last executing test programs: 9m34.726964103s ago: executing program 32 (id=546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000048c0)="04e9", 0x2}], 0x1}}], 0x1, 0x4000001) r1 = dup(r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1) 8m53.468354819s ago: executing program 2 (id=800): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x55af) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x81d011, 0x0, 0x1, 0x0, &(0x7f0000000140)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_mount_image$vfat(&(0x7f0000000800), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 8m53.341713182s ago: executing program 2 (id=801): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x400, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 8m52.853746844s ago: executing program 2 (id=804): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x3}}, 0x18) write$FUSE_OPEN(r2, &(0x7f0000002c00)={0x20, 0x0, 0x0, {0x0, 0x2}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 8m52.705656758s ago: executing program 2 (id=806): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x101d441, &(0x7f0000000340)={[], [{@euid_lt}, {@subj_user={'subj_user', 0x3d, 'iso9660\x00'}}, {@subj_type={'subj_type', 0x3d, 'w:\b'}}, {@fowner_eq}, {@euid_eq}, {@euid_gt}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, 'syzkaller\x00'}}]}, 0x1, 0x3f2, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f0000000380)="c867", 0x2}], 0x1, 0x31, 0x4, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000680)={0x0, 0x0, 0x2, 0x29, 0x3}) 8m52.572261201s ago: executing program 2 (id=808): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x4000491, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) 8m52.150726382s ago: executing program 2 (id=809): truncate(&(0x7f0000000b40)='./cgroup.cpu/cgroup.procs\x00', 0x400000000001) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'pimreg1\x00', 0x1000}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2, &(0x7f0000000840)={[{@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@data_writeback}, {@quota}, {@mblk_io_submit}, {@noblock_validity}, {@sysvgroups}, {@init_itable_val={'init_itable', 0x3d, 0x67c}}, {@orlov}]}, 0xfa, 0x47f, &(0x7f0000000300)="$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") sendmsg$nl_route(r0, 0x0, 0x20048000) 8m37.055620756s ago: executing program 33 (id=809): truncate(&(0x7f0000000b40)='./cgroup.cpu/cgroup.procs\x00', 0x400000000001) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'pimreg1\x00', 0x1000}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2, &(0x7f0000000840)={[{@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@data_writeback}, {@quota}, {@mblk_io_submit}, {@noblock_validity}, {@sysvgroups}, {@init_itable_val={'init_itable', 0x3d, 0x67c}}, {@orlov}]}, 0xfa, 0x47f, &(0x7f0000000300)="$eJzs3M1vFOUfAPDvTF94/7U/xBcQpIpG4ktLy4scvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4t34XxhOejHqRROvejckxHAB9bJmdmZgWXbbLd12affzSab7PDNP93m+M/PsPjPP7gbQtYayP0nE9oj4PSIG8uzdBYbyh1s3Lk38fePSRBKVytt/JdVyN29cmiiLlv+3Lc9UKkV+U4N6L78XMT4zM3W+yI/Mn/1wZO7CxRenz46fnjo9dW7s+PEjh/f1Hxs72pY4s7hu7vlkdu/uE+9eeXPi5JX3f0rSyOOOujjaZSjfuw090+7KOmxHTTrprd2y/5c76UZnAp3UExHZ4eqr9v+B6Iktt7cNxOufd7RxwKqqVCqVRV6VFyrABpZEp1sAdEb5Rp9d/5bLGg09HgjXX8kvgLK4bxVLvqU30jyxv6/u+nZ7G+sfioiTC/98nS2xSvchAABqfZeNf15oNP5L45E80Z/9+V8xhzIYEf+PiJ0R8VBE7IqIhyOqZR+NiMeWWX/9DMm945/02n0H14Js/PdyMbd19/gvLYsM9hS5HdX4+5JT0zNTh4p9cjD6Np2aTqZGF6nj+9d++7LZttrxX7Zk9ZdjwaId13rrbtBNjs+PryTmWtc/i9jT2yj+JMppnCQidkfEnvusY/q53qbblo5/Ec2ftmWVbyKezY//QtTFX0qazk+OvnRs7OjI5piZOjRSnhX3+vnXy281q39F8bdBdvy3Njz/b8c/mGyOmLtw8Ux1vnZuWU+fdZ24/McXTa9piviz7tXK+X9iR3H+9yfvVFf0Fxs+Hp+fPz8a0Z+8ce/6sTvPVubL8ln8Bw807v87486eeDwi9kbEvoh4IrsoLNr+ZEQ8FREHFtkJP7769AdLxN/g+K/NXGkW/+RSxz9qj//yEz1nfri6dPybI6LZ8T9STR0s1rTy+tdqA1ey7wAAAGC9yD8Dn6TDt9NpOjycf4Z/V2xNZ2bn5p8/NfvRucl83nsw+tLyTtdAzf3Q0eLecJkfq8sfLu4bf9WzpZofnpidmex08NDltjXp/5k/ezrdOmDVtWEeDVin9H/oXvo/dKdE/4eupv9D92rU/z9tWnr421VtDLCmWn//v7rY95yAdaiF/r+QPzQfFQDrk+t/6F76P3Slpt+NT1f0lf81T/xb/J7hg9KejZ+I9IFoxsZP9Lb8YxbLSFQG8v6frdnUsEynX5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa478AAAD///u35Ec=") sendmsg$nl_route(r0, 0x0, 0x20048000) 7m8.095159614s ago: executing program 5 (id=1460): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7m7.633280555s ago: executing program 5 (id=1463): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f0000000a40)="e226028901e1", 0x6}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f0000000480)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000840)="06", 0x1}, {&(0x7f00000007c0)="414292", 0x3}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='D', 0x1}, {&(0x7f0000000440)='$', 0x1}, {&(0x7f0000001540)="953670f8", 0x4}, {&(0x7f0000001380)="e4ad301a", 0x4}, {&(0x7f00000013c0)="d455f24bee", 0x5}, {&(0x7f0000001400)="6a369b3e73", 0x5}], 0x10}}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f00000012c0)="c3d724fb87", 0x5}, {&(0x7f00000000c0)="c3c9bdd4", 0x4}], 0x2}}], 0x2, 0x4040000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 7m7.39878387s ago: executing program 5 (id=1468): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) timer_gettime(0x0, &(0x7f0000000140)) read$FUSE(r2, &(0x7f0000003d00)={0x2020}, 0x2020) 7m7.267942554s ago: executing program 5 (id=1469): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@shortname_mixed}, {@fat=@nfs}, {@shortname_winnt}, {@uni_xlate}, {@utf8}, {@utf8}, {@shortname_mixed}, {@shortname_winnt}, {@fat=@sys_immutable}, {@fat=@flush}, {@shortname_winnt}, {@rodir}]}, 0x0, 0x2be, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 7m7.054879489s ago: executing program 5 (id=1472): r0 = syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) syz_usb_ep_read(r0, 0xd, 0x0, 0x0) syz_usb_ep_read(r0, 0xd, 0x0, 0x0) syz_usb_ep_read(r0, 0xd, 0x0, 0x0) syz_usb_ep_read(r0, 0xd, 0x0, 0x0) syz_usb_ep_read(r0, 0xd, 0x0, 0x0) syz_usb_ep_write(r0, 0x8d, 0xfe5a, &(0x7f0000000200)="e3") 7m5.525391266s ago: executing program 5 (id=1479): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000001f200)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 7m5.023090668s ago: executing program 34 (id=1479): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000001f200)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 7m4.709723185s ago: executing program 4 (id=1484): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x224}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 7m4.51225362s ago: executing program 4 (id=1486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x6, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 7m4.237595667s ago: executing program 4 (id=1488): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b000000050000000100010009"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r3}, 0xc) 7m3.904800505s ago: executing program 4 (id=1491): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@shortname_mixed}, {@fat=@nfs}, {@shortname_winnt}, {@uni_xlate}, {@utf8}, {@utf8}, {@shortname_mixed}, {@shortname_winnt}, {@fat=@sys_immutable}, {@fat=@flush}, {@shortname_winnt}, {@rodir}]}, 0x0, 0x2be, &(0x7f0000000580)="$eJzs3MFr03AUwPG3dlu7jq09DEFBfOhFL2Grf0GRDcSCMldRD0LmUi2NTUlqpSJ2N6/+HUNvnhTUf2AXb97FyxCEXXYQI2ubreui68a2bPb7gZG3vLzkV37JeA3st3b39ZNy0TOKZk1iSZWYyLJsiGQ2o46hzjbWikel27JcGV//ev72vfs3cvn87LzqXG7halZVJy98fPbizcXPtfE77yY/JGQ182DtZ/bb6pnVs2u/F4KzOyKmLjpOzVy0LV0qeWVD9ZZtmZ6lpYpnuTU11Q3yRdupVhtqVpYmUlXX8jw1Kw0tWw2tOVpzG2o+MksVNQxDJ1IyaOL7riiszM+buSMZDKIwFrbTdXNmPDRZWDmOQQEAgJMlqv7/ccnTkqcVZ7O//0f/H5Pu/B79v8hA9/8HVf17KrSfxOmy2f+nOs/vTvT/AAAAAAAAAAAAAAAAAAAAAACcBhu+n/Z9Px1sg5+EiCRFJPg96nHiaDD/g63rH/eSIvareqFeaG/b+VxRSmKLJdMjIr9a90NHO567np+d1paMfLKbnfpmvRCXRFAfyITXz7Trtbu+KSOS6r5+VtIyFV6fDamvF0bl8iU/0bmyJYak5ctDccSWpdZ9vV3/ckb12s18T/1Y6zgAAAAAAP4Hhm7Z9f29lTc0WDakJ9/euf1+QNJ7vB/o+X49LOeGo/vcAAAAAAAMEm9UyqZtW67XeL7f4O36QaqiC4LFbA/lhCKHPMKmiOyrKtnvwcPbZ35/UuainyAmIr2pkV17woN4v7M8FHrCHyI7n4upw57u4wv8+Na9+v1p+wnopzzKv0oAAAAAjkLQ9A9FPRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZYv6uIBccfZBGyrsvFo/mUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnwJwAA///e/RIr") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 7m3.600761022s ago: executing program 4 (id=1493): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r0 = fanotify_init(0xf00, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x5, 0x4800003e, r1, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, 0x0, 0x0, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x7c65, 0xa334, 0x1, 0x0, 0x0) 7m3.333238199s ago: executing program 4 (id=1494): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 7m2.972193958s ago: executing program 35 (id=1494): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 6m25.048387503s ago: executing program 7 (id=1696): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x2}, 0x8) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) 6m24.727421021s ago: executing program 7 (id=1701): syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fd4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0xff, 0xc0, 0x4, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x2a, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0xff, 0x0, 0x6, 0x6, 0x2, 0x2, 0x5, 0x7f, 0x80}, @feature_unit={0xd, 0x24, 0x7, 0x2, 0xfe, [0x9, 0x10]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0xd4, 0x4, {0xa, 0x25, 0x25, 0x6, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x0, 0xa, 0x9}}}}}}}}]}}, 0x0) r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x1) write(r1, &(0x7f0000000400)="32b247f2870511549b0c824d6f9a79e0c5d9eb048b87a8c69e59f9807e7c65a3c3e5b4d6f15c20733bab379b044b001ebe543b30fdf7d4f21b7eeb4205e78bbcf7853ecf07008fa1884e775c9cd5276e1c89b3dbfae3063674696db886fd87d2076d027222e490d239de61d14982a946a2bdb53d5d147700000000d6a8482d7a51864f83213449ce1f329d671a47098f0a584a5c5edee5c66c5017415603a0e7b73e38b1ae99e12fdfdf8904d3bf895d36dad7343aab1f6ce7ae1850dbcb6c9ac7c304e4c10f491b01d574ef65f8a3d50a7afa42bb22428ec7c4d1522236b23bdcc779c63f315d9ab1b187d3", 0xec) ppoll(&(0x7f0000000080)=[{r1, 0x2000}, {0xffffffffffffffff, 0x2}], 0x2, &(0x7f00000000c0), &(0x7f0000000100)={[0x7fffffff]}, 0x8) 6m23.024115952s ago: executing program 7 (id=1707): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 6m22.920492634s ago: executing program 7 (id=1710): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@noinit_itable}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.'}}, {@noblock_validity}, {@norecovery}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@discard}]}, 0xfa, 0x493, &(0x7f0000000f00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x10000, 0x115) getdents64(r0, 0x0, 0x0) 6m22.456669805s ago: executing program 7 (id=1713): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @remote}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000540)={r3}, &(0x7f0000000640)=0x8) 6m20.775346986s ago: executing program 7 (id=1723): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendto$inet(r1, &(0x7f0000000040)='@', 0x1, 0x20004880, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006140)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='4', 0x1}], 0x1}}], 0x1, 0x2400c0c5) 6m20.223930239s ago: executing program 36 (id=1723): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendto$inet(r1, &(0x7f0000000040)='@', 0x1, 0x20004880, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006140)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='4', 0x1}], 0x1}}], 0x1, 0x2400c0c5) 4m39.259396827s ago: executing program 8 (id=2443): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000300)=""/172, 0xdc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m37.726474634s ago: executing program 8 (id=2451): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv6_newaddr={0x40, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x27, 0x78, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x4, 0x9, 0x40}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 4m37.461679691s ago: executing program 8 (id=2454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffcd, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 4m37.200378767s ago: executing program 8 (id=2456): close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 4m36.917575733s ago: executing program 8 (id=2459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a00000005"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) 4m36.2537167s ago: executing program 8 (id=2462): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) recvfrom$inet_nvme(r1, &(0x7f0000000000)=""/23, 0x17, 0x40000000, 0x0, 0x0) shutdown(r1, 0x0) 4m35.654264964s ago: executing program 37 (id=2462): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) recvfrom$inet_nvme(r1, &(0x7f0000000000)=""/23, 0x17, 0x40000000, 0x0, 0x0) shutdown(r1, 0x0) 3m11.482718467s ago: executing program 9 (id=3015): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) io_uring_setup(0x6bd, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x212a7, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0xde, 0xe, 0x2, 0x7f, 0x7, 0x2, 0x81, 0x2, 0x5, 0x2, 0xe, 0xd, 0xb, 0x6}, 0xe) 3m10.455275201s ago: executing program 9 (id=3019): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) fcntl$setpipe(r0, 0x407, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) 3m10.317420995s ago: executing program 9 (id=3022): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) write$eventfd(r1, &(0x7f0000000040)=0x9, 0x8) 3m7.20066868s ago: executing program 9 (id=3034): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount$nfs4(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x1082020, 0x0) 3m6.864605498s ago: executing program 9 (id=3036): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x48) listen(r0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) recvfrom$inet(r0, 0x0, 0x0, 0x40000020, 0x0, 0x64) 3m4.941595404s ago: executing program 9 (id=3046): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe0001000000080000800c000180080004"], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 3m4.31769438s ago: executing program 38 (id=3046): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe0001000000080000800c000180080004"], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 3.249737011s ago: executing program 3 (id=4182): bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$xdp(0x2c, 0x3, 0x0) iopl(0x3) ioctl$MEMLOCK(0xffffffffffffffff, 0x40084d05, 0x0) sync() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101) 2.651201166s ago: executing program 1 (id=4186): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x40}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 2.607489407s ago: executing program 0 (id=4187): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x2000) 2.536223658s ago: executing program 1 (id=4188): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x4, 0x4, 0x4, 0x10005, 0x804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x200}, 0x50) 2.494464999s ago: executing program 0 (id=4189): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.244313256s ago: executing program 3 (id=4190): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x1, 0x41, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1000001, {0x8, 0x3d, 0x0, {0x1, 0x7fffffffffffffff, 0x0, 0x1000, 0x11, 0xfffffffffffffffd, 0x1009ec, 0x35741061, 0x10004, 0xa593e9c1ca988eda, 0x3, 0xee01, 0x0, 0x10, 0xf}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f000000db40)="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", 0x2000, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x10001, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x1000) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 1.885057984s ago: executing program 3 (id=4192): fspick(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r4, 0x1, 0x70bd25, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x808) 1.884578294s ago: executing program 0 (id=4193): socket(0x1d, 0x2, 0x6) r0 = syz_io_uring_setup(0x22b, &(0x7f0000000540)={0x0, 0x2344, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x42}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r5, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1.739281908s ago: executing program 3 (id=4194): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x800, 0x0) openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.668318299s ago: executing program 6 (id=4195): close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000000000000000850000008700000085000000070000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9557ed387dbe8abc89b6d5bec", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 1.62132543s ago: executing program 0 (id=4196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a09"], 0xd4}}, 0x8818) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 1.578674171s ago: executing program 3 (id=4197): unshare(0x2c020400) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="d9ea693249ca", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) 1.306493878s ago: executing program 6 (id=4198): socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$netlink(0x10, 0x3, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 1.133787452s ago: executing program 3 (id=4199): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x10040, &(0x7f00000000c0)=ANY=[@ANYBLOB='heartbeat=none,journal_async_commit,journal_async_commit,coherency=full,coherency=full\x00'], 0x1, 0x4445, &(0x7f00000044c0)="$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") r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) 1.077559324s ago: executing program 6 (id=4200): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0xfeff, 0x0}, 0x20000000) 856.777279ms ago: executing program 6 (id=4201): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = dup(r0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000)={r2, 0x7, 0xfff3, 0xf62, 0x4}, 0x14) 638.138294ms ago: executing program 1 (id=4202): bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000001ff0), 0x10) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x48) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) socketpair$unix(0x1, 0x2, 0x0, 0x0) 630.290474ms ago: executing program 6 (id=4203): syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 553.982946ms ago: executing program 0 (id=4204): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="9b060000003800001c00128009000100626f6e64000000000c0002800500010006"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x4008010) 465.753928ms ago: executing program 1 (id=4205): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x800, 0x0) openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 373.955041ms ago: executing program 6 (id=4206): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 265.619983ms ago: executing program 1 (id=4207): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) renameat2(r3, &(0x7f0000000040)='./bus\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x1) 137.522146ms ago: executing program 0 (id=4208): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 1 (id=4209): socket$inet6_udp(0xa, 0x2, 0x0) fanotify_init(0x16, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = syz_io_uring_setup(0x1593, &(0x7f0000001900)={0x0, 0xe5dc, 0x8, 0x3, 0x2f0}, &(0x7f0000000280), &(0x7f0000002c00), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f00000005c0)=[{0x0, 0x0, 0x0}], 0x1) kernel console output (not intermixed with test programs): t [ 438.629009][T13740] loop3: detected capacity change from 0 to 32768 [ 438.671708][T13740] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.2318 (13740) [ 438.771665][T13740] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 438.806104][T13740] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 438.845431][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d9c1c00: rx timeout, send abort [ 438.853845][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d6e9000: abort rx timeout. Force session deactivation [ 438.857386][T13740] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 438.964088][T13740] BTRFS info (device loop3): use zstd compression, level 3 [ 438.971398][T13740] BTRFS info (device loop3): using free space tree [ 439.274887][T13740] BTRFS info (device loop3): enabling ssd optimizations [ 439.282355][T13740] BTRFS info (device loop3): auto enabling async discard [ 439.353780][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d9c1c00: abort rx timeout. Force session deactivation [ 439.397199][T13791] CIFS: Attempting to mount //127.0.0.1/share [ 439.474435][T13792] CIFS: VFS: Invalid response size 0 for command 0 [ 439.514388][T13791] CIFS: VFS: cifs_mount failed w/return code = -5 [ 439.755391][T13802] overlayfs: failed to clone upperpath [ 439.758864][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 439.758938][ T28] audit: type=1800 audit(1787625898.511:938): pid=13797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2318" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 439.882760][ T28] audit: type=1800 audit(1787625898.511:939): pid=13740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2318" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 439.974184][ T9] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 440.435670][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.442282][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.454070][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 440.468452][ T9] usb 4-1: no configurations [ 440.473162][ T9] usb 4-1: can't read configurations, error -22 [ 441.007114][ T5782] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 441.871639][T13840] loop8: detected capacity change from 0 to 2048 [ 442.257951][T13840] loop8: detected capacity change from 0 to 4096 [ 442.375563][T13847] loop3: detected capacity change from 0 to 4096 [ 442.419642][T13847] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 442.451905][ T5780] Bluetooth: hci3: unexpected event for opcode 0x100c [ 442.464439][T13847] EXT4-fs (loop3): Test dummy encryption mode enabled [ 442.506592][T13847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.541109][T13840] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 442.801489][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.304691][T13865] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2354'. [ 444.824560][T11069] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 445.006610][T11069] usb 4-1: Using ep0 maxpacket: 8 [ 445.037258][T11069] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 445.047077][T13908] netlink: 'syz.1.2369': attribute type 39 has an invalid length. [ 445.066862][T11069] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.084437][T11069] usb 4-1: Product: syz [ 445.089063][T11069] usb 4-1: Manufacturer: syz [ 445.093710][T11069] usb 4-1: SerialNumber: syz [ 445.105527][T11069] usb 4-1: config 0 descriptor?? [ 445.327762][T11069] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 445.645703][T13916] Bluetooth: MGMT ver 1.22 [ 445.760326][T11069] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 445.774278][T11069] usb 4-1: USB disconnect, device number 28 [ 446.988038][ T5840] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 447.257229][ T5840] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 447.280984][ T5840] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.584484][ T5840] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 450.223462][T13994] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2403'. [ 451.852363][ T6510] team0: Port device syz_tun removed [ 453.166638][ T5817] usb 9-1: USB disconnect, device number 2 [ 453.547184][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 453.831943][T14039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.911530][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 453.938447][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 453.945945][ T5817] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 453.959445][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 453.967765][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 453.975960][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 453.984189][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 454.198323][ T5817] usb 9-1: unable to get BOS descriptor or descriptor too short [ 454.208748][ T5817] usb 9-1: not running at top speed; connect to a high speed hub [ 454.219930][ T5817] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 454.228337][ T5817] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 454.243080][T14041] chnl_net:caif_netlink_parms(): no params data found [ 454.250069][ T5817] usb 9-1: config 14 has no interface number 0 [ 454.256395][ T5817] usb 9-1: config 14 has no interface number 1 [ 454.273468][ T5817] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 454.287402][ T5817] usb 9-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0x1B, skipping [ 454.298337][ T5817] usb 9-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 454.309521][ T5817] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 454.324025][ T5817] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 454.336746][ T5817] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.364031][ T5817] usb 9-1: config 14 interface 57 has no altsetting 0 [ 454.371989][ T5817] usb 9-1: config 14 interface 228 has no altsetting 0 [ 454.387342][ T5817] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 454.397228][ T5817] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.409663][ T5817] usb 9-1: Product: syz [ 454.413892][ T5817] usb 9-1: Manufacturer: syz [ 454.418841][ T5817] usb 9-1: SerialNumber: syz [ 454.472368][T14041] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.514894][T14041] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.522474][T14041] bridge_slave_0: entered allmulticast mode [ 454.557719][T14041] bridge_slave_0: entered promiscuous mode [ 454.577424][T14041] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.597195][T14041] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.616805][T14041] bridge_slave_1: entered allmulticast mode [ 454.633086][T14041] bridge_slave_1: entered promiscuous mode [ 454.719521][T14041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.757249][T14041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.853441][T14041] team0: Port device team_slave_0 added [ 454.874226][T14041] team0: Port device team_slave_1 added [ 454.898504][ T5817] legousbtower 9-1:14.57: interrupt endpoints not found [ 454.934199][T14041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.943551][T14041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.978967][T14041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.002020][T14041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.012363][T14041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.049240][T14041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.113728][ T5817] legousbtower 9-1:14.228: interrupt endpoints not found [ 455.169923][T14041] hsr_slave_0: entered promiscuous mode [ 455.180812][T14041] hsr_slave_1: entered promiscuous mode [ 455.192184][T14041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.203523][T14041] Cannot create hsr debugfs directory [ 455.983380][T14041] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.006487][T14086] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 456.024174][ T5786] Bluetooth: hci2: command tx timeout [ 456.386818][T14086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 456.608807][T14088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 456.936997][T14041] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.135837][ T5840] usb 9-1: USB disconnect, device number 3 [ 457.308741][T14041] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.501420][ T28] audit: type=1326 audit(1787625916.261:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14113 comm="syz.8.2437" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce839e0d9 code=0x7ffc0000 [ 457.539325][ T28] audit: type=1326 audit(1787625916.291:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14113 comm="syz.8.2437" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce839e0d9 code=0x7ffc0000 [ 457.591051][ T28] audit: type=1326 audit(1787625916.301:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14113 comm="syz.8.2437" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce839e0d9 code=0x7ffc0000 [ 457.666341][T14041] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.684010][ T28] audit: type=1326 audit(1787625916.301:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14113 comm="syz.8.2437" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce839e0d9 code=0x7ffc0000 [ 457.776698][ T28] audit: type=1326 audit(1787625916.301:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14113 comm="syz.8.2437" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcce839e0d9 code=0x7ffc0000 [ 457.794148][T14121] ªªªªªª: renamed from vlan0 [ 457.832880][ T28] audit: type=1326 audit(1787625916.301:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14113 comm="syz.8.2437" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce839e0d9 code=0x7ffc0000 [ 457.936527][ T28] audit: type=1326 audit(1787625916.301:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14113 comm="syz.8.2437" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce839e0d9 code=0x7ffc0000 [ 458.027832][ T28] audit: type=1326 audit(1787625916.311:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14113 comm="syz.8.2437" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce839e0d9 code=0x7ffc0000 [ 458.106997][ T28] audit: type=1326 audit(1787625916.311:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14113 comm="syz.8.2437" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce839e0d9 code=0x7ffc0000 [ 458.138415][ T5786] Bluetooth: hci2: command tx timeout [ 458.186439][T14135] MTD: Couldn't look up './dev/mtdblock0': -2 [ 458.235475][ T28] audit: type=1326 audit(1787625916.321:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14113 comm="syz.8.2437" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcce839e0d9 code=0x7ffc0000 [ 458.395007][T14041] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 458.425674][T14041] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 458.451019][T14041] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 458.514937][T14041] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 458.808758][T14041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.905061][T14041] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.941603][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.948889][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.024021][ T1765] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.031215][ T1765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.241957][T14041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 459.816639][T14041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.979306][T14041] veth0_vlan: entered promiscuous mode [ 460.016888][T14041] veth1_vlan: entered promiscuous mode [ 460.141537][T14041] veth0_macvtap: entered promiscuous mode [ 460.189988][T14041] veth1_macvtap: entered promiscuous mode [ 460.204048][ T5786] Bluetooth: hci2: command tx timeout [ 460.242755][T14041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.255595][T14041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.266696][T14041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.277614][T14041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.287917][T14041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.298776][T14041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.330747][T14041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.406069][T14041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.454028][T14041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.477532][T14041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.514160][T14041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.539258][T14041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.574103][T14041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.596560][T14041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.669968][T14041] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.699177][T14041] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.721934][T14041] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.754081][T14041] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.129747][ T2944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.158834][ T2944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.291785][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.334125][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.272725][ T5786] Bluetooth: hci2: command tx timeout [ 462.735212][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 462.754687][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 462.773759][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 462.788632][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 462.796622][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 462.804224][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 463.573448][T14247] chnl_net:caif_netlink_parms(): no params data found [ 463.878111][T14247] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.914883][T14247] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.922223][T14247] bridge_slave_0: entered allmulticast mode [ 463.960233][T14247] bridge_slave_0: entered promiscuous mode [ 464.065185][T14247] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.089329][T14247] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.105677][T14247] bridge_slave_1: entered allmulticast mode [ 464.123090][T14247] bridge_slave_1: entered promiscuous mode [ 464.233400][T14247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.263642][T14247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.447560][T14247] team0: Port device team_slave_0 added [ 464.477434][T14247] team0: Port device team_slave_1 added [ 464.561696][T14247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.591038][T14247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.667643][T14247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.668899][ T5786] Bluetooth: hci2: command tx timeout [ 464.698318][T14247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.724090][T14247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.848943][T14247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.914652][ T5786] Bluetooth: hci0: command tx timeout [ 465.121518][T14247] hsr_slave_0: entered promiscuous mode [ 465.160284][T14247] hsr_slave_1: entered promiscuous mode [ 465.182501][T14247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.204092][T14247] Cannot create hsr debugfs directory [ 466.043525][T14247] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 466.117260][T14247] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 466.184542][T14247] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 466.222276][T14247] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 466.589001][T14247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.677674][T14247] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.770350][ T6841] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.777809][ T6841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.826509][ T6841] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.833705][ T6841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.986087][ T5786] Bluetooth: hci0: command tx timeout [ 467.738972][T14247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.752739][T14247] veth0_vlan: entered promiscuous mode [ 468.802900][T14247] veth1_vlan: entered promiscuous mode [ 468.969860][T14247] veth0_macvtap: entered promiscuous mode [ 469.027795][T14247] veth1_macvtap: entered promiscuous mode [ 469.064311][ T5786] Bluetooth: hci0: command tx timeout [ 469.137298][T14247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.181197][T14247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.204744][T14247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.224872][T14247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.262740][T14247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.294028][T14247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.334044][T14247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.374205][T14247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.415990][T14247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.454397][T14423] netlink: 'syz.6.2504': attribute type 1 has an invalid length. [ 469.592091][T14247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.644296][T14247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.694332][T14247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.726475][T14247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.775575][T14247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.800979][T14247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.839615][T14247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.861871][T14247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.892320][T14247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.918180][T14425] gretap1: entered allmulticast mode [ 469.953290][T14425] bond1: (slave gretap1): making interface the new active one [ 469.965399][T14425] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 470.011464][T14247] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.049833][T14247] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.092942][T14247] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.122326][T14247] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.392342][T14441] dummy0: entered allmulticast mode [ 470.423410][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2508'. [ 470.444268][ T2944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.452293][ T2944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.751317][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.770946][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.793839][T14439] dummy0: left allmulticast mode [ 471.145317][ T5786] Bluetooth: hci0: command tx timeout [ 471.875207][T14472] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 472.226158][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2517'. [ 472.251280][T14480] netlink: 'syz.3.2517': attribute type 30 has an invalid length. [ 472.268183][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2517'. [ 472.294673][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2517'. [ 472.303861][T14480] netlink: 'syz.3.2517': attribute type 30 has an invalid length. [ 472.342062][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2517'. [ 472.874871][ T23] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 473.089644][ T23] usb 10-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 473.123508][ T23] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 473.168637][ T23] usb 10-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 473.189239][ T23] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.211223][ T23] usb 10-1: Product: syz [ 473.228524][ T23] usb 10-1: Manufacturer: syz [ 473.249482][ T23] usb 10-1: SerialNumber: syz [ 473.270510][ T23] usb 10-1: config 0 descriptor?? [ 473.301549][ T23] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 474.691615][T14535] sock: sock_set_timeout: `syz.6.2537' (pid 14535) tries to set negative timeout [ 474.726778][ T23] gspca_sunplus: reg_r err -71 [ 474.736102][ T23] sunplus: probe of 10-1:0.0 failed with error -71 [ 474.779122][ T23] usb 10-1: USB disconnect, device number 2 [ 474.868953][T14539] netlink: 'syz.1.2530': attribute type 1 has an invalid length. [ 475.080318][T14546] gretap1: entered allmulticast mode [ 475.137157][T14546] bond3: (slave gretap1): making interface the new active one [ 475.187043][T14546] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 477.434733][T14624] netlink: 'syz.3.2554': attribute type 1 has an invalid length. [ 477.604506][T14624] bond1: entered promiscuous mode [ 477.634640][T14624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 477.802345][T14629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 477.847168][T14629] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 477.903543][T14629] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 477.932573][T14629] bond1: (slave ip6gre1): making interface the new active one [ 477.974320][T14629] ip6gre1: entered promiscuous mode [ 477.993862][T14629] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 478.695494][T14652] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2561'. [ 479.196552][T14673] loop3: detected capacity change from 0 to 64 [ 479.311282][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 479.311299][ T28] audit: type=1800 audit(1787625938.071:996): pid=14673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2567" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 479.438877][T14673] syz.3.2567: attempt to access beyond end of device [ 479.438877][T14673] loop3: rw=34817, sector=57, nr_sectors = 8 limit=64 [ 480.221479][T14706] gadgetfs: bound to dummy_udc driver [ 480.340236][T14713] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2577'. [ 480.409120][T14713] netlink: 'syz.6.2577': attribute type 1 has an invalid length. [ 480.434103][T14713] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2577'. [ 480.588055][T14721] netlink: 'syz.1.2580': attribute type 1 has an invalid length. [ 480.779341][T14721] bond4: entered promiscuous mode [ 480.799395][T14721] 8021q: adding VLAN 0 to HW filter on device bond4 [ 481.046349][T14727] 8021q: adding VLAN 0 to HW filter on device bond4 [ 481.065485][T14727] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 481.084093][T14727] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 481.135649][T14727] bond4: (slave ip6gre1): making interface the new active one [ 481.154741][T14727] ip6gre1: entered promiscuous mode [ 481.176035][T14727] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 481.485095][T14746] ip6gre2: entered promiscuous mode [ 481.490387][T14746] ip6gre2: entered allmulticast mode [ 485.204347][ T5817] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 485.396753][ T5817] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 485.417078][ T5817] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 485.449937][ T5817] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 485.501066][ T5817] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 485.510977][ T5817] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 485.530134][ T5817] usb 10-1: Product: syz [ 485.554390][ T5817] usb 10-1: Manufacturer: syz [ 485.559409][ T5817] usb 10-1: SerialNumber: syz [ 485.795072][ T5817] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 486.044550][ T5817] usb 10-1: USB disconnect, device number 3 [ 486.076760][T14821] usblp0: removed [ 486.882983][T14858] lo: entered promiscuous mode [ 486.888095][T14858] lo: entered allmulticast mode [ 486.908557][T14858] bond0: entered promiscuous mode [ 486.924105][T14858] bond0: entered allmulticast mode [ 486.941278][T14858] dummy0: entered promiscuous mode [ 486.954417][T14858] dummy0: entered allmulticast mode [ 486.961685][T14858] eql: entered promiscuous mode [ 486.979507][T14858] eql: entered allmulticast mode [ 486.990336][T14858] ifb0: entered promiscuous mode [ 486.994700][T14864] loop3: detected capacity change from 0 to 1024 [ 487.005583][T14858] ifb0: entered allmulticast mode [ 487.010857][T14864] EXT4-fs: inline encryption not supported [ 487.040955][T14858] ifb1: entered promiscuous mode [ 487.046488][T14864] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 487.071775][T14858] ifb1: entered allmulticast mode [ 487.102121][T14864] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 487.102121][T14864] [ 487.115494][T14858] virtio_net virtio1 eth0: entered promiscuous mode [ 487.122155][T14858] virtio_net virtio1 eth0: entered allmulticast mode [ 487.194767][T14858] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 487.209230][T14858] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 487.233314][T14858] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 487.250000][T14858] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 487.260211][T14858] hwsim0: entered promiscuous mode [ 487.272617][T14858] hwsim0: entered allmulticast mode [ 487.279285][T14858] ieee802154 phy0 wpan0: entered promiscuous mode [ 487.299434][T14858] ieee802154 phy0 wpan0: entered allmulticast mode [ 487.324145][T14858] ieee802154 phy1 wpan1: entered promiscuous mode [ 487.362863][T14858] ieee802154 phy1 wpan1: entered allmulticast mode [ 487.395140][T14858] teql0: entered promiscuous mode [ 487.405709][T14858] teql0: entered allmulticast mode [ 487.412351][T14858] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 489.149789][ T28] audit: type=1326 audit(1787625947.911:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14920 comm="syz.6.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 489.254870][ T28] audit: type=1326 audit(1787625947.911:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14920 comm="syz.6.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 489.341343][ T28] audit: type=1326 audit(1787625947.911:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14920 comm="syz.6.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 489.441240][ T28] audit: type=1326 audit(1787625947.911:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14920 comm="syz.6.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 489.529566][ T28] audit: type=1326 audit(1787625947.921:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14920 comm="syz.6.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 489.628958][ T28] audit: type=1326 audit(1787625947.921:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14920 comm="syz.6.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 489.723814][ T28] audit: type=1326 audit(1787625947.921:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14920 comm="syz.6.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 489.850208][ T28] audit: type=1326 audit(1787625947.921:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14920 comm="syz.6.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 489.937541][ T28] audit: type=1326 audit(1787625947.931:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14920 comm="syz.6.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 490.060264][ T28] audit: type=1326 audit(1787625947.931:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14920 comm="syz.6.2633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 490.218144][T14946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2640'. [ 490.263576][T14946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.536814][T14946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.852864][T14981] netlink: 'syz.9.2647': attribute type 1 has an invalid length. [ 494.873675][T15061] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 495.282333][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2673'. [ 495.313677][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2673'. [ 501.212432][T15154] netlink: 'syz.1.2701': attribute type 2 has an invalid length. [ 501.226380][T15154] netlink: 'syz.1.2701': attribute type 9 has an invalid length. [ 501.242205][T15154] netlink: 'syz.1.2701': attribute type 10 has an invalid length. [ 501.257899][T15154] netlink: 'syz.1.2701': attribute type 11 has an invalid length. [ 501.284431][T15154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2701'. [ 501.466975][T15158] ipt_REJECT: TCP_RESET invalid for non-tcp [ 501.693850][T15170] vlan0: entered allmulticast mode [ 501.706398][T15170] bridge_slave_0: entered allmulticast mode [ 501.724916][T15170] bridge0: port 1(vlan0) entered blocking state [ 501.739506][T15170] bridge0: port 1(vlan0) entered disabled state [ 501.758320][T15170] vlan0: entered promiscuous mode [ 501.769123][T15170] bridge_slave_0: entered promiscuous mode [ 501.784305][T15170] bridge0: mtu less than device minimum [ 501.887417][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.893878][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.374377][T15181] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2711'. [ 502.474745][T15181] team1: entered promiscuous mode [ 502.504063][T15181] team1: entered allmulticast mode [ 504.241550][T15231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2729'. [ 505.236585][T15258] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 505.244794][T15258] IPv6: NLM_F_CREATE should be set when creating new route [ 506.583342][T15284] overlayfs: failed to resolve './file0': -2 [ 509.280261][T15334] overlayfs: failed to resolve './cgroup': -2 [ 510.198763][T15345] netlink: 'syz.3.2771': attribute type 4 has an invalid length. [ 510.339434][T15349] netlink: 'syz.3.2771': attribute type 4 has an invalid length. [ 511.580905][T15356] loop3: detected capacity change from 0 to 32768 [ 511.778542][T15356] JBD2: Ignoring recovery information on journal [ 511.958670][T15356] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 512.216826][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 512.216844][ T28] audit: type=1800 audit(1787625970.981:1030): pid=15381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2774" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 512.316543][ T28] audit: type=1800 audit(1787625970.981:1031): pid=15356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2774" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 512.685522][ T78] Bluetooth: hci4: Frame reassembly failed (-84) [ 513.182019][T14041] ocfs2: Unmounting device (7,3) on (node local) [ 514.744399][ T5786] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 518.457015][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'. [ 519.274466][T15501] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2833'. [ 519.297175][T15501] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 519.490982][T15509] CIFS: Attempting to mount //127.0.0.1/share [ 519.600773][T15513] overlayfs: failed to clone upperpath [ 520.118910][T15531] overlayfs: failed to clone lowerpath [ 520.293154][T15535] loop9: detected capacity change from 0 to 4096 [ 520.307772][T15509] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -512 [ 520.335007][T15535] ntfs: (device loop9): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 520.362837][T15509] CIFS: VFS: cifs_mount failed w/return code = -512 [ 520.451441][ T28] audit: type=1326 audit(1787625979.211:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15539 comm="syz.1.2851" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20419e0d9 code=0x7ffc0000 [ 520.500939][ T28] audit: type=1326 audit(1787625979.241:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15539 comm="syz.1.2851" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20419e0d9 code=0x7ffc0000 [ 520.538318][ T28] audit: type=1326 audit(1787625979.241:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15539 comm="syz.1.2851" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fe20419e0d9 code=0x7ffc0000 [ 520.598278][T15535] ntfs: volume version 3.1. [ 520.663024][ T28] audit: type=1326 audit(1787625979.241:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15539 comm="syz.1.2851" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20419e0d9 code=0x7ffc0000 [ 520.714065][ T28] audit: type=1326 audit(1787625979.241:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15539 comm="syz.1.2851" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20419e0d9 code=0x7ffc0000 [ 520.794078][ T28] audit: type=1326 audit(1787625979.241:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15539 comm="syz.1.2851" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe20419e0d9 code=0x7ffc0000 [ 520.894151][ T28] audit: type=1326 audit(1787625979.241:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15539 comm="syz.1.2851" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20419e0d9 code=0x7ffc0000 [ 520.900454][T15546] overlayfs: failed to clone upperpath [ 520.954173][ T28] audit: type=1326 audit(1787625979.241:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15539 comm="syz.1.2851" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20419e0d9 code=0x7ffc0000 [ 520.980840][ T28] audit: type=1326 audit(1787625979.241:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15539 comm="syz.1.2851" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe20419e0d9 code=0x7ffc0000 [ 522.974258][ T5819] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 523.190393][ T5819] usb 10-1: config 0 has no interfaces? [ 523.212221][ T5819] usb 10-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d [ 523.225282][ T5819] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.234077][ T5819] usb 10-1: Product: syz [ 523.238400][ T5819] usb 10-1: Manufacturer: syz [ 523.243121][ T5819] usb 10-1: SerialNumber: syz [ 523.251137][ T5819] usb 10-1: config 0 descriptor?? [ 523.531098][ T5817] usb 10-1: USB disconnect, device number 4 [ 523.995097][T15633] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 524.018864][T15623] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 524.528926][T15642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2888'. [ 524.572757][T15642] 8021q: adding VLAN 0 to HW filter on device bond2 [ 524.842702][T15657] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2892'. [ 524.887183][T15657] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2892'. [ 525.393497][T15654] loop9: detected capacity change from 0 to 32768 [ 525.394355][ T5786] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 525.415891][ T5786] Bluetooth: hci3: hcon ffff88805c1be000 sent 0 < count 1 [ 525.438795][T15654] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 scanned by syz.9.2893 (15654) [ 525.529206][T15654] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 525.594088][T15654] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 525.603611][T15654] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 525.694029][T15654] BTRFS info (device loop9): use zstd compression, level 3 [ 525.709023][T15654] BTRFS info (device loop9): using free space tree [ 525.862495][T15687] loop3: detected capacity change from 0 to 2048 [ 525.883629][T15687] UDF-fs: bad mount option "rootdir=000000000" or missing value [ 525.925639][T15654] BTRFS info (device loop9): enabling ssd optimizations [ 525.998825][T15654] BTRFS info (device loop9): auto enabling async discard [ 526.197780][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 526.197798][ T28] audit: type=1800 audit(1787625984.951:1052): pid=15654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2893" name="bus" dev="loop9" ino=263 res=0 errno=0 [ 526.405763][T15705] overlayfs: failed to clone upperpath [ 527.481409][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 527.512766][T14247] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 527.764301][ T6841] tipc: Disabling bearer [ 527.853758][ T6841] tipc: Disabling bearer [ 527.873173][ T6841] tipc: Left network mode [ 528.382964][T15722] loop9: detected capacity change from 0 to 4096 [ 528.431051][T15722] EXT4-fs: Ignoring removed orlov option [ 528.538814][T15722] EXT4-fs (loop9): Test dummy encryption mode enabled [ 528.569804][T15722] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.859950][T14247] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.566791][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 530.341512][T15741] loop9: detected capacity change from 0 to 40427 [ 530.388482][T15741] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 530.431647][T15741] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 530.468328][T15741] F2FS-fs (loop9): Found nat_bits in checkpoint [ 530.636350][T15741] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 530.643678][T15741] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 531.295895][T15775] overlayfs: failed to clone upperpath [ 531.624214][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 532.297125][T15786] loop9: detected capacity change from 0 to 2048 [ 532.362360][T15786] NILFS (loop9): invalid segment: Magic number mismatch [ 532.392373][T15786] NILFS (loop9): trying rollback from an earlier position [ 532.525269][T15786] NILFS (loop9): recovery complete [ 532.547020][T15789] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 533.704264][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 534.370834][T15793] fuse: Bad value for 'fd' [ 534.383203][T15793] overlayfs: failed to clone upperpath [ 534.513492][T15813] CIFS: Attempting to mount //127.0.0.1/share [ 535.057637][T15819] loop9: detected capacity change from 0 to 4096 [ 535.372819][T15813] CIFS: VFS: Error connecting to socket. Aborting operation. [ 535.390161][T15813] CIFS: VFS: cifs_mount failed w/return code = -4 [ 535.792314][ T5786] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 536.565656][ T28] audit: type=1326 audit(1787625995.321:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.9.2950" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c67f9e0d9 code=0x7fc00000 [ 537.224999][ T28] audit: type=1326 audit(1787625995.981:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15833 comm="syz.1.2955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe20419e0d9 code=0x0 [ 537.777059][T15843] tipc: Failed to remove unknown binding: 66,0,0/0:1714308112/1714308113 [ 538.022775][T15847] loop3: detected capacity change from 0 to 2048 [ 538.135897][ T6841] hsr_slave_0: left promiscuous mode [ 538.147232][T15847] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 538.184567][ T6841] hsr_slave_1: left promiscuous mode [ 538.367069][ T6841] bond1 (unregistering): Released all slaves [ 539.099164][T15868] loop3: detected capacity change from 0 to 1024 [ 539.116065][T15868] EXT4-fs: Ignoring removed bh option [ 539.147018][T15868] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 539.182720][T15868] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 539.215561][T15868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.555223][T15880] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2973'. [ 539.594057][ T5817] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 539.816714][ T5817] usb 4-1: Using ep0 maxpacket: 8 [ 539.847861][ T5817] usb 4-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 539.859107][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.891965][ T5817] usb 4-1: Product: syz [ 539.896475][ T5817] usb 4-1: Manufacturer: syz [ 539.901109][ T5817] usb 4-1: SerialNumber: syz [ 540.219963][ T5817] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 540.311981][ T5817] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 540.345340][ T5817] usb 4-1: USB disconnect, device number 29 [ 540.397101][T10513] udevd[10513]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.927774][T14041] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.933406][ T6841] bond0 (unregistering): Released all slaves [ 542.086606][T15904] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 542.407331][T15922] sd 0:0:1:0: PR command failed: 1026 [ 542.412885][T15922] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 542.455035][T15922] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 542.612138][ T6841] IPVS: stop unused estimator thread 0... [ 543.789792][T15969] loop9: detected capacity change from 0 to 16 [ 543.842004][T15969] erofs: Unknown parameter '01777777777777777777777|V$Gé;%–¶gROzâ°IA¬fn¤ï¥sT±eÆM [ 543.842004][T15969] ù–g\õâò' [ 544.636167][T15980] loop9: detected capacity change from 0 to 128 [ 544.743517][T15980] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c01c, mo2=0002] [ 544.768894][T15980] System zones: 1-3, 19-19, 35-36 [ 544.845068][T15980] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 544.874647][T15980] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 545.198562][T14247] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 546.826354][T16001] netlink: 'syz.1.3018': attribute type 10 has an invalid length. [ 546.898893][T16001] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.916463][T16001] bond0: (slave team0): Enslaving as an active interface with an up link [ 547.308361][ T28] audit: type=1326 audit(1787626006.071:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16007 comm="syz.6.3021" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 547.421667][ T28] audit: type=1326 audit(1787626006.071:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16007 comm="syz.6.3021" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 547.510393][ T28] audit: type=1326 audit(1787626006.101:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16007 comm="syz.6.3021" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 547.596696][ T28] audit: type=1326 audit(1787626006.101:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16007 comm="syz.6.3021" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 547.679563][ T28] audit: type=1326 audit(1787626006.101:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16007 comm="syz.6.3021" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 547.764179][ T28] audit: type=1326 audit(1787626006.161:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16007 comm="syz.6.3021" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 547.854825][ T28] audit: type=1326 audit(1787626006.161:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16007 comm="syz.6.3021" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 547.929049][ T28] audit: type=1326 audit(1787626006.161:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16007 comm="syz.6.3021" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 547.989840][T16019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3025'. [ 548.025390][ T28] audit: type=1326 audit(1787626006.311:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16007 comm="syz.6.3021" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 548.134255][ T28] audit: type=1326 audit(1787626006.311:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16007 comm="syz.6.3021" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 548.182335][T16019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3025'. [ 549.054069][T16031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.111893][T16031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.142300][T16030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3030'. [ 551.233748][ T35] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.513415][ T35] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.601082][T15965] Set syz1 is full, maxelem 65536 reached [ 551.858243][ T35] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.094211][ T35] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.506308][ T35] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.565679][ T35] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.623303][ T35] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.744771][ T35] netdevsim netdevsim9 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.708165][T16089] gadgetfs: bound to dummy_udc driver [ 554.270930][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 554.287931][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 554.306083][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 554.362565][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 554.372870][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 554.381683][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 554.918119][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 554.930727][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 555.005045][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 555.014727][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 555.266853][ T23] libceph: connect (1)[c::]:6789 error -101 [ 555.281108][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 555.291145][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 555.297945][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 555.672475][T16107] ceph: No mds server is up or the cluster is laggy [ 555.704130][T16111] ceph: No mds server is up or the cluster is laggy [ 555.824780][ T23] libceph: connect (1)[c::]:6789 error -101 [ 555.834433][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 555.850790][ T23] libceph: connect (1)[c::]:6789 error -101 [ 555.877608][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 556.142913][T16097] chnl_net:caif_netlink_parms(): no params data found [ 556.239866][ T35] hsr_slave_0: left promiscuous mode [ 556.279913][ T35] hsr_slave_1: left promiscuous mode [ 556.405267][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.412771][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.482229][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.506221][ T5780] Bluetooth: hci0: command tx timeout [ 556.525203][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.550943][ T35] bridge_slave_1: left allmulticast mode [ 556.558923][ T35] bridge_slave_1: left promiscuous mode [ 556.565808][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.603463][ T35] bridge_slave_0: left allmulticast mode [ 556.614222][ T35] bridge_slave_0: left promiscuous mode [ 556.629452][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.739174][ T35] veth1_macvtap: left promiscuous mode [ 556.746861][ T35] veth0_macvtap: left promiscuous mode [ 556.756052][ T35] veth1_vlan: left promiscuous mode [ 556.763964][ T35] veth0_vlan: left promiscuous mode [ 558.615287][ T5780] Bluetooth: hci0: command tx timeout [ 559.477790][ T35] team0 (unregistering): Port device team_slave_1 removed [ 559.590986][ T35] team0 (unregistering): Port device team_slave_0 removed [ 559.686465][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.806892][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.505519][ T35] bond0 (unregistering): Released all slaves [ 560.664352][ T5780] Bluetooth: hci0: command tx timeout [ 560.680969][T16149] syz_tun: entered allmulticast mode [ 560.686814][T16149] syz_tun: left allmulticast mode [ 560.719036][T16165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3068'. [ 560.750367][T16166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3068'. [ 561.033200][T16172] batman_adv: batadv0: Adding interface: dummy0 [ 561.067960][T16172] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.108047][T16172] batman_adv: batadv0: Interface activated: dummy0 [ 561.186037][T16180] batadv0: mtu less than device minimum [ 561.211082][T16180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 561.224862][T16180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 561.237725][T16180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 561.250565][T16180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 561.263410][T16180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 561.275778][T16180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 561.288743][T16180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 561.301544][T16180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 561.314449][T16180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 561.382346][T16097] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.405435][T16097] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.433283][T16097] bridge_slave_0: entered allmulticast mode [ 561.457853][T16097] bridge_slave_0: entered promiscuous mode [ 561.487686][T16097] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.531274][T16097] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.552468][T16097] bridge_slave_1: entered allmulticast mode [ 561.576145][T16097] bridge_slave_1: entered promiscuous mode [ 561.716515][T16097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.749638][T16097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.952837][T16097] team0: Port device team_slave_0 added [ 562.042818][T16097] team0: Port device team_slave_1 added [ 562.269628][T16097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.318913][T16097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.487738][T16097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.567709][T16097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.618642][T16097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.664020][T16097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.744092][ T5780] Bluetooth: hci0: command tx timeout [ 562.854679][T16097] hsr_slave_0: entered promiscuous mode [ 562.878417][T16097] hsr_slave_1: entered promiscuous mode [ 563.314237][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.341725][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.637266][T16097] netdevsim netdevsim0 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.088506][T16097] netdevsim netdevsim0 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.476418][T16097] netdevsim netdevsim0 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.884390][T16097] netdevsim netdevsim0 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.302688][T16270] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3096'. [ 565.342980][T16270] bridge0: port 2(ip6gretap0) entered disabled state [ 565.441291][T16270] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3096'. [ 565.500544][T16270] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3096'. [ 565.524648][T16097] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 565.553119][T16097] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 565.575316][T16097] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 565.661688][T16277] can0: slcan on ttyS3. [ 565.665001][T16097] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 565.854557][T16275] can0 (unregistered): slcan off ttyS3. [ 566.047604][T16097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.139007][T16097] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.197142][ T1765] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.204449][ T1765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.258910][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.266305][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.086901][T16097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.232463][T16097] veth0_vlan: entered promiscuous mode [ 567.283549][T16097] veth1_vlan: entered promiscuous mode [ 567.408056][T16097] veth0_macvtap: entered promiscuous mode [ 567.448612][T16097] veth1_macvtap: entered promiscuous mode [ 567.501223][T16097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.563930][T16097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.573827][T16097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.595342][T16323] tipc: Failed to remove unknown binding: 66,0,0/11840170:2560370605/2560370606 [ 567.644154][T16097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.664035][T16097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.688895][T16097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.725255][T16097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.810029][T16097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.854096][T16097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.873965][T16097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.893948][T16097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.916876][T16097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.953958][T16097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.974250][T16097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.992718][T16097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.015763][T16097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.077442][T16097] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.120106][T16097] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.146000][T16097] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.168360][T16097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.213144][T16340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3113'. [ 568.535020][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.579970][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.668873][T16343] jffs2: notice: (16343) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 568.682280][ T1765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.714365][ T1765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.925679][T16353] netlink: 'syz.1.3117': attribute type 1 has an invalid length. [ 569.197606][T16353] 8021q: adding VLAN 0 to HW filter on device bond5 [ 569.306369][T16359] bond5: (slave dummy0): making interface the new active one [ 569.356860][T16359] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 570.130889][T16361] bond5 (unregistering): (slave dummy0): Releasing active interface [ 570.160149][T16361] bond5 (unregistering): Released all slaves [ 570.230519][T16362] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3118'. [ 572.779565][T16432] loop3: detected capacity change from 0 to 136 [ 573.844392][T16463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3139'. [ 573.910870][T16463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3139'. [ 575.085193][T16499] netlink: 'syz.6.3150': attribute type 1 has an invalid length. [ 575.191261][T16499] bond2: entered promiscuous mode [ 575.199199][T16499] 8021q: adding VLAN 0 to HW filter on device bond2 [ 575.287464][T16504] 8021q: adding VLAN 0 to HW filter on device bond2 [ 575.332025][T16504] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 575.342966][T16504] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 575.371235][T16504] bond2: (slave ip6gre1): making interface the new active one [ 575.411465][T16504] ip6gre1: entered promiscuous mode [ 575.427432][T16504] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 575.454293][T16501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3151'. [ 577.365575][T16564] netlink: 'syz.1.3167': attribute type 10 has an invalid length. [ 577.405870][T16564] bridge0: port 2(ip6gretap0) entered blocking state [ 577.412783][T16564] bridge0: port 2(ip6gretap0) entered listening state [ 577.446770][T16567] (null): rxe_set_mtu: Set mtu to 1024 [ 577.479510][T16564] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 577.990682][T16580] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.3170'. [ 578.038096][T16580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3170'. [ 578.318979][T16567] infiniband syz1: set down [ 578.379902][T16567] infiniband syz1: added bridge_slave_1 [ 578.443296][T16567] syz1: rxe_create_cq: returned err = -12 [ 578.457409][T16567] infiniband syz1: Couldn't create ib_mad CQ [ 578.471262][T16567] infiniband syz1: Couldn't open port 1 [ 578.629803][T16567] RDS/IB: syz1: added [ 578.653166][T16567] smc: adding ib device syz1 with port count 1 [ 578.674370][T16567] smc: ib device syz1 port 1 has pnetid [ 580.755476][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 580.825366][T16627] net_ratelimit: 10 callbacks suppressed [ 580.825449][T16627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 582.347436][T16637] loop3: detected capacity change from 0 to 32768 [ 583.757896][T16695] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 584.025102][T16705] netlink: 'syz.3.3200': attribute type 1 has an invalid length. [ 585.098659][T16744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3213'. [ 586.342767][T16788] netlink: 'syz.1.3229': attribute type 1 has an invalid length. [ 586.398222][T16788] 8021q: adding VLAN 0 to HW filter on device bond5 [ 586.519178][T16788] bond5: (slave ip6erspan0): making interface the new active one [ 586.532136][T16788] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 586.675417][T16791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3222'. [ 587.572244][T16834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3234'. [ 587.607456][T16834] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.616528][T16834] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.625559][T16834] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.634510][T16834] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.694396][T16837] overlayfs: failed to resolve './file0': -2 [ 587.857016][T16840] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3236'. [ 588.403391][T16866] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3243'. [ 590.388029][T16898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3248'. [ 590.539624][T16898] 8021q: adding VLAN 0 to HW filter on device team1 [ 591.480194][ T28] audit: type=1326 audit(1787626050.241:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16920 comm="syz.6.3255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 591.571239][ T28] audit: type=1326 audit(1787626050.281:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16920 comm="syz.6.3255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 591.637770][ T28] audit: type=1326 audit(1787626050.281:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16920 comm="syz.6.3255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 591.700660][ T28] audit: type=1326 audit(1787626050.281:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16920 comm="syz.6.3255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 591.772533][ T28] audit: type=1326 audit(1787626050.281:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16920 comm="syz.6.3255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 591.846507][ T28] audit: type=1326 audit(1787626050.281:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16920 comm="syz.6.3255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 591.953427][ T28] audit: type=1326 audit(1787626050.281:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16920 comm="syz.6.3255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 592.026846][ T28] audit: type=1326 audit(1787626050.281:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16920 comm="syz.6.3255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 592.099021][ T28] audit: type=1326 audit(1787626050.281:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16920 comm="syz.6.3255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 592.182301][ T28] audit: type=1326 audit(1787626050.291:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16920 comm="syz.6.3255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 592.757767][ C1] bridge0: port 2(ip6gretap0) entered learning state [ 594.942121][T17014] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3267'. [ 597.928608][ T5841] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 598.150149][ T5841] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.174968][ T5841] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 598.209358][ T5841] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 598.263699][ T5841] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 598.307522][ T5841] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 598.329682][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.473380][T17114] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 598.477491][T17113] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3291'. [ 598.492407][T17114] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 598.493555][T17114] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 598.537450][T17113] netlink: 105 bytes leftover after parsing attributes in process `syz.0.3291'. [ 598.562293][T17114] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 598.607929][T17113] netlink: 105 bytes leftover after parsing attributes in process `syz.0.3291'. [ 598.666759][T17114] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 598.750944][T17114] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 598.782712][T17114] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 598.825325][T17114] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 598.896034][T17114] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 598.915549][T17114] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 599.348952][T17128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3294'. [ 599.487765][ T5841] [drm] Initialized gud 1.0.0 20200422 for 4-1:1.0 on minor 2 [ 599.489585][T17128] 8021q: adding VLAN 0 to HW filter on device bond6 [ 599.585796][T17137] netlink: 'syz.1.3294': attribute type 10 has an invalid length. [ 599.593812][T17137] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3294'. [ 599.604004][T17137] dummy0: entered promiscuous mode [ 599.624461][T17134] dummy0: left promiscuous mode [ 599.639802][T17134] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 600.190683][ T5841] gud 4-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 600.255083][ T5841] usb 4-1: USB disconnect, device number 30 [ 600.547308][T17161] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.3303'. [ 602.058045][T17213] netlink: 'syz.1.3318': attribute type 30 has an invalid length. [ 602.089304][T17213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3318'. [ 602.149906][T17215] netlink: 'syz.1.3318': attribute type 30 has an invalid length. [ 602.215225][T17215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3318'. [ 602.240505][T17218] tipc: Enabling of bearer rejected, failed to enable media [ 602.532434][T17225] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3321'. [ 603.035432][T17235] MTDSB: Device #1 doesn't appear to exist [ 603.035432][T17235] [ 603.936451][T17257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3330'. [ 604.339825][T17271] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3333'. [ 606.835833][T17328] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 608.104227][ C1] bridge0: port 2(ip6gretap0) entered forwarding state [ 608.111391][ C1] bridge0: topology change detected, propagating [ 609.465520][T17392] netlink: 'syz.6.3361': attribute type 4 has an invalid length. [ 609.566544][T17392] netlink: 'syz.6.3361': attribute type 4 has an invalid length. [ 610.057646][T17406] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3363'. [ 611.382295][T17428] loop3: detected capacity change from 0 to 8192 [ 611.517124][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 611.517143][ T28] audit: type=1804 audit(1787626070.271:1149): pid=17428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3370" name="/newroot/178/bus/bus" dev="loop3" ino=1048689 res=1 errno=0 [ 611.584788][T17440] tipc: Started in network mode [ 611.613818][T17440] tipc: Node identity c2f91a3bc57a, cluster identity 4711 [ 611.633579][T17440] tipc: Enabled bearer , priority 0 [ 611.672541][T17440] syzkaller0: entered promiscuous mode [ 611.681283][T17440] syzkaller0: entered allmulticast mode [ 612.154420][ T9] IPVS: starting estimator thread 0... [ 612.264230][T17453] IPVS: using max 17 ests per chain, 40800 per kthread [ 612.744114][ T5850] tipc: Node number set to 126032443 [ 614.294417][ T5850] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 614.490295][ T5850] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 614.546649][ T5850] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 614.659871][ T5850] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 614.695409][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.750752][ T5850] usb 4-1: Product: syz [ 614.766569][ T5850] usb 4-1: Manufacturer: syz [ 614.777488][ T5850] usb 4-1: SerialNumber: syz [ 614.816701][ T5850] usb 4-1: config 0 descriptor?? [ 614.875203][ T5850] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 615.685306][T17525] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3394'. [ 615.743578][T17525] 8021q: adding VLAN 0 to HW filter on device bond3 [ 615.944333][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3396'. [ 616.085574][T17525] batman_adv: batadv0: Interface deactivated: dummy0 [ 616.111228][T17525] batman_adv: batadv0: Removing interface: dummy0 [ 616.137221][T17525] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 616.172775][T17528] netlink: 'syz.6.3394': attribute type 10 has an invalid length. [ 616.208512][T17528] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3394'. [ 616.274050][T17528] dummy0: entered promiscuous mode [ 616.305931][T17528] bond3: (slave dummy0): Releasing backup interface [ 616.633192][ T5850] gspca_sunplus: reg_r err -71 [ 616.638563][ T5850] sunplus: probe of 4-1:0.0 failed with error -71 [ 616.658305][ T5850] usb 4-1: USB disconnect, device number 31 [ 616.909362][T17540] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3399'. [ 619.004552][T17549] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 619.683640][T17571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3410'. [ 619.744982][ T28] audit: type=1326 audit(1787626078.511:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17572 comm="syz.3.3412" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4608b9e0d9 code=0x0 [ 619.791032][T17571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 619.890851][T17575] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 619.936994][T17578] netlink: 'syz.0.3410': attribute type 10 has an invalid length. [ 619.980490][T17578] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3410'. [ 620.007078][T17578] dummy0: entered promiscuous mode [ 620.021915][T17578] bond1: (slave dummy0): Releasing backup interface [ 620.100310][T17586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3413'. [ 620.198649][T17586] 8021q: adding VLAN 0 to HW filter on device bond7 [ 620.243499][T17583] macvlan2: entered promiscuous mode [ 620.261198][T17583] macvlan2: entered allmulticast mode [ 620.270481][T17583] bond7: entered promiscuous mode [ 620.276366][T17583] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 620.293184][T17583] bond7: left promiscuous mode [ 620.618222][T17605] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3421'. [ 620.992152][T17624] overlayfs: failed to clone upperpath [ 621.077202][T17626] netlink: 'syz.6.3428': attribute type 10 has an invalid length. [ 621.102159][T17626] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 621.130141][T17626] netlink: 'syz.6.3428': attribute type 10 has an invalid length. [ 621.138649][T17626] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.146112][T17626] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.177862][T17626] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.186787][T17626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.194370][T17626] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.201595][T17626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.217358][T17626] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 622.146814][ T6854] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x35 [ 623.258205][T17690] netlink: 'syz.1.3452': attribute type 10 has an invalid length. [ 623.280541][T17690] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 623.300417][T17690] netlink: 'syz.1.3452': attribute type 10 has an invalid length. [ 623.311236][T17690] bridge0: port 2(ip6gretap0) entered disabled state [ 624.214285][T17712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3461'. [ 624.658099][T17729] ip_tables: iptables: counters copy to user failed while replacing table [ 624.754777][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.762532][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.017523][T16989] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.061646][T16989] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.351354][T16989] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.428634][T16989] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.609656][T16989] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.622799][T16989] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.644383][T17753] netlink: 'syz.0.3475': attribute type 10 has an invalid length. [ 625.713469][T17753] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 625.764948][T17758] netlink: 'syz.0.3475': attribute type 10 has an invalid length. [ 625.833934][T17758] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.841534][T17758] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.984709][T17758] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.992009][T17758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.999746][T17758] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.006982][T17758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.032371][T17758] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 626.088435][T16989] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.111473][T16989] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.415536][T16989] netdevsim netdevsim5 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.489929][T16989] netdevsim netdevsim5 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.608484][T16989] netdevsim netdevsim5 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.667485][T16989] netdevsim netdevsim5 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.412008][T17781] loop3: detected capacity change from 0 to 32768 [ 628.562189][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3489'. [ 629.541815][ T5841] logitech-hidpp-device 0003:046D:C082.000E: Device not connected [ 630.016740][ T28] audit: type=1326 audit(1787626088.781:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17863 comm="syz.6.3499" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x0 [ 630.032145][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88804c4f1000: rx timeout, send abort [ 630.050071][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88804c4f1000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 630.392981][T17873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3502'. [ 630.641183][T17873] 8021q: adding VLAN 0 to HW filter on device bond8 [ 631.044223][T16989] hsr_slave_0: left promiscuous mode [ 631.097455][T16989] hsr_slave_1: left promiscuous mode [ 631.166671][T16989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.194049][T16989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.217609][T16989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.249643][T16989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.268477][T16989] bridge_slave_1: left allmulticast mode [ 631.294504][T16989] bridge_slave_1: left promiscuous mode [ 631.314756][T16989] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.377542][T16989] bridge_slave_0: left allmulticast mode [ 631.401672][T16989] bridge_slave_0: left promiscuous mode [ 631.413425][T16989] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.537095][T16989] veth1_macvtap: left promiscuous mode [ 631.550067][T16989] veth0_macvtap: left promiscuous mode [ 631.564148][T16989] veth1_vlan: left promiscuous mode [ 631.569809][T16989] veth0_vlan: left promiscuous mode [ 632.146789][T17901] overlayfs: upper fs does not support file handles, falling back to index=off. [ 633.042682][T17916] overlayfs: failed to clone upperpath [ 633.723507][T17930] loop3: detected capacity change from 0 to 8192 [ 633.773601][T17930] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 634.278203][T16989] team0 (unregistering): Port device team_slave_1 removed [ 634.428000][T16989] team0 (unregistering): Port device team_slave_0 removed [ 634.532169][T16989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.612723][T16989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.280937][T16989] bond0 (unregistering): Released all slaves [ 635.331706][T17947] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 635.909024][T17971] netlink: 'syz.3.3531': attribute type 4 has an invalid length. [ 637.471259][T18003] overlayfs: failed to clone upperpath [ 638.953446][T18058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3554'. [ 639.367921][T18066] kvm: vcpu 0: requested 10 ns lapic timer period limited to 200000 ns [ 641.596176][ T28] audit: type=1326 audit(1787626100.361:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18132 comm="syz.1.3570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20419e0d9 code=0x7ffc0000 [ 641.686502][ T28] audit: type=1326 audit(1787626100.381:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18132 comm="syz.1.3570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20419e0d9 code=0x7ffc0000 [ 641.791064][ T28] audit: type=1326 audit(1787626100.381:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18132 comm="syz.1.3570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20419e0d9 code=0x7ffc0000 [ 641.851651][ T28] audit: type=1326 audit(1787626100.381:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18132 comm="syz.1.3570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20419e0d9 code=0x7ffc0000 [ 641.897156][ T28] audit: type=1326 audit(1787626100.391:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18132 comm="syz.1.3570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fe20419e0d9 code=0x7ffc0000 [ 641.960872][ T28] audit: type=1326 audit(1787626100.391:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18132 comm="syz.1.3570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20419e0d9 code=0x7ffc0000 [ 641.999734][ T28] audit: type=1326 audit(1787626100.391:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18132 comm="syz.1.3570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20419e0d9 code=0x7ffc0000 [ 642.042223][ T28] audit: type=1326 audit(1787626100.391:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18132 comm="syz.1.3570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20419e0d9 code=0x7ffc0000 [ 642.077339][ T28] audit: type=1326 audit(1787626100.401:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18132 comm="syz.1.3570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe20419e0d9 code=0x7ffc0000 [ 642.114462][ T28] audit: type=1326 audit(1787626100.401:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18132 comm="syz.1.3570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20419e0d9 code=0x7ffc0000 [ 642.454225][ T5780] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 643.300137][T18166] loop3: detected capacity change from 0 to 128 [ 643.390252][T18166] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 643.446376][T18166] ext4 filesystem being mounted at /230/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 643.826468][T14041] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 644.541399][T18203] loop3: detected capacity change from 0 to 1024 [ 645.137470][T18219] overlayfs: failed to clone upperpath [ 650.865867][T18344] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 651.593271][T18367] 9pnet_fd: Insufficient options for proto=fd [ 651.593339][T18364] loop3: detected capacity change from 0 to 1024 [ 651.623169][T18364] ext4: Unknown parameter 'smackfstransmute' [ 652.224461][T18382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3635'. [ 652.424225][T18333] Bluetooth: hci3: command 0x0406 tx timeout [ 653.850674][T18438] loop3: detected capacity change from 0 to 128 [ 653.940835][T18438] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 654.050995][T18438] ext4 filesystem being mounted at /247/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 654.330252][T14041] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 655.194414][T18472] netlink: 'syz.3.3660': attribute type 1 has an invalid length. [ 655.308831][T18472] 8021q: adding VLAN 0 to HW filter on device bond3 [ 655.343339][T18481] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 655.365616][ T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 655.955093][T18472] bond3 (unregistering): (slave gretap1): Removing an active aggregator [ 655.974537][T18472] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 655.997870][T18472] bond3 (unregistering): Released all slaves [ 656.632822][T18507] 9pnet_fd: Insufficient options for proto=fd [ 657.035233][T18523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3675'. [ 657.593445][T18517] loop3: detected capacity change from 0 to 32768 [ 657.621701][T18517] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.3673 (18517) [ 657.681387][T18517] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 657.695024][T18517] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 657.707324][T18517] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 657.718400][T18517] BTRFS info (device loop3): use zstd compression, level 3 [ 657.732094][T18517] BTRFS info (device loop3): using free space tree [ 657.908318][T18517] BTRFS info (device loop3): enabling ssd optimizations [ 657.957405][T18517] BTRFS info (device loop3): auto enabling async discard [ 658.421980][T14041] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 659.882496][T18590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3693'. [ 660.982784][T18626] netlink: 'syz.3.3702': attribute type 10 has an invalid length. [ 660.995449][T18628] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3703'. [ 661.011654][T18626] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 662.166715][T18650] serio: Serial port ttyS3 [ 663.925822][T18693] ip6erspan0: entered allmulticast mode [ 663.957194][T18696] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.3727'. [ 663.972073][T18696] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 665.017521][T18725] ip_tables: iptables: counters copy to user failed while replacing table [ 667.027535][T18768] loop3: detected capacity change from 0 to 32768 [ 667.066722][T18768] JBD2: Ignoring recovery information on journal [ 667.118355][T18768] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 667.392177][T18785] netlink: 'syz.6.3760': attribute type 1 has an invalid length. [ 667.674649][T18785] bond4: entered promiscuous mode [ 667.680090][T18785] 8021q: adding VLAN 0 to HW filter on device bond4 [ 667.787593][T18794] bond4: (slave bridge2): making interface the new active one [ 667.832705][T18794] bridge2: entered promiscuous mode [ 667.886484][T18794] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 668.037841][T14041] ocfs2: Unmounting device (7,3) on (node local) [ 669.488089][T18853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3775'. [ 669.502946][T18853] netlink: 'syz.6.3775': attribute type 6 has an invalid length. [ 669.534811][T18853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3775'. [ 669.578715][T18853] netlink: 'syz.6.3775': attribute type 6 has an invalid length. [ 670.149046][T18874] team0 (unregistering): Port device team_slave_0 removed [ 670.189281][T18874] team0 (unregistering): Port device team_slave_1 removed [ 670.624661][T18886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3783'. [ 670.763596][T18886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3783'. [ 671.593371][T18906] 8021q: adding VLAN 0 to HW filter on device bond2 [ 671.677926][T18911] gretap2: entered promiscuous mode [ 671.718465][T18911] bond2: (slave gretap2): making interface the new active one [ 671.835460][T18911] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 672.159582][T18929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3796'. [ 672.615742][T18948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3801'. [ 672.811242][T18951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3801'. [ 672.874271][T18954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3801'. [ 675.292322][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 675.292339][ T28] audit: type=1326 audit(1787626134.051:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19024 comm="syz.1.3817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe20419e0d9 code=0x0 [ 675.452437][T19031] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.3818'. [ 675.482354][T19031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3818'. [ 676.643567][T19063] IPVS: Scheduler module ip_vs_sip not found [ 677.176370][T19052] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.185731][T19052] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.195516][T19052] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.205124][T19052] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.275778][T19052] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 677.285296][T19052] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 677.295392][T19052] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 677.305139][T19052] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 678.025012][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 678.761315][T19090] loop3: detected capacity change from 0 to 40427 [ 678.819300][T19090] F2FS-fs (loop3): invalid crc value [ 678.838533][T19090] F2FS-fs (loop3): Found nat_bits in checkpoint [ 678.999427][T19090] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 679.316846][T19119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3840'. [ 679.425237][T19119] bond2: (slave syz_tun): Removing an active aggregator [ 679.474522][T19119] bond2: (slave syz_tun): Releasing backup interface [ 679.528927][T14041] syz-executor: attempt to access beyond end of device [ 679.528927][T14041] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 679.557692][T14041] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 680.792383][T19144] gretap3: entered promiscuous mode [ 681.071605][T19147] bond0: (slave bridge0): Releasing backup interface [ 681.083647][T19147] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.091186][T19147] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.164690][T19147] bridge_slave_0: left allmulticast mode [ 681.170420][T19147] bridge_slave_0: left promiscuous mode [ 681.185538][T19147] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.203173][T19147] bridge_slave_1: left allmulticast mode [ 681.234985][T19147] bridge_slave_1: left promiscuous mode [ 681.247745][T19147] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.273509][T19147] bond0: (slave bond_slave_0): Releasing backup interface [ 681.316157][T19147] bond0: (slave bond_slave_1): Releasing backup interface [ 681.351826][T19147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.371769][T19147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.401036][T19147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.415927][T19147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.490874][T19147] bond0: (slave wlan1): Releasing backup interface [ 681.548943][T19147] bond2: (slave gretap2): Releasing active interface [ 681.588920][T19149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3852'. [ 681.655200][T19150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3851'. [ 682.060391][T19169] 8021q: adding VLAN 0 to HW filter on device bond3 [ 682.117078][T19173] gretap2: entered promiscuous mode [ 682.152574][T19173] bond3: (slave gretap2): making interface the new active one [ 682.216214][T19173] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 683.394296][T19213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3873'. [ 683.845195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1ca!!! [ 684.069579][T19222] netlink: 'syz.1.3876': attribute type 1 has an invalid length. [ 684.270651][T19222] bond9: entered promiscuous mode [ 684.297223][T19222] 8021q: adding VLAN 0 to HW filter on device bond9 [ 684.371606][T19231] 8021q: adding VLAN 0 to HW filter on device bond9 [ 684.404370][T19231] bond9: (slave xfrm1): The slave device specified does not support setting the MAC address [ 684.444154][T19231] bond9: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 684.507519][T19231] bond9: (slave xfrm1): making interface the new active one [ 684.543562][T19231] xfrm1: entered promiscuous mode [ 684.578000][T19231] xfrm1: left promiscuous mode [ 685.415822][T19254] loop3: detected capacity change from 0 to 4096 [ 686.194699][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.201562][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.937684][T19292] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3901'. [ 688.108290][T19301] gretap2: entered promiscuous mode [ 688.914606][T19322] overlayfs: failed to clone lowerpath [ 688.952762][T19322] overlayfs: failed to clone lowerpath [ 690.117807][ T28] audit: type=1326 audit(1787626148.881:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19342 comm="syz.6.3921" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 690.209621][ T28] audit: type=1326 audit(1787626148.881:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19342 comm="syz.6.3921" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 690.278644][ T28] audit: type=1326 audit(1787626148.911:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19342 comm="syz.6.3921" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa99699cf47 code=0x7ffc0000 [ 690.341830][T19347] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 690.356207][ T28] audit: type=1326 audit(1787626148.911:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19342 comm="syz.6.3921" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 690.363757][T19347] batman_adv: batadv0: Adding interface: gretap4 [ 690.395832][T19347] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.427874][T19347] batman_adv: batadv0: Interface activated: gretap4 [ 690.474297][ T28] audit: type=1326 audit(1787626148.911:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19342 comm="syz.6.3921" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 690.595072][ T28] audit: type=1326 audit(1787626148.921:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19342 comm="syz.6.3921" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 690.649745][ T28] audit: type=1326 audit(1787626148.921:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19342 comm="syz.6.3921" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 690.733992][ T28] audit: type=1326 audit(1787626148.921:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19342 comm="syz.6.3921" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 690.853746][ T28] audit: type=1326 audit(1787626148.921:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19342 comm="syz.6.3921" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 690.932660][ T28] audit: type=1326 audit(1787626148.921:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19342 comm="syz.6.3921" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fa99699e0d9 code=0x7ffc0000 [ 693.951993][T19392] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3938'. [ 694.165944][T19398] tipc: Started in network mode [ 694.173273][T19398] tipc: Node identity 2d40334623b70443002e, cluster identity 4711 [ 694.641706][T19415] sctp: [Deprecated]: syz.6.3947 (pid 19415) Use of struct sctp_assoc_value in delayed_ack socket option. [ 694.641706][T19415] Use struct sctp_sack_info instead [ 694.742149][T19417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3949'. [ 695.692406][T19452] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3964'. [ 695.702172][T19452] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3964'. [ 696.511976][T19468] bond0: (slave bridge0): Releasing backup interface [ 696.552355][T19468] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.560019][T19468] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.666428][T19468] bridge_slave_0: left allmulticast mode [ 696.684500][T19468] bridge_slave_0: left promiscuous mode [ 696.725725][T19468] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.778364][T19468] bridge_slave_1: left allmulticast mode [ 696.790707][T19468] bridge_slave_1: left promiscuous mode [ 696.797038][T19468] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.820897][T19468] bond0: (slave bond_slave_0): Releasing backup interface [ 696.858513][T19468] bond0: (slave bond_slave_1): Releasing backup interface [ 696.906931][T19479] loop3: detected capacity change from 0 to 64 [ 696.934786][T19468] team0: Port device team_slave_0 removed [ 697.009907][T19468] team0: Port device team_slave_1 removed [ 697.023308][T19468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.031674][T19468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.091473][T19468] bond0: (slave wlan1): Releasing backup interface [ 697.187509][T19468] bond1: (slave gretap1): Releasing active interface [ 697.236182][T19468] bond2: (slave ip6gre1): Releasing backup interface [ 697.253183][T19468] ip6gre1: left promiscuous mode [ 697.359102][T19468] bond4: (slave bridge2): Releasing backup interface [ 697.405119][T19468] bridge2: left promiscuous mode [ 697.580137][T19473] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3970'. [ 697.623792][T19488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3974'. [ 698.166493][T19498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3978'. [ 698.669410][T19508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3982'. [ 698.865341][T19511] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3982'. [ 702.879256][T19586] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 702.907086][T19586] batman_adv: batadv0: Adding interface: gretap3 [ 702.913579][T19586] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.954996][T19586] batman_adv: batadv0: Interface activated: gretap3 [ 703.375823][T19593] loop3: detected capacity change from 0 to 512 [ 703.415470][T19593] EXT4-fs: Ignoring removed bh option [ 703.489525][T19593] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 703.564689][T19593] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 703.600245][T19593] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.4014: Corrupt directory, running e2fsck is recommended [ 703.655274][T19593] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 703.663658][T19593] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.4014: corrupted in-inode xattr: e_name out of bounds [ 703.717862][T19593] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.4014: couldn't read orphan inode 15 (err -117) [ 703.771296][T19593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.872574][T19593] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 703.913073][T19593] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 703.946130][T19593] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.4014: Corrupt directory, running e2fsck is recommended [ 704.034497][T19602] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 704.092839][T19602] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 704.151481][T19602] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.4014: Corrupt directory, running e2fsck is recommended [ 704.177309][T19605] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 704.211972][T19605] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 704.227349][T19605] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.4014: Corrupt directory, running e2fsck is recommended [ 704.266128][T19593] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 704.515577][T14041] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.806912][T19634] loop3: detected capacity change from 0 to 1024 [ 705.829180][T19634] hfsplus: unable to parse mount options [ 706.274259][T19641] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4029'. [ 706.419684][T19641] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4029'. [ 706.645922][T19655] netlink: 'syz.6.4035': attribute type 1 has an invalid length. [ 706.749613][T19655] 8021q: adding VLAN 0 to HW filter on device bond5 [ 706.872177][T19657] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 707.071319][T19664] loop3: detected capacity change from 0 to 2048 [ 707.122298][T17009] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.127026][T19664] loop3: p1 < > p4 [ 707.163403][T19664] loop3: p4 size 8388608 extends beyond EOD, truncated [ 707.167843][T19655] dummy0: left promiscuous mode [ 707.200390][T19655] bond5: (slave dummy0): Enslaving as a backup interface with an up link [ 707.239133][ T3487] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 707.256130][T19662] netlink: 'syz.6.4035': attribute type 10 has an invalid length. [ 707.289121][T19664] EXT4-fs (loop3p1): unable to read superblock [ 707.308009][T19662] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4035'. [ 707.333304][T19662] dummy0: entered promiscuous mode [ 707.371911][T19662] bond5: (slave dummy0): Removing an active aggregator [ 707.382907][T19662] bond5: (slave dummy0): Releasing backup interface [ 707.512426][T17780] udevd[17780]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 707.665832][T17009] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.840418][T17009] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.999283][T17009] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.343720][T17009] netdevsim netdevsim8 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.429134][T17009] netdevsim netdevsim8 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.507390][T17009] netdevsim netdevsim8 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.582401][T17009] netdevsim netdevsim8 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.084245][T17009] bond1: (slave ip6gre1): Releasing backup interface [ 709.091038][T17009] ip6gre1 (unregistering): left promiscuous mode [ 709.109525][T17009] bond1: Destroying bond [ 709.775062][T17009] bond1 (unregistering): Released all slaves [ 710.186448][T19069] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 710.378680][T19069] usb 4-1: Using ep0 maxpacket: 32 [ 710.386688][T19069] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 710.396437][T19069] usb 4-1: config 0 has no interface number 0 [ 710.420087][T19069] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 710.450930][T19069] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.469634][T19069] usb 4-1: Product: syz [ 710.479219][T19069] usb 4-1: Manufacturer: syz [ 710.503952][T19069] usb 4-1: SerialNumber: syz [ 710.519032][T19069] usb 4-1: config 0 descriptor?? [ 710.537452][T19069] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 710.772821][T19069] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 710.813298][T19069] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 711.275665][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 711.275974][ T9091] usb 4-1: USB disconnect, device number 32 [ 711.335941][ T9091] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 711.403127][ T9091] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 711.445253][ T9091] quatech2 4-1:0.51: device disconnected [ 711.508426][T19759] ip6gretap0: left allmulticast mode [ 711.522984][T19759] ip6gretap0: left promiscuous mode [ 711.542289][T19759] bridge0: port 2(ip6gretap0) entered disabled state [ 711.571984][T19759] bond0: (slave bridge0): Releasing backup interface [ 711.588499][T19759] bond0: (slave team0): Releasing backup interface [ 711.600487][T19759] bond0: (slave team0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 711.643744][T19759] bond6: (slave dummy0): Releasing backup interface [ 711.674976][T19759] batadv0: left allmulticast mode [ 711.694264][T19759] batadv0: left promiscuous mode [ 711.723190][T19759] bridge0: port 3(batadv0) entered disabled state [ 711.744531][T19759] vlan0: left promiscuous mode [ 711.751810][T19759] bridge_slave_0: left promiscuous mode [ 711.785038][T19759] bond0: (slave wlan1): Releasing backup interface [ 711.810512][T19759] bond1: (slave geneve2): Releasing active interface [ 711.842344][T19759] bond3: (slave gretap1): Releasing active interface [ 711.873482][T19759] bond4: (slave ip6gre1): Releasing backup interface [ 711.901928][T19759] ip6gre1: left promiscuous mode [ 711.916132][T19759] bridge0: port 1(vlan0) entered disabled state [ 711.938915][T19759] bond5: (slave ip6erspan0): Releasing active interface [ 711.967206][T19764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4067'. [ 712.348784][T19784] loop4: detected capacity change from 0 to 7 [ 712.437032][T19784] loop4: [ 712.454616][T19784] loop4: partition table partially beyond EOD, truncated [ 713.253133][T17009] hsr_slave_0: left promiscuous mode [ 713.259721][T17009] hsr_slave_1: left promiscuous mode [ 713.286366][T17009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.314325][T17009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.343128][T17009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.364631][T17009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.395394][T17009] bridge_slave_1: left allmulticast mode [ 713.401111][T17009] bridge_slave_1: left promiscuous mode [ 713.425392][T17009] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.476594][T17009] bridge_slave_0: left allmulticast mode [ 713.482317][T17009] bridge_slave_0: left promiscuous mode [ 713.515802][T17009] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.679224][T17009] veth1_macvtap: left promiscuous mode [ 713.692411][T17009] veth0_macvtap: left promiscuous mode [ 713.707461][T17009] veth1_vlan: left promiscuous mode [ 713.719525][T17009] veth0_vlan: left promiscuous mode [ 714.015682][T19809] loop3: detected capacity change from 0 to 32768 [ 714.050922][T19809] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.4078 (19809) [ 714.168287][T19809] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 714.248706][T19809] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 714.278915][T19809] BTRFS info (device loop3): using free space tree [ 714.418263][T19809] BTRFS info (device loop3): enabling ssd optimizations [ 714.425860][T19809] BTRFS info (device loop3): auto enabling async discard [ 715.446865][T19845] BTRFS info (device loop3): balance: start -d -m [ 715.512094][T19845] BTRFS info (device loop3): relocating block group 8519680 flags data|metadata [ 716.060837][T19845] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 716.711394][T17009] team0 (unregistering): Port device team_slave_1 removed [ 716.729545][T19845] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata [ 716.823775][T17009] team0 (unregistering): Port device team_slave_0 removed [ 716.865169][T19845] BTRFS info (device loop3): 1 enospc errors during balance [ 716.892357][T19845] BTRFS info (device loop3): balance: canceled [ 716.926884][T17009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.032642][T17009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.197606][T14041] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 718.051919][T17009] bond0 (unregistering): Released all slaves [ 718.207361][T19861] loop3: detected capacity change from 0 to 32768 [ 718.231890][T19861] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.4086 (19861) [ 718.258843][T19861] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 718.276501][T19861] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 718.313694][T19861] BTRFS info (device loop3): setting nodatacow, compression disabled [ 718.375321][T19861] BTRFS info (device loop3): force clearing of disk cache [ 718.382546][T19861] BTRFS info (device loop3): use no compression [ 718.418339][T19861] BTRFS info (device loop3): disabling free space tree [ 718.433958][T19861] BTRFS info (device loop3): enabling ssd optimizations [ 718.489231][T19861] BTRFS info (device loop3): using spread ssd allocation scheme [ 718.535591][T19861] BTRFS info (device loop3): turning on flush-on-commit [ 718.773550][T19861] BTRFS info (device loop3): rebuilding free space tree [ 719.145978][T17009] IPVS: stop unused estimator thread 0... [ 719.232024][T19861] BTRFS info (device loop3): disabling free space tree [ 719.261475][T19861] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 719.290781][T19861] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 719.390512][T19861] BTRFS info (device loop3): checking UUID tree [ 719.587401][T19861] loop3: detected capacity change from 32768 to 0 [ 719.609254][T19899] syz.3.4086: attempt to access beyond end of device [ 719.609254][T19899] loop3: rw=2049, sector=10512, nr_sectors = 8 limit=0 [ 719.661291][T19899] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 719.717924][T19899] syz.3.4086: attempt to access beyond end of device [ 719.717924][T19899] loop3: rw=2049, sector=10240, nr_sectors = 8 limit=0 [ 719.779633][T19899] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 720.058424][T16997] kworker/u4:30: attempt to access beyond end of device [ 720.058424][T16997] loop3: rw=67112961, sector=10496, nr_sectors = 8 limit=0 [ 720.087939][T16997] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 720.157854][T14041] BTRFS error (device loop3: state A): Transaction aborted (error -5) [ 720.185525][T19911] CIFS: Attempting to mount //127.0.0.1/share [ 720.206392][T14041] BTRFS: error (device loop3: state A) in __btrfs_run_delayed_items:1161: errno=-5 IO failure [ 720.236143][T14041] BTRFS info (device loop3: state EA): forced readonly [ 720.246811][T14041] BTRFS warning (device loop3: state EA): Skipping commit of aborted transaction. [ 720.258531][T14041] BTRFS: error (device loop3: state EA) in cleanup_transaction:2022: errno=-5 IO failure [ 720.278144][T14041] BTRFS info (device loop3: state EA): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 720.941599][T19911] CIFS: VFS: Error connecting to socket. Aborting operation. [ 720.959249][T19911] CIFS: VFS: cifs_mount failed w/return code = -4 [ 721.070356][T19932] lo: entered allmulticast mode [ 721.108717][T19932] lo: left allmulticast mode [ 721.392081][T19945] CIFS: Attempting to mount //127.0.0.1/share [ 721.422603][T19940] VFS: Mount too revealing [ 722.185017][T19945] CIFS: VFS: Error connecting to socket. Aborting operation. [ 722.221703][T19945] CIFS: VFS: cifs_mount failed w/return code = -4 [ 724.229319][T20014] syz_tun: entered allmulticast mode [ 724.267642][T20013] syz_tun: left allmulticast mode [ 725.119352][T20016] loop3: detected capacity change from 0 to 32768 [ 725.146262][T20016] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.4122 (20016) [ 725.211751][T20016] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 725.236240][T20016] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 725.259342][T20016] BTRFS info (device loop3): setting nodatasum [ 725.284038][T20016] BTRFS info (device loop3): disabling tree log [ 725.290424][T20016] BTRFS info (device loop3): max_inline at 0 [ 725.314118][T20016] BTRFS info (device loop3): using free space tree [ 725.465451][T20016] BTRFS info (device loop3): enabling ssd optimizations [ 725.490409][T20016] BTRFS info (device loop3): auto enabling async discard [ 725.752322][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 725.752339][ T28] audit: type=1804 audit(1787626184.511:1195): pid=20016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4122" name="/newroot/369/file1/bus" dev="loop3" ino=263 res=1 errno=0 [ 726.176829][T14041] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 726.474822][T20094] overlayfs: failed to clone lowerpath [ 728.075829][T20131] loop3: detected capacity change from 0 to 256 [ 728.142325][T20131] FAT-fs (loop3): Directory bread(block 64) failed [ 728.174342][T20131] FAT-fs (loop3): Directory bread(block 65) failed [ 728.197771][T20131] FAT-fs (loop3): Directory bread(block 66) failed [ 728.219085][T20131] FAT-fs (loop3): Directory bread(block 67) failed [ 728.241065][T20131] FAT-fs (loop3): Directory bread(block 68) failed [ 728.261762][T20131] FAT-fs (loop3): Directory bread(block 69) failed [ 728.281801][T20131] FAT-fs (loop3): Directory bread(block 70) failed [ 728.314032][T20131] FAT-fs (loop3): Directory bread(block 71) failed [ 728.329758][T20131] FAT-fs (loop3): Directory bread(block 72) failed [ 728.342251][T20131] FAT-fs (loop3): Directory bread(block 73) failed [ 729.806228][T20169] overlayfs: failed to clone upperpath [ 729.851900][ T28] audit: type=1326 audit(1787626188.611:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20168 comm="syz.6.4156" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa99699e0d9 code=0x0 [ 732.780207][T20217] dvmrp6: entered allmulticast mode [ 733.305315][T20226] bond2: entered allmulticast mode [ 733.356571][T20225] bond2: left allmulticast mode [ 734.317126][ T5780] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 735.715546][T20290] netlink: 15143 bytes leftover after parsing attributes in process `syz.6.4191'. [ 736.385823][T20307] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 736.933355][T20316] netlink: 'syz.6.4203': attribute type 10 has an invalid length. [ 736.998333][T20316] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.042701][T20316] bond0: (slave team0): Enslaving as an active interface with an up link [ 737.061314][T20320] bond2: option mode: unable to set because the bond device is up [ 737.070149][T20310] loop3: detected capacity change from 0 to 32768 [ 737.129537][T20310] JBD2: Ignoring recovery information on journal [ 737.148890][T20321] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 737.198159][T20321] bond2: (slave macvlan2): Enslaving as an active interface with a down link [ 737.260579][T20326] bond0: (slave team0): Releasing backup interface [ 737.289669][T20310] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 737.430286][T20326] batman_adv: batadv0: Interface deactivated: gretap3 [ 737.483384][T20326] batman_adv: batadv0: Removing interface: gretap3 [ 737.513250][T20310] [ 737.515652][T20310] ====================================================== [ 737.522704][T20310] WARNING: possible circular locking dependency detected [ 737.529849][T20310] syzkaller #0 Not tainted [ 737.534300][T20310] ------------------------------------------------------ [ 737.541541][T20310] syz.3.4199/20310 is trying to acquire lock: [ 737.547824][T20310] ffff888045821538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x30a/0x770 [ 737.557622][T20310] [ 737.557622][T20310] but task is already holding lock: [ 737.565205][T20310] ffff88805cf9cce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 737.575781][T20310] [ 737.575781][T20310] which lock already depends on the new lock. [ 737.575781][T20310] [ 737.586310][T20310] [ 737.586310][T20310] the existing dependency chain (in reverse order) is: [ 737.595331][T20310] [ 737.595331][T20310] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 737.603863][T20310] down_read+0x46/0x2e0 [ 737.608709][T20310] ocfs2_start_trans+0x3a8/0x6f0 [ 737.614226][T20310] ocfs2_mknod+0xf33/0x2310 [ 737.619256][T20310] ocfs2_create+0x196/0x430 [ 737.624297][T20310] path_openat+0x1705/0x3270 [ 737.629452][T20310] do_filp_open+0x1f2/0x430 [ 737.634523][T20310] do_sys_openat2+0x134/0x1d0 [ 737.639842][T20310] __x64_sys_openat+0x139/0x160 [ 737.645227][T20310] do_syscall_64+0x55/0xb0 [ 737.650231][T20310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 737.656751][T20310] [ 737.656751][T20310] -> #2 (sb_internal#6){.+.+}-{0:0}: [ 737.664340][T20310] lock_release+0x332/0x8c0 [ 737.669435][T20310] up_write+0x2d/0x410 [ 737.674039][T20310] ocfs2_free_alloc_context+0x97/0x1a0 [ 737.680031][T20310] ocfs2_write_begin_nolock+0x43f6/0x4480 [ 737.686283][T20310] ocfs2_write_begin+0x1bb/0x310 [ 737.691757][T20310] generic_perform_write+0x2fe/0x5c0 [ 737.697601][T20310] ocfs2_file_write_iter+0x1724/0x1ef0 [ 737.703591][T20310] vfs_write+0x474/0x9a0 [ 737.708368][T20310] ksys_write+0x151/0x260 [ 737.713412][T20310] do_syscall_64+0x55/0xb0 [ 737.718364][T20310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 737.724789][T20310] [ 737.724789][T20310] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 737.733577][T20310] down_write+0x97/0x200 [ 737.738350][T20310] ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 737.744860][T20310] ocfs2_truncate_file+0xe87/0x1530 [ 737.750598][T20310] ocfs2_setattr+0x15b8/0x1bf0 [ 737.755890][T20310] notify_change+0xb05/0xde0 [ 737.761088][T20310] do_truncate+0x1b0/0x240 [ 737.766069][T20310] path_openat+0x2a7e/0x3270 [ 737.771366][T20310] do_filp_open+0x1f2/0x430 [ 737.776399][T20310] do_sys_openat2+0x134/0x1d0 [ 737.781609][T20310] __x64_sys_open+0x11f/0x140 [ 737.786908][T20310] do_syscall_64+0x55/0xb0 [ 737.791868][T20310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 737.798494][T20310] [ 737.798494][T20310] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 737.806348][T20310] __lock_acquire+0x37ef/0x7d80 [ 737.811744][T20310] lock_acquire+0x19e/0x420 [ 737.816781][T20310] down_read+0x46/0x2e0 [ 737.821568][T20310] ocfs2_init_acl+0x30a/0x770 [ 737.826777][T20310] ocfs2_mknod+0x1427/0x2310 [ 737.831973][T20310] ocfs2_create+0x196/0x430 [ 737.837002][T20310] path_openat+0x1705/0x3270 [ 737.842124][T20310] do_filp_open+0x1f2/0x430 [ 737.847248][T20310] do_sys_openat2+0x134/0x1d0 [ 737.852462][T20310] __x64_sys_openat+0x139/0x160 [ 737.857845][T20310] do_syscall_64+0x55/0xb0 [ 737.862796][T20310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 737.869219][T20310] [ 737.869219][T20310] other info that might help us debug this: [ 737.869219][T20310] [ 737.879458][T20310] Chain exists of: [ 737.879458][T20310] &oi->ip_xattr_sem --> sb_internal#6 --> &journal->j_trans_barrier [ 737.879458][T20310] [ 737.893478][T20310] Possible unsafe locking scenario: [ 737.893478][T20310] [ 737.901021][T20310] CPU0 CPU1 [ 737.906415][T20310] ---- ---- [ 737.911784][T20310] rlock(&journal->j_trans_barrier); [ 737.917163][T20310] lock(sb_internal#6); [ 737.923938][T20310] lock(&journal->j_trans_barrier); [ 737.931747][T20310] rlock(&oi->ip_xattr_sem); [ 737.936463][T20310] [ 737.936463][T20310] *** DEADLOCK *** [ 737.936463][T20310] [ 737.944783][T20310] 8 locks held by syz.3.4199/20310: [ 737.950155][T20310] #0: ffff88801f754418 (sb_writers#43){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 737.959420][T20310] #1: ffff888045821818 (&type->i_mutex_dir_key#26){+.+.}-{3:3}, at: path_openat+0x7f4/0x3270 [ 737.969705][T20310] #2: ffff88804582ed98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 737.983467][T20310] #3: ffff888045825f58 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 737.997141][T20310] #4: ffff888045829818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x120/0x2620 [ 738.011246][T20310] #5: ffff88801f754608 (sb_internal#6){.+.+}-{0:0}, at: ocfs2_mknod+0xf33/0x2310 [ 738.020489][T20310] #6: ffff88805cf9cce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 738.031205][T20310] #7: ffff8880576c8990 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 738.041092][T20310] [ 738.041092][T20310] stack backtrace: [ 738.046983][T20310] CPU: 1 PID: 20310 Comm: syz.3.4199 Not tainted syzkaller #0 [ 738.054448][T20310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 738.064595][T20310] Call Trace: [ 738.067931][T20310] [ 738.070911][T20310] dump_stack_lvl+0x18c/0x250 [ 738.075648][T20310] ? load_image+0x420/0x420 [ 738.080194][T20310] ? show_regs_print_info+0x20/0x20 [ 738.085414][T20310] ? print_circular_bug+0x12b/0x1a0 [ 738.090628][T20310] check_noncircular+0x2fc/0x400 [ 738.095669][T20310] ? print_deadlock_bug+0x5d0/0x5d0 [ 738.100885][T20310] ? _find_first_zero_bit+0xd6/0x100 [ 738.106399][T20310] ? add_lock_to_list+0x191/0x280 [ 738.111439][T20310] __lock_acquire+0x37ef/0x7d80 [ 738.116308][T20310] ? ocfs2_lock_res_init_common+0x32a/0x450 [ 738.122236][T20310] ? verify_lock_unused+0x140/0x140 [ 738.127448][T20310] ? __lock_acquire+0x7d80/0x7d80 [ 738.132490][T20310] ? do_raw_spin_lock+0x11f/0x2b0 [ 738.137533][T20310] lock_acquire+0x19e/0x420 [ 738.142056][T20310] ? ocfs2_init_acl+0x30a/0x770 [ 738.146940][T20310] ? __might_sleep+0xe0/0xe0 [ 738.151672][T20310] ? read_lock_is_recursive+0x20/0x20 [ 738.157052][T20310] ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0 [ 738.163657][T20310] ? mark_lock+0x94/0x320 [ 738.167996][T20310] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 738.174512][T20310] down_read+0x46/0x2e0 [ 738.178681][T20310] ? ocfs2_init_acl+0x30a/0x770 [ 738.183544][T20310] ocfs2_init_acl+0x30a/0x770 [ 738.188231][T20310] ? ocfs2_mknod_locked+0x159/0x290 [ 738.193443][T20310] ? ocfs2_acl_chmod+0x340/0x340 [ 738.198390][T20310] ? dquot_alloc_inode+0x211/0xa40 [ 738.203535][T20310] ? ocfs2_block_signals+0x9b/0xe0 [ 738.208664][T20310] ? ocfs2_free_mem_caches+0x50/0x50 [ 738.213982][T20310] ? ocfs2_init_security_get+0x139/0x1a0 [ 738.219625][T20310] ocfs2_mknod+0x1427/0x2310 [ 738.224228][T20310] ? ocfs2_mkdir+0x430/0x430 [ 738.228828][T20310] ? __lock_acquire+0x7d80/0x7d80 [ 738.233879][T20310] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 738.239829][T20310] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 738.245734][T20310] ? _raw_spin_unlock+0x40/0x40 [ 738.250598][T20310] ? ocfs2_inode_unlock+0xa5/0x140 [ 738.255724][T20310] ? __lock_acquire+0x7d80/0x7d80 [ 738.260764][T20310] ? __rwlock_init+0x150/0x150 [ 738.265543][T20310] ? do_raw_spin_unlock+0x121/0x230 [ 738.270771][T20310] ? rcu_is_watching+0x15/0xb0 [ 738.275550][T20310] ? ocfs2_lookup+0x4ac/0x960 [ 738.280241][T20310] ocfs2_create+0x196/0x430 [ 738.284748][T20310] ? ocfs2_update_inode_fsync_trans+0x230/0x230 [ 738.290997][T20310] ? ocfs2_lookup+0x960/0x960 [ 738.295702][T20310] ? HAS_UNMAPPED_ID+0x101/0x170 [ 738.300677][T20310] ? inode_permission+0xf3/0x480 [ 738.305645][T20310] ? bpf_lsm_inode_create+0x9/0x10 [ 738.310803][T20310] ? security_inode_create+0xb7/0x100 [ 738.316204][T20310] ? ocfs2_lookup+0x960/0x960 [ 738.320891][T20310] path_openat+0x1705/0x3270 [ 738.325512][T20310] ? do_filp_open+0x430/0x430 [ 738.330205][T20310] do_filp_open+0x1f2/0x430 [ 738.334716][T20310] ? vfs_tmpfile+0x620/0x620 [ 738.339329][T20310] ? _raw_spin_unlock+0x28/0x40 [ 738.344193][T20310] ? alloc_fd+0x590/0x640 [ 738.348536][T20310] do_sys_openat2+0x134/0x1d0 [ 738.353231][T20310] ? do_sys_open+0xe0/0xe0 [ 738.357784][T20310] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 738.363776][T20310] ? lock_chain_count+0x20/0x20 [ 738.368644][T20310] __x64_sys_openat+0x139/0x160 [ 738.373522][T20310] do_syscall_64+0x55/0xb0 [ 738.378046][T20310] ? clear_bhb_loop+0x40/0x90 [ 738.382831][T20310] ? clear_bhb_loop+0x40/0x90 [ 738.387519][T20310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 738.393513][T20310] RIP: 0033:0x7f4608b9e0d9 [ 738.398035][T20310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.418045][T20310] RSP: 002b:00007f46099b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 738.426597][T20310] RAX: ffffffffffffffda RBX: 00007f4608e25fa0 RCX: 00007f4608b9e0d9 [ 738.434763][T20310] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 738.442739][T20310] RBP: 00007f4608c35024 R08: 0000000000000000 R09: 0000000000000000 [ 738.450727][T20310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.458702][T20310] R13: 00007f4608e26038 R14: 00007f4608e25fa0 R15: 00007ffdab541508 [ 738.466715][T20310] [ 738.474218][T18333] Bluetooth: hci0: command 0x0406 tx timeout [ 738.562250][T20326] bond5: (slave veth7): Releasing backup interface [ 738.579459][T20327] team0: Mode changed to "roundrobin" [ 738.596798][T14041] ocfs2: Unmounting device (7,3) on (node local)