vlan: entered allmulticast mode [ 556.261520][T15895] team0: Port device macvlan1 added [ 556.611775][T15908] overlayfs: failed to clone upperpath [ 557.555804][T13490] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 557.829870][T15906] loop5: detected capacity change from 0 to 40427 [ 557.858157][T15933] loop0: detected capacity change from 0 to 1024 [ 557.869394][T15906] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 557.877208][T15906] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 557.945108][T15906] F2FS-fs (loop5): invalid crc value [ 557.951401][T15933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.996249][T15906] F2FS-fs (loop5): Found nat_bits in checkpoint [ 558.069392][ T27] audit: type=1804 audit(1784166866.160:1899): pid=15933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2790" name="/newroot/123/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 558.137576][T15906] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 558.161591][T15906] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 558.522992][ T27] audit: type=1804 audit(1784166866.610:1900): pid=15906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2785" name="/newroot/39/file0/bus" dev="loop5" ino=10 res=1 errno=0 [ 558.783739][T13490] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.029630][T15963] sock: sock_set_timeout: `syz.0.2793' (pid 15963) tries to set negative timeout [ 560.478073][ T8480] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 560.628790][T16008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2804'. [ 560.710622][ T8480] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 560.756701][ T8480] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 560.798611][ T8480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.818376][ T8480] usb 6-1: config 0 descriptor?? [ 560.834007][T15998] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 561.063808][T15998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.110326][T15998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.155957][T15998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.176213][T16027] overlayfs: failed to clone lowerpath [ 561.188688][T15998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.219544][T16027] overlayfs: failed to clone lowerpath [ 561.436076][ T8480] usbhid 6-1:0.0: can't add hid device: -71 [ 561.456742][ T8480] usbhid: probe of 6-1:0.0 failed with error -71 [ 561.495143][ T8480] usb 6-1: USB disconnect, device number 5 [ 561.641507][T16043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2814'. [ 561.813362][T16049] netlink: 'syz.4.2816': attribute type 12 has an invalid length. [ 561.846085][T16049] netlink: 'syz.4.2816': attribute type 29 has an invalid length. [ 561.858780][T16049] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2816'. [ 561.914654][T16049] netlink: 'syz.4.2816': attribute type 1 has an invalid length. [ 561.934414][T16049] netlink: 'syz.4.2816': attribute type 2 has an invalid length. [ 561.943555][T16049] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2816'. [ 562.173178][T16060] Bluetooth: MGMT ver 1.22 [ 563.314626][T16098] overlayfs: failed to clone upperpath [ 563.326566][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.334158][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.390799][T16102] tipc: Failed to remove unknown binding: 66,0,0/0:3889601358/3889601359 [ 563.845397][T16120] loop5: detected capacity change from 0 to 512 [ 563.874373][T16120] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 564.012344][T16120] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 564.129500][T16120] EXT4-fs (loop5): 1 truncate cleaned up [ 564.145057][T16120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.576209][T15000] udevd[15000]: incorrect jbd checksum on /dev/loop5 [ 564.671170][T16120] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.2841: Invalid inode bitmap blk 4283098034 in block_group 0 [ 564.754638][T14835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.444419][T16152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.533796][T16152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.757867][T16183] loop5: detected capacity change from 0 to 512 [ 566.777596][T16183] EXT4-fs: Ignoring removed bh option [ 566.819268][T16183] EXT4-fs error (device loop5): ext4_iget_extra_inode:4739: inode #15: comm syz.5.2858: corrupted in-inode xattr: e_value size too large [ 566.866865][T16183] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2858: couldn't read orphan inode 15 (err -117) [ 566.892179][T16183] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.961478][T16183] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.2858: Unrecognised inode hash code 4 [ 566.980632][T16183] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.2858: Corrupt directory, running e2fsck is recommended [ 567.003962][T16183] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.2858: Unrecognised inode hash code 4 [ 567.023307][T16183] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.2858: Corrupt directory, running e2fsck is recommended [ 567.095203][T14835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.236273][T16152] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.247637][T16152] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.261011][T16152] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.271610][T16152] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.856048][T16195] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 567.977169][T16195] bond4: entered allmulticast mode [ 568.030218][T16202] bond4: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 568.159341][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2864'. [ 568.486301][T16221] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2868'. [ 568.499758][T16221] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 568.611538][T16221] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2868'. [ 568.636333][T16221] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 569.199328][T16250] 9pnet_fd: Insufficient options for proto=fd [ 570.518409][T16222] Bluetooth: hci0: command 0x0406 tx timeout [ 572.763186][T16276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.853298][T16276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.699939][T16276] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.738427][T16276] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.747392][T16276] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.766782][T16276] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.317519][T16276] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.326659][T16276] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.336129][T16276] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.345234][T16276] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.739816][T16345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2900'. [ 577.432950][T16405] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2912'. [ 577.712903][T16412] loop0: detected capacity change from 0 to 1024 [ 577.734988][T16412] EXT4-fs: Ignoring removed orlov option [ 577.827175][T16412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.919235][T16405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.184707][T13490] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.263432][T16421] lo: Caught tx_queue_len zero misconfig [ 578.273960][T16421] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 578.601219][T16432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2922'. [ 581.244238][T16459] loop0: detected capacity change from 0 to 40427 [ 581.297881][T16459] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 581.325996][T16459] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 581.377379][T16459] F2FS-fs (loop0): invalid crc value [ 581.430850][T16459] F2FS-fs (loop0): Found nat_bits in checkpoint [ 581.693294][T16459] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 581.728328][T16459] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 582.081350][ T27] audit: type=1804 audit(1784166890.180:1901): pid=16459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2926" name="/newroot/170/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 582.350568][T16515] loop5: detected capacity change from 0 to 512 [ 582.374105][T16515] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 582.415922][T13490] syz-executor: attempt to access beyond end of device [ 582.415922][T13490] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 582.461398][T16515] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01cc019, mo2=0002] [ 582.487783][T13490] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 582.536154][T16515] System zones: 1-12 [ 582.568553][T16515] EXT4-fs (loop5): 1 truncate cleaned up [ 582.575710][T16515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.913527][T16515] loop5: detected capacity change from 512 to 64 [ 582.963537][T16525] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -12) [ 583.177370][T14835] EXT4-fs warning (device loop5): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 583.247878][T14835] EXT4-fs warning (device loop5): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 583.317092][T14835] EXT4-fs warning (device loop5): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 583.408919][T14835] EXT4-fs warning (device loop5): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 583.449112][T14835] EXT4-fs warning (device loop5): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 583.509186][T14835] EXT4-fs warning (device loop5): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 583.585490][T14835] EXT4-fs warning (device loop5): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 583.627777][T14835] EXT4-fs warning (device loop5): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 583.679067][T14835] EXT4-fs warning (device loop5): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 585.415681][T14835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.878425][T16222] Bluetooth: hci2: command 0x0406 tx timeout [ 586.721929][T16222] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 586.736719][T16222] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 586.749059][T16222] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 586.757563][T16222] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 586.769824][T16222] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 586.778929][T16222] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 587.166995][ T27] audit: type=1326 audit(1784166895.260:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16629 comm="syz.0.2966" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff1ef9de59 code=0x0 [ 587.414790][T16614] chnl_net:caif_netlink_parms(): no params data found [ 587.621628][T16614] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.650203][T16614] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.670395][T16614] bridge_slave_0: entered allmulticast mode [ 587.688621][T16614] bridge_slave_0: entered promiscuous mode [ 587.707993][T16614] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.728518][T16614] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.756215][T16614] bridge_slave_1: entered allmulticast mode [ 587.776372][T16614] bridge_slave_1: entered promiscuous mode [ 587.911249][T16614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.939439][T16614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.061807][T16614] team0: Port device team_slave_0 added [ 588.097796][T16614] team0: Port device team_slave_1 added [ 588.160627][T16651] overlayfs: failed to resolve './file0': -2 [ 588.196357][T16614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.209378][T16614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.264187][T16614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.311422][T16614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.326453][T16614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.394016][T16614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.605792][T16668] sit2: entered promiscuous mode [ 588.649946][T16614] hsr_slave_0: entered promiscuous mode [ 588.698867][T16614] hsr_slave_1: entered promiscuous mode [ 588.709625][T16614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 588.717278][T16614] Cannot create hsr debugfs directory [ 588.838472][ T5780] Bluetooth: hci1: command tx timeout [ 589.832523][ T27] audit: type=1326 audit(1784166897.930:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.0.2984" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1ef9de59 code=0x7ffc0000 [ 589.897028][ T27] audit: type=1326 audit(1784166897.960:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.0.2984" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1ef9de59 code=0x7ffc0000 [ 589.988345][ T27] audit: type=1326 audit(1784166897.960:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.0.2984" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7eff1ef9de59 code=0x7ffc0000 [ 590.055222][ T27] audit: type=1326 audit(1784166897.960:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.0.2984" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1ef9de59 code=0x7ffc0000 [ 590.118539][ T27] audit: type=1326 audit(1784166897.960:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.0.2984" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7eff1ef9de59 code=0x7ffc0000 [ 590.153419][ T27] audit: type=1326 audit(1784166897.960:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.0.2984" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1ef9de59 code=0x7ffc0000 [ 590.196442][ T27] audit: type=1326 audit(1784166897.960:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.0.2984" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1ef9de59 code=0x7ffc0000 [ 590.298028][ T27] audit: type=1326 audit(1784166897.990:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.0.2984" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7eff1ef9de59 code=0x7ffc0000 [ 590.439379][ T27] audit: type=1326 audit(1784166897.990:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.0.2984" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1ef9de59 code=0x7ffc0000 [ 590.773511][T12474] IPVS: starting estimator thread 0... [ 590.880380][T16734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.888935][T16731] IPVS: using max 17 ests per chain, 40800 per kthread [ 590.925713][ T5780] Bluetooth: hci1: command tx timeout [ 590.937859][T16734] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.960865][T16734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 591.877405][T16614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 591.922719][T16614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 591.986070][T16614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 592.034004][T16614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 592.137985][T16765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3001'. [ 592.449354][T16770] raw_sendmsg: syz.4.3002 forgot to set AF_INET. Fix it! [ 592.670685][T16614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.804233][T16614] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.911811][ T6415] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.919009][ T6415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.969655][ T6415] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.976869][ T6415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.998984][ T5780] Bluetooth: hci1: command tx timeout [ 593.401646][T16794] netlink: 'syz.2.3007': attribute type 1 has an invalid length. [ 593.942954][T16614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.091227][T16614] veth0_vlan: entered promiscuous mode [ 594.151728][T16614] veth1_vlan: entered promiscuous mode [ 594.272094][T16614] veth0_macvtap: entered promiscuous mode [ 594.306396][T16614] veth1_macvtap: entered promiscuous mode [ 594.384510][T16614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.399783][T16614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.442715][T16614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.463799][T16614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.486118][T16614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.516237][T16614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.527495][ T8480] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 594.553874][T16614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.578361][T16614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.598357][T16614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.620417][T16614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.674874][T16614] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.698275][T16614] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.707606][T16614] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.738333][T16614] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.752078][ T8480] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 594.777333][ T8480] usb 1-1: New USB device found, idVendor=0644, idProduct=970e, bcdDevice= 0.40 [ 594.802713][ T8480] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.824289][ T8480] usb 1-1: Product: syz [ 594.839018][ T8480] usb 1-1: Manufacturer: syz [ 594.843696][ T8480] usb 1-1: SerialNumber: syz [ 594.931730][T16817] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 595.045413][ T8705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.077350][ T8705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.085906][ T5780] Bluetooth: hci1: command tx timeout [ 595.200076][ T8480] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 595.208042][ T8700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.217562][ T8480] usb 1-1: MIDIStreaming interface descriptor not found [ 595.241770][ T8700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.392202][ T8480] usb 1-1: USB disconnect, device number 3 [ 595.797757][T16845] udevd[16845]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 597.497111][T16879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3025'. [ 598.216210][T16889] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3026'. [ 600.265264][T16949] trusted_key: encrypted_key: insufficient parameters specified [ 600.308400][ T172] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 600.377385][T16952] netlink: 'syz.3.3046': attribute type 1 has an invalid length. [ 600.539067][ T172] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 600.548399][ T172] usb 1-1: config 0 has no interface number 0 [ 600.554591][ T172] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 600.605608][ T172] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 600.627664][ T172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.651376][ T172] usb 1-1: Product: syz [ 600.655632][ T172] usb 1-1: Manufacturer: syz [ 600.684859][ T172] usb 1-1: SerialNumber: syz [ 600.705736][ T172] usb 1-1: config 0 descriptor?? [ 600.735690][ T172] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 601.023467][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 601.045438][T12474] usb 1-1: USB disconnect, device number 4 [ 601.063859][T12474] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 601.955260][T16980] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 602.635774][T16997] trusted_key: encrypted_key: insufficient parameters specified [ 603.785541][T17017] team0: Device macvlan1 failed to change mtu [ 604.475691][T17036] overlayfs: failed to clone upperpath [ 604.535193][ T8705] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.846268][ T8705] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.909295][T17041] netlink: 'syz.0.3067': attribute type 1 has an invalid length. [ 605.100346][T17047] bond3: (slave macvlan1): Enslaving as an active interface with a down link [ 605.165888][T17050] bond3 (unregistering): (slave macvlan1): Releasing active interface [ 605.236132][T17050] bond3 (unregistering): Released all slaves [ 605.473384][ T8705] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.533316][T17056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3071'. [ 605.618424][T17062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3071'. [ 605.872081][ T8705] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.233569][T17089] loop3: detected capacity change from 0 to 256 [ 606.528918][ T8705] tipc: Left network mode [ 607.054149][T17110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3085'. [ 608.289011][ T8481] IPVS: starting estimator thread 0... [ 608.398655][T17143] IPVS: using max 20 ests per chain, 48000 per kthread [ 608.482640][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 608.482660][ T27] audit: type=1804 audit(1784166916.550:1924): pid=17147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3095" name="file1" dev="ramfs" ino=49414 res=1 errno=0 [ 609.083746][ T172] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 609.118394][ T8705] hsr_slave_0: left promiscuous mode [ 609.138663][ T8480] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 609.143051][ T172] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 609.173488][ T8705] hsr_slave_1: left promiscuous mode [ 609.213141][ T8705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.228578][ T8705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.292326][ T8705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.318644][ T8705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.337570][ T8705] bond3: left allmulticast mode [ 609.357732][ T8480] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 609.368326][ T8705] bond3: left promiscuous mode [ 609.373409][ T8705] bridge0: port 3(bond3) entered disabled state [ 609.384569][ T8480] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.397355][ T8705] bridge_slave_1: left allmulticast mode [ 609.416916][ T8705] bridge_slave_1: left promiscuous mode [ 609.424118][ T8480] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 609.440614][ T8480] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.440870][ T8705] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.462167][ T8480] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 609.471956][ T8480] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 609.480504][ T8480] usb 4-1: Product: syz [ 609.484812][ T8480] usb 4-1: Manufacturer: syz [ 609.522048][ T8480] cdc_wdm 4-1:1.0: skipping garbage [ 609.533190][ T8705] bridge_slave_0: left allmulticast mode [ 609.540860][ T8480] cdc_wdm 4-1:1.0: skipping garbage [ 609.567674][ T8480] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 609.568034][ T8705] bridge_slave_0: left promiscuous mode [ 609.606255][ T8480] cdc_wdm 4-1:1.0: Unknown control protocol [ 609.606919][ T8705] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.815136][ T8705] veth0_macvtap: left promiscuous mode [ 609.842274][ T8705] veth1_vlan: left promiscuous mode [ 609.844802][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 609.847653][ T8705] veth0_vlan: left promiscuous mode [ 609.854171][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 609.855113][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 609.872215][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 609.879797][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 609.886443][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 609.892927][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 609.899580][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 609.906266][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 609.912908][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 609.926508][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 609.933190][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 609.940090][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 609.946753][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 609.953307][ T8480] usb 4-1: USB disconnect, device number 14 [ 609.959447][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 609.959471][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 609.959487][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 611.091235][ T8705] bond3 (unregistering): Released all slaves [ 611.128425][ T8705] bond2 (unregistering): Released all slaves [ 611.450835][ T27] audit: type=1804 audit(1784166919.550:1925): pid=17224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3113" name="file0" dev="ramfs" ino=49490 res=1 errno=0 [ 611.749501][T17230] loop0: detected capacity change from 0 to 4096 [ 611.823679][T17230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.856672][ T8705] bond1 (unregistering): (slave bond0): Removing an active aggregator [ 611.876225][ T8705] bond1 (unregistering): (slave bond0): Releasing backup interface [ 611.896475][ T8705] bond1 (unregistering): Released all slaves [ 612.374263][T13490] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.447285][T13490] EXT4-fs error (device loop0): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 4 in block_group 0 [ 612.464912][T13490] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 612.489190][T13490] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #4: comm syz-executor: mark_inode_dirty error [ 612.545240][T13490] EXT4-fs error (device loop0): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 4 in block_group 0 [ 612.588296][T13490] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 612.607528][T13490] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 613.454149][T17253] loop0: detected capacity change from 0 to 32768 [ 613.574830][T17253] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 613.680565][T17253] XFS (loop0): Ending clean mount [ 613.814223][ T8705] team0 (unregistering): Port device team_slave_1 removed [ 613.878647][T13490] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 613.916662][ T8705] team0 (unregistering): Port device team_slave_0 removed [ 614.003074][ T8705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.122597][ T8705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.178118][ T8705] bond0 (unregistering): Released all slaves [ 615.330179][T17212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3110'. [ 615.516013][T17282] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 616.227725][ T8705] IPVS: stop unused estimator thread 0... [ 616.256902][T17311] loop0: detected capacity change from 0 to 256 [ 617.717361][T17322] syz.4.3141 (17322) used greatest stack depth: 17896 bytes left [ 617.790178][T17350] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 618.556833][ T172] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 618.756551][ T172] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 618.793108][ T172] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.826111][ T172] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 618.849977][ T172] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.890010][ T172] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 618.918558][ T172] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 618.926641][ T172] usb 1-1: Product: syz [ 618.938895][ T172] usb 1-1: Manufacturer: syz [ 618.970301][ T172] cdc_wdm 1-1:1.0: skipping garbage [ 618.975910][ T172] cdc_wdm 1-1:1.0: skipping garbage [ 619.007063][ T172] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 619.019161][ T172] cdc_wdm 1-1:1.0: Unknown control protocol [ 619.269608][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 619.276303][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 619.282971][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 619.289616][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 619.296089][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 619.302741][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 619.309168][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 619.315807][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 619.328731][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 619.335404][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 619.349070][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 619.355733][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 619.368801][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 619.375472][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 619.381915][ T172] usb 1-1: USB disconnect, device number 5 [ 619.388374][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 619.395017][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 619.401119][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 619.553548][T17413] overlayfs: failed to resolve './file0': -2 [ 621.174752][T17452] netlink: 'syz.2.3173': attribute type 12 has an invalid length. [ 621.211367][T17452] netlink: 'syz.2.3173': attribute type 4 has an invalid length. [ 621.326902][T17439] loop0: detected capacity change from 0 to 32768 [ 621.365785][T17439] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.3171 (17439) [ 621.427429][T17439] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 621.470572][T17439] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 621.514501][T17439] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 621.538748][T17439] BTRFS info (device loop0): use zstd compression, level 3 [ 621.554396][T17439] BTRFS info (device loop0): using free space tree [ 621.752706][T17439] BTRFS info (device loop0): enabling ssd optimizations [ 621.788394][T17439] BTRFS info (device loop0): auto enabling async discard [ 622.032177][T13490] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 622.563310][T17492] overlayfs: failed to clone upperpath [ 623.017360][T17503] loop0: detected capacity change from 0 to 512 [ 623.106981][T17503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.132296][T17503] ext4 filesystem being mounted at /233/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 623.359006][T17503] loop0: detected capacity change from 512 to 1 [ 623.383989][T17521] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Out of memory [ 623.472326][T17521] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #2: comm syz.0.3184: mark_inode_dirty error [ 623.595581][T13490] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.628532][T17510] kmmpd-loop0: attempt to access beyond end of device [ 623.628532][T17510] loop0: rw=14337, sector=48, nr_sectors = 4 limit=1 [ 623.684620][T17510] Buffer I/O error on dev loop0, logical block 12, lost sync page write [ 624.762871][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.777584][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.247066][T17542] loop0: detected capacity change from 0 to 40427 [ 625.273230][T17542] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 625.284630][T17576] loop3: detected capacity change from 0 to 128 [ 625.291583][T17542] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 625.320166][T17542] F2FS-fs (loop0): invalid crc value [ 625.345438][T17542] F2FS-fs (loop0): Found nat_bits in checkpoint [ 625.353019][T17576] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 625.438567][T17576] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 625.614860][T17576] syz.3.3199 (pid 17576) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 625.635929][T17542] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 625.654364][T17576] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 625.666301][T17542] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 625.677217][T17576] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 625.758772][T16614] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 625.973269][T17593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3200'. [ 626.197782][T17598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3201'. [ 626.252612][T17598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3201'. [ 626.649108][ T27] audit: type=1800 audit(1784166934.750:1926): pid=17542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3192" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 629.357218][T17698] loop3: detected capacity change from 0 to 128 [ 630.418495][ T5829] kernel write not supported for file bpf-prog (pid: 5829 comm: kworker/0:6) [ 630.769803][T17739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3239'. [ 631.715432][T17767] bond1: entered allmulticast mode [ 631.743067][T17773] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3249'. [ 632.612205][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3257'. [ 632.654341][T17800] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 632.686660][T17800] gretap0: entered promiscuous mode [ 632.721063][T17800] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 632.757885][T17800] Cannot create hsr debugfs directory [ 632.789576][T17806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3257'. [ 633.224822][T17824] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 634.014724][T17852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3270'. [ 634.566450][T17868] overlayfs: failed to clone upperpath [ 639.542315][T18034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3322'. [ 639.576635][T18034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3322'. [ 641.137331][T18086] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 641.382739][T18094] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3339'. [ 642.649348][T18136] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3351'. [ 643.518108][T18164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3357'. [ 643.551371][T18164] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 643.567877][T18164] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 643.586059][T18164] Cannot create hsr debugfs directory [ 643.598907][T18167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3357'. [ 644.289279][T18192] netlink: 'syz.3.3365': attribute type 13 has an invalid length. [ 645.605676][T18229] netlink: 'syz.0.3374': attribute type 10 has an invalid length. [ 645.638607][T18229] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.3374'. [ 645.669899][T18229] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 645.757786][T18235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3376'. [ 645.870733][T18241] netlink: 'syz.3.3376': attribute type 1 has an invalid length. [ 646.042870][T18247] lo: Caught tx_queue_len zero misconfig [ 646.404186][T18256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3382'. [ 646.684056][T18271] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.3385'. [ 646.724748][T18271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3385'. [ 649.172542][T18345] netlink: 'syz.4.3405': attribute type 27 has an invalid length. [ 651.947017][T18449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3437'. [ 652.225970][T18459] loop0: detected capacity change from 0 to 2048 [ 652.295080][T18459] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 652.787171][T18473] ip6tnl0: Caught tx_queue_len zero misconfig [ 653.844506][ T8480] Process accounting resumed [ 655.878556][T18574] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3468'. [ 656.678055][T18595] netlink: 'syz.2.3474': attribute type 1 has an invalid length. [ 656.935465][T18598] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 657.061382][T18598] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 657.128663][T18598] bond2: (slave ip6gre1): making interface the new active one [ 657.160633][T18598] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 657.924877][T18621] netlink: 'syz.4.3482': attribute type 1 has an invalid length. [ 658.059442][T18621] 8021q: adding VLAN 0 to HW filter on device bond5 [ 658.213468][T18625] bond5: (slave dummy0): making interface the new active one [ 658.269566][T18625] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 659.188020][T18628] bond5 (unregistering): (slave dummy0): Releasing active interface [ 659.215329][T18628] bond5 (unregistering): Released all slaves [ 659.287149][T18634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3484'. [ 659.454798][T18656] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3488'. [ 659.856555][T18670] overlayfs: failed to clone upperpath [ 661.170133][T18708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3501'. [ 661.563913][T18725] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -6351, delta: 1 [ 661.607820][T18725] ref_ctr increment failed for inode: 0x639 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88806593e880 [ 661.977820][T18740] netlink: 'syz.4.3507': attribute type 1 has an invalid length. [ 662.204249][T18740] 8021q: adding VLAN 0 to HW filter on device bond5 [ 664.744666][T18800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3523'. [ 665.525147][T18832] netlink: 'syz.0.3519': attribute type 10 has an invalid length. [ 666.455154][T18860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3537'. [ 667.594136][T18893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3545'. [ 669.904098][T18942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.910892][T16222] Bluetooth: hci0: Unknown advertising packet type: 0x19 [ 669.914321][T16222] Bluetooth: hci0: Unknown advertising packet type: 0x1f [ 670.336290][T18968] ip6gre1: entered promiscuous mode [ 670.368500][T18968] ip6gre1: entered allmulticast mode [ 670.391975][T18973] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 670.717325][T18982] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3565'. [ 670.929766][ T4334] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 670.963902][ T4334] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 670.972916][ T5829] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 671.348524][T12474] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 671.400884][T19004] netlink: 'syz.3.3572': attribute type 1 has an invalid length. [ 671.508517][T12474] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 671.533996][T19004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 671.796557][T19016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3575'. [ 671.886479][T19020] overlayfs: failed to clone upperpath [ 672.404150][T19040] loop0: detected capacity change from 0 to 128 [ 672.464781][T19040] EXT4-fs (loop0): Test dummy encryption mode enabled [ 672.526954][T19040] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 672.566464][T19040] ext4 filesystem being mounted at /305/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 673.277072][T19075] netlink: 'syz.2.3593': attribute type 1 has an invalid length. [ 673.323232][T19075] 8021q: adding VLAN 0 to HW filter on device bond3 [ 673.446005][T19075] bond3: (slave geneve2): making interface the new active one [ 673.472601][T19075] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 673.702005][T19082] netlink: 'syz.4.3595': attribute type 39 has an invalid length. [ 674.482380][T13490] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 675.398361][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 676.709162][T19152] overlayfs: failed to clone upperpath [ 679.081924][ T5780] Bluetooth: hci2: Unknown advertising packet type: 0x19 [ 679.082043][ T5780] Bluetooth: hci2: Unknown advertising packet type: 0x1f [ 680.774693][T19291] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 680.791442][T19291] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 680.799945][T19291] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 682.815710][T19358] netlink: 'syz.0.3675': attribute type 10 has an invalid length. [ 682.855441][T19358] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 682.895850][T19358] team0: Failed to send options change via netlink (err -105) [ 682.929096][T19358] team0: Port device netdevsim0 added [ 683.204627][T19377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3680'. [ 683.543282][T19385] tipc: Enabling of bearer rejected, failed to enable media [ 684.918404][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 685.965580][T19436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3700'. [ 686.147972][T19446] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3702'. [ 686.206838][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.213369][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.704768][T19481] hsr0: entered promiscuous mode [ 687.746594][T19481] gretap1: entered allmulticast mode [ 687.787628][T19484] netlink: 'syz.4.3714': attribute type 1 has an invalid length. [ 687.802205][T19484] netlink: 63763 bytes leftover after parsing attributes in process `syz.4.3714'. [ 689.211870][T19537] lo: entered promiscuous mode [ 689.217379][T19537] batadv_slave_0: entered promiscuous mode [ 689.227600][T19537] syz_tun: entered promiscuous mode [ 689.234394][T19536] syz_tun: left promiscuous mode [ 689.240610][T19536] batadv_slave_0: left promiscuous mode [ 689.246480][T19536] lo: left promiscuous mode [ 690.105285][T19559] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 690.433497][T19575] tipc: Started in network mode [ 690.439891][T19575] tipc: Node identity ac14140f, cluster identity 4711 [ 690.456896][T19575] tipc: New replicast peer: 255.255.255.255 [ 690.476974][T19575] tipc: Enabled bearer , priority 10 [ 690.754006][T19584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3745'. [ 691.474033][ T9090] tipc: Node number set to 2886997007 [ 691.926275][T19620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3757'. [ 693.017170][T19647] overlayfs: failed to clone upperpath [ 694.294563][T19685] lo: entered allmulticast mode [ 694.718310][ T27] audit: type=1326 audit(1784167258.809:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19698 comm="syz.0.3777" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff1ef9de59 code=0x0 [ 696.041960][T19735] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 697.266121][T19773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3803'. [ 699.102677][T19832] overlayfs: failed to resolve './cgroup': -2 [ 699.127709][T19832] overlayfs: failed to clone upperpath [ 700.037578][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 700.057251][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 700.076204][T19852] ceph: No mds server is up or the cluster is laggy [ 700.374923][T19865] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3824'. [ 700.930815][T19884] loop0: detected capacity change from 0 to 4096 [ 700.938066][T19888] netlink: 'syz.4.3830': attribute type 1 has an invalid length. [ 700.991129][T19884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.034558][T19888] 8021q: adding VLAN 0 to HW filter on device bond6 [ 701.101265][T19895] bridge_slave_0: left allmulticast mode [ 701.107462][T19895] bridge_slave_0: left promiscuous mode [ 701.157908][T19895] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.170313][T13490] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.186256][T19895] bridge_slave_1: left allmulticast mode [ 701.194996][T19895] bridge_slave_1: left promiscuous mode [ 701.204441][T13490] EXT4-fs error (device loop0): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 4 in block_group 0 [ 701.226594][T19895] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.234854][T13490] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 701.260978][T19895] bond0: (slave bond_slave_0): Releasing backup interface [ 701.271230][T13490] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #4: comm syz-executor: mark_inode_dirty error [ 701.295340][T19895] bond0: (slave bond_slave_1): Releasing backup interface [ 701.300982][T13490] EXT4-fs error (device loop0): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 4 in block_group 0 [ 701.317481][T13490] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 701.329236][T13490] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 701.332326][T19895] team0: Port device team_slave_0 removed [ 701.364703][T19895] team0: Port device team_slave_1 removed [ 701.373996][T19895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.386283][T19895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.405879][T19895] bond1: (slave ip6gre1): Releasing backup interface [ 701.415448][T19895] ip6gre1: left promiscuous mode [ 701.440668][T19895] bond2: (slave ip6erspan0): Releasing active interface [ 701.471284][T19895] bond3: (slave veth7): Releasing backup interface [ 702.453410][T19922] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 703.478540][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 703.993070][T19975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3853'. [ 704.438299][T19981] kvm: pic: level sensitive irq not supported [ 704.443764][T19981] kvm: pic: single mode not supported [ 704.450822][T19981] kvm: pic: level sensitive irq not supported [ 704.485990][T19981] kvm: pic: level sensitive irq not supported [ 704.544203][T19981] kvm: pic: single mode not supported [ 704.625661][T19981] kvm: pic: single mode not supported [ 704.631644][T19981] kvm: pic: level sensitive irq not supported [ 704.720212][T19981] kvm: pic: non byte read [ 706.810231][T20049] netlink: 'syz.0.3870': attribute type 11 has an invalid length. [ 708.626882][ T6415] [ 708.629295][ T6415] ============================================ [ 708.635654][ T6415] WARNING: possible recursive locking detected [ 708.641837][ T6415] syzkaller #0 Not tainted [ 708.646461][ T6415] -------------------------------------------- [ 708.652637][ T6415] kworker/u4:17/6415 is trying to acquire lock: [ 708.658890][ T6415] ffffe8ffffd7e7d8 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x624/0xa40 [ 708.668176][ T6415] [ 708.668176][ T6415] but task is already holding lock: [ 708.675640][ T6415] ffffe8ffffd7e828 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4bf/0xa40 [ 708.684877][ T6415] [ 708.684877][ T6415] other info that might help us debug this: [ 708.692967][ T6415] Possible unsafe locking scenario: [ 708.692967][ T6415] [ 708.701099][ T6415] CPU0 [ 708.704410][ T6415] ---- [ 708.708200][ T6415] lock(&pd_list->lock); [ 708.712748][ T6415] lock(&pd_list->lock); [ 708.717096][ T6415] [ 708.717096][ T6415] *** DEADLOCK *** [ 708.717096][ T6415] [ 708.725305][ T6415] May be due to missing lock nesting notation [ 708.725305][ T6415] [ 708.733675][ T6415] 3 locks held by kworker/u4:17/6415: [ 708.739078][ T6415] #0: ffff88801d25d538 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 708.751083][ T6415] #1: ffffc900033d7d00 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 708.762955][ T6415] #2: ffffe8ffffd7e828 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4bf/0xa40 [ 708.772661][ T6415] [ 708.772661][ T6415] stack backtrace: [ 708.778564][ T6415] CPU: 1 PID: 6415 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 708.786326][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 708.796495][ T6415] Workqueue: pencrypt_parallel padata_parallel_worker [ 708.803371][ T6415] Call Trace: [ 708.806736][ T6415] [ 708.809727][ T6415] dump_stack_lvl+0x18c/0x250 [ 708.814540][ T6415] ? show_regs_print_info+0x20/0x20 [ 708.819844][ T6415] ? print_deadlock_bug+0x435/0x5d0 [ 708.825215][ T6415] __lock_acquire+0x6809/0x7d80 [ 708.830117][ T6415] ? __lock_acquire+0x7d80/0x7d80 [ 708.835185][ T6415] ? do_raw_spin_unlock+0x121/0x230 [ 708.840438][ T6415] ? verify_lock_unused+0x140/0x140 [ 708.845680][ T6415] ? mark_lock+0x94/0x320 [ 708.850122][ T6415] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 708.856116][ T6415] ? __lock_acquire+0x7d80/0x7d80 [ 708.861154][ T6415] lock_acquire+0x19e/0x420 [ 708.866389][ T6415] ? padata_do_serial+0x624/0xa40 [ 708.871896][ T6415] ? lockdep_hardirqs_on+0x98/0x150 [ 708.877126][ T6415] ? queue_work_on+0x19a/0x1f0 [ 708.881913][ T6415] ? read_lock_is_recursive+0x20/0x20 [ 708.887768][ T6415] ? __rwlock_init+0x150/0x150 [ 708.892743][ T6415] ? generic_gcmaes_encrypt+0x289/0x3d0 [ 708.898365][ T6415] _raw_spin_lock+0x2e/0x40 [ 708.902959][ T6415] ? padata_do_serial+0x624/0xa40 [ 708.908001][ T6415] padata_do_serial+0x624/0xa40 [ 708.912890][ T6415] ? padata_parallel_worker+0x44/0x1c0 [ 708.918362][ T6415] padata_parallel_worker+0x6f/0x1c0 [ 708.923741][ T6415] ? process_scheduled_works+0x975/0x1600 [ 708.929488][ T6415] process_scheduled_works+0xa60/0x1600 [ 708.935069][ T6415] ? worker_attach_to_pool+0x370/0x370 [ 708.940544][ T6415] ? assign_work+0x3cc/0x5d0 [ 708.945147][ T6415] worker_thread+0xa5e/0xfe0 [ 708.949771][ T6415] kthread+0x2fa/0x390 [ 708.953853][ T6415] ? pr_cont_work+0x550/0x550 [ 708.958667][ T6415] ? kthread_blkcg+0xd0/0xd0 [ 708.963401][ T6415] ret_from_fork+0x48/0x80 [ 708.967846][ T6415] ? kthread_blkcg+0xd0/0xd0 [ 708.972645][ T6415] ret_from_fork_asm+0x11/0x20 [ 708.977478][ T6415] [ 713.878538][ T5780] Bluetooth: hci1: command 0x0406 tx timeout