last executing test programs: 30m23.271363696s ago: executing program 32 (id=166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}], 0x1) 30m13.822281954s ago: executing program 33 (id=182): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x2, 0x4000, 0x1000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x1, 0x8, 0x9, 0x9, 0x9, 0xf9, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25b1, 0x5, 0xfff, 0x0, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0xffffffff, 0xa80, 0x0, 0x7, 0x2, 0xffff8000, 0xff, 0x8, 0x7, 0xc, 0xfdc1, 0x77f, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x1000, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x5, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0xd, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0x0, 0x3, 0x5, 0x9, 0x5, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x4, 0x0, 0x7ff, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0x4, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 29m57.626951196s ago: executing program 34 (id=201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet(0x2, 0x2, 0x1) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b0732306c090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb000000002f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d6ced5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed700129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb21fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 25m23.549781762s ago: executing program 35 (id=817): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000240), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x800]}, 0x8, 0x80800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000240)="0086f96c8306f3a0136ec17b4d", &(0x7f0000000300)=@tcp=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 25m13.550311363s ago: executing program 36 (id=828): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "22270e", 0x38, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, [], "8029335287b7a081"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) 25m7.224836985s ago: executing program 37 (id=830): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="53a7cc597b4e75d13f43db3499a137dcccd53e36b8391f1fe59d6bb27b358d3d69484abd84f494dc6da7db67c615189d25c2ac4a8f4b0a70f8a417bcedf30cccbf1108daaa476d12", @ANYRES32=r2, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e8005000100fd0000000600050001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = shmget(0x2, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)={0x30, 0x2c, 0x15, 0x70bd2b, 0x25dfdbff, "", [@nested={0x20, 0xc0, 0x0, 0x1, [@nested={0x4, 0xe2}, @nested={0x4, 0xe4}, @typed={0x8, 0x143, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x76}, @typed={0x8, 0xa8, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, 0x30}, {&(0x7f00000000c0)={0x1c, 0x1e, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@generic="47486c48c8703d2988"]}, 0x1c}], 0x2, 0x0, 0x0, 0x810}, 0x44800) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xfffffbff, 0xfffbfffd, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc58ac4fb559ff17e}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5bce9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 24m40.973205018s ago: executing program 38 (id=851): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_newvlan={0x24, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x44800) 24m32.57918328s ago: executing program 39 (id=869): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/keycreate\x00') socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a00000000000000060000007111030000000000850000001900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21m59.667186542s ago: executing program 40 (id=1151): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 21m59.138551152s ago: executing program 41 (id=1155): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='lp', 0x1d) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x3d, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x11}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00070f2dbd70000300000007000000", @ANYRES32=r3, @ANYBLOB="808b"], 0x1c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0xf}, {0xe, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x7, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 21m58.749905133s ago: executing program 42 (id=1154): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x19, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000010000000000000001000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000007008500000082000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 21m46.109631183s ago: executing program 43 (id=1174): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$cgroup_int(r0, 0x0, 0x0) 20m6.173258494s ago: executing program 44 (id=1248): syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000001c0)={@void, @void, @eth={@multicast, @empty, @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x12, 0x24, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6e, 0x100, @val=0x80}}}}}}}}, 0x36) 19m7.019646322s ago: executing program 45 (id=1262): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711228000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)={@cgroup=r0, r0, 0x2f, 0x4, 0x4, @void, @value=r0}, 0x20) 17m38.645207739s ago: executing program 46 (id=1374): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x12, &(0x7f00000004c0)=0x7, 0x4) 14m4.282412507s ago: executing program 47 (id=1811): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) io_setup(0xb, &(0x7f00000003c0)=0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r0, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000340)='p', 0x300}]) 11m32.12606113s ago: executing program 1 (id=2218): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file2\x00', 0x8, &(0x7f0000000000)=ANY=[], 0x1, 0x1ce, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) preadv2(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0xfffffffc, 0x1) 11m31.413370179s ago: executing program 1 (id=2221): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0x90000001}) epoll_pwait2(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) 11m29.843290506s ago: executing program 1 (id=2227): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) read$FUSE(r2, &(0x7f0000002980)={0x2020}, 0xffffff36) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xc, 0x204031, 0xffffffffffffffff, 0xafe09000) 11m28.413386223s ago: executing program 1 (id=2234): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f00000003c0)={[{@delalloc}, {@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nodioread_nolock}, {@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@noinit_itable}, {@nouid32}, {@nobh}, {@noauto_da_alloc}, {@nouid32}, {@dioread_lock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, 0x0, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)=0xd2, 0x8000, 0x0) r4 = open(0x0, 0x4a07e, 0xdc) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000002c0), &(0x7f0000000500)=0x4) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x98) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x2000000, 0x26, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b98653dfa0b44f96d8b63672ec3e26e6de189501e27e7d057b12", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_matches\x00') syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2}, @l2cap_cid_le_signaling={{}, @l2cap_ecred_conn_req={{}, {0x0, 0x10, 0x4, 0x5, [0x5]}}}}, 0xa) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, 0xffffffffffffffff, 0x0) sendmmsg$alg(r7, 0x0, 0x5, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x17, 0x0, 0x0) 11m25.76386474s ago: executing program 1 (id=2238): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) unshare(0x22020600) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)}, 0x10) 11m23.329876608s ago: executing program 1 (id=2242): r0 = socket(0x1a, 0x3, 0x9) sendmsg$nl_route(r0, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setxattr$security_ima(0x0, &(0x7f0000000080), &(0x7f0000000100)=@sha1={0x1, "135e05ce8ce63c18f826a69c16e06c678ba7da37"}, 0x15, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x7}}, 0xe8) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000080)=0x8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000600)={r6, r6, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x0, 0x1, 'syz0\x00'}) 11m3.859881092s ago: executing program 48 (id=2242): r0 = socket(0x1a, 0x3, 0x9) sendmsg$nl_route(r0, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setxattr$security_ima(0x0, &(0x7f0000000080), &(0x7f0000000100)=@sha1={0x1, "135e05ce8ce63c18f826a69c16e06c678ba7da37"}, 0x15, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x7}}, 0xe8) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000080)=0x8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000600)={r6, r6, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x0, 0x1, 'syz0\x00'}) 10m34.720073579s ago: executing program 8 (id=2343): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0xff91, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) 10m33.272566555s ago: executing program 8 (id=2348): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x204031, 0xffffffffffffffff, 0x5475b000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e0000000000000020a00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x23) 10m31.277960078s ago: executing program 8 (id=2355): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x4, 0x4cc, 0xffff, 0x9dfb, 0x5, "804f030000002400"}) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x8000000, 0x0, 0x807fff, 0x16, "b0bf2ebbff4000"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x12) 10m29.747300729s ago: executing program 8 (id=2361): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, {0x1}, 0xa, {0x2, 0x4e24, @loopback}, 'bond_slave_1\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000000101040000000000e1000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4068890) 10m28.310636977s ago: executing program 8 (id=2367): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22060, 0x0) fcntl$setlease(r0, 0x400, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x1004001, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@nogrpid}, {@quota}, {@noblock_validity}, {@errors_remount}, {@jqfmt_vfsv0}, {@nogrpid}, {@data_err_ignore}, {@data_err_ignore}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}]}, 0x1, 0x437, &(0x7f0000000900)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.redirect\x00') 10m23.851282297s ago: executing program 8 (id=2371): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x18, 0x2043}}}, 0x7) dup2(0xffffffffffffffff, 0xffffffffffffffff) 10m15.780564756s ago: executing program 2 (id=2382): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80d1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendto$inet(r0, &(0x7f0000000040)="255f5a03204f8e0b", 0xdd86, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000006a}, 0x10) 10m11.021475897s ago: executing program 2 (id=2384): setuid(0xee01) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newsa={0xf0, 0x10, 0x1, 0x70bd2d, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1}}, 0xf0}}, 0x0) 10m10.446181329s ago: executing program 2 (id=2387): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) statfs(0x0, 0x0) 10m9.630051941s ago: executing program 2 (id=2389): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2c2cc1, 0x0) fremovexattr(r0, 0x0) 10m8.900182211s ago: executing program 2 (id=2391): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22060, 0x0) fcntl$setlease(r0, 0x400, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x1004001, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@nogrpid}, {@quota}, {@noblock_validity}, {@errors_remount}, {@jqfmt_vfsv0}, {@nogrpid}, {@data_err_ignore}, {@data_err_ignore}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}]}, 0x1, 0x437, &(0x7f0000000900)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.redirect\x00') 10m1.524950861s ago: executing program 49 (id=2371): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x18, 0x2043}}}, 0x7) dup2(0xffffffffffffffff, 0xffffffffffffffff) 10m1.453394476s ago: executing program 2 (id=2394): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00), 0x1, 0x789, &(0x7f0000000b40)="$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") chdir(&(0x7f0000000140)='./file0\x00') umount2(&(0x7f0000000080)='./file1\x00', 0x4) 9m43.214501665s ago: executing program 50 (id=2394): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00), 0x1, 0x789, &(0x7f0000000b40)="$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") chdir(&(0x7f0000000140)='./file0\x00') umount2(&(0x7f0000000080)='./file1\x00', 0x4) 8m39.155369429s ago: executing program 4 (id=2500): openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', &(0x7f0000000300)={0x240, 0x10, 0x2}, 0x69) 8m38.657886653s ago: executing program 4 (id=2502): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) 8m37.920577148s ago: executing program 4 (id=2504): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000840)={0x34, 0x2e, 0x503, 0x40000, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}, @generic="a8bb"]}, 0x34}], 0x1}, 0x0) 8m36.284780014s ago: executing program 4 (id=2507): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') statx(r0, &(0x7f0000000100)='.\x00', 0x100, 0xc40, 0x0) 8m35.869680659s ago: executing program 4 (id=2508): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00') 8m35.422604707s ago: executing program 4 (id=2510): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000025c0)=""/158, &(0x7f0000000000)=0x9e) 8m19.083939694s ago: executing program 51 (id=2510): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000025c0)=""/158, &(0x7f0000000000)=0x9e) 6m11.643933033s ago: executing program 9 (id=2717): syz_mount_image$udf(&(0x7f0000002140), &(0x7f0000002640)='./file1\x00', 0xdbb2a0979af085d4, &(0x7f0000002080)=ANY=[@ANYRESOCT], 0x7f, 0x4c7, &(0x7f0000002b80)="$eJzs201sVNUbx/HfM3c6nQ79/xleLGAINtHECgJ9wQKpieHFRhNetFCNxJdUOsVKX0inKCUgLNWdC5Yu3bpwZdwaEpfGhcEYdsjGzazEHebcuXfunWGgM7TMBeb7IXDuvfPM9JzzzLnnnKEjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHXz9QP+AJV0LAADQSsdOjPUPMf8DANBWTrL/BwAAaCcmT3/KtPNsyY7652XZI9Nz5y+MHx6t/7Qukyklz493f7MDg0N7Xhneuy8sH/z81bZFx0+cPNB7aH723EKhWCxM9o7PTZ+enyw0/AorfX6t7X4H9M6ePT85NVXsHdw1VPXwhfztzjU9+ZHhDw5lwtjxw6OjJ2Ix6Y6H/un3uN8KPyNPL8n06Y/f2zFJKa2wL9ZKam3ua3X5jdjuN2L88KjfkJnpiblF96ClgqhUdZ9kwj5qQS5WJCW5ellmdfZsHfL0k0wHd5fsuCQv7Icd/gfDDdUnCWm3dZXUpycgZ4+xTnn6SKbru/N6K+hXP/8Z6VLSlcMjlw7G/7yV7G3/fuDGk7ttHnmn9825qflYrKWCEdXM/FBnDC6ztnjUulr60x7ze1NWno77I75kY0lXBi3XJU+zMmW++cxfVyh/t3NNz9qRvdue2x9fYWxa5nVc7K5gcDUyJ3cESwdLuT8PUW2siqx5+kumO39k/fO+IDf8j0CbME8zMv17uWRWsy/1Yvv7ihXukxOf+x9t/buyh+bPLS1Mn/lkse7jueyBj4uLCxOn6z9c3rt68SvL7WNrpZrbkuWsvOP78vNS5XnBHuB/5bOoNt9dit4LfTVlKP7+aeS44ftME+soVyczT7dkmvpwc3meUa7pvmkHLv+jMhVLv1qY6SD/6fJZLP+vRv2Xteqyws/t/8ufa/nHa0f2bjm18X7XV5T/zvr5d3Vy+X9PpoP/bA4+0yjn36uJdXE9Mr1/bWsQl8q4uHTYnPIrTk3PFPpd7F2Z1v8SxsqPzQWxG6LYARdblOmr69Wxa4LYjVHsoIu9IdPN3+vHPhPFDrnYJZevm71hbM7Fbgtie6LYXafnZyaX61aX/0GZ3r3yhoVtvm/+Y+P/ak1ZcU/OH3y8WuM/H7t2NcjrqSD/6WXy/7VMS39vDdvt9334tlrn/xvl362Vf7hWHRsuRtdHsQONNitpLv/rZLr92o1Km4O2BadRhuL5fzZdXVb6NaH8r4slNh/UK9NsZ7Sh4tLFsxMzM4UFDjjg4GEOOhsbRJ6Sr2ozB0nfmdAKbv4fc7P6sGfhOiaY/7vLZ9HEeueLaP4fqSkrEpr/18eujQSrlo60lF2cPdexScoWly7unJ6dOFM4U5gb2jPcP7h/T//Qvo5MuLiLjhruu6eBy/8OmS7//FtlH1O9/qu//s/VlBUJ5X9DvE1V65qGu6Itufx3yzR860Zlv/mg9X+4/+97vrqsjL+E8r8xdi0f1Ku7yb4AAAAAAAAAAAAAAAAAgCdJzjy9INOFsZct/A5RI7//N1lTViT0+189sWuTq/+9hvCrUVUPNVp1AAAAAAAAAACAVkrJ07cyvaiSXXEXuqWj8RJPtf8CAAD//9VkQIE=") r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x45}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}, 0x3}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 6m8.874796764s ago: executing program 9 (id=2725): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @remote, 0x9}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @local, 0x3}, 0x1c) 6m7.89456975s ago: executing program 9 (id=2730): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x52c, &(0x7f00000002c0)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x842, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) pipe(&(0x7f0000000200)) 6m6.10881565s ago: executing program 9 (id=2737): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000800)={[{@fat=@time_offset={'time_offset', 0x3d, 0x3bf}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@discard}, {@fat=@debug}, {@shortname_mixed}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x2a5, &(0x7f0000000540)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1005848, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r0, &(0x7f0000001900)=""/4079, 0xfef, 0x66) 6m5.181681707s ago: executing program 9 (id=2742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x34, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4800) 6m4.511781837s ago: executing program 9 (id=2746): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000002580)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x6, 0x1, 0x200d}}}, 0x7) 6m2.133387466s ago: executing program 52 (id=2746): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000002580)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x6, 0x1, 0x200d}}}, 0x7) 5m35.099966722s ago: executing program 0 (id=2803): semctl$IPC_RMID(0x0, 0x0, 0x13) 5m34.613110871s ago: executing program 0 (id=2805): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) 5m34.040452483s ago: executing program 0 (id=2808): syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) 5m32.388312016s ago: executing program 0 (id=2812): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff070067060000200000007a0a00ff0ee60000bf252000000000002d350000000000006507000002080000270700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce0400000000000014000000000000009500000000000000db13d4d8b741f2cdaabc8383c8f56bb5df3083d20f8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d1966d7ded3c5c49a08a503ea6dcfafbc718c3ada3d8ac0836d6454745e30a274f8d51744003c5b20451b624db6f58b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c9081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded55a48b0ed45e8659f7e3730489befb866f8ba2eb2018000000000000003ea6a5be537b3c7c178dbdfaa67785410ad604f5c1e777cea1a9f878c448631eb5dd48835b7a975ed7a1f61121cb3ce2288d8ceba4e5c69cdf643d0f07bfe1d8cb0fd2ec6179ac010623714e83c7b03ab88bfac90b5f975abbe443136c221bcda1e"], &(0x7f0000000100)='GPL\x00'}, 0x48) 5m31.626935726s ago: executing program 0 (id=2815): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') move_mount(r0, &(0x7f0000000040)='./mnt\x00', r0, &(0x7f0000000380)='./mnt\x00', 0x151) 5m30.957150801s ago: executing program 0 (id=2818): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b00), 0x1, 0x4ca, &(0x7f0000000540)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) lseek(r1, 0xfffffffffffffffe, 0x3) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x7, @private1, 0x6}, 0x1c, 0x0}}], 0x1, 0x2004e000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7dc, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x4000, 0x1a8}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x20000000007) ftruncate(r4, 0x2000009) 5m14.600071827s ago: executing program 53 (id=2818): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b00), 0x1, 0x4ca, &(0x7f0000000540)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) lseek(r1, 0xfffffffffffffffe, 0x3) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x7, @private1, 0x6}, 0x1c, 0x0}}], 0x1, 0x2004e000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7dc, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x4000, 0x1a8}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x20000000007) ftruncate(r4, 0x2000009) 16.640912785s ago: executing program 5 (id=3471): r0 = fanotify_init(0x20, 0x40000) writev(r0, &(0x7f0000004300)=[{&(0x7f0000004140)="413f24f6cd", 0x5}, {0x0}], 0x2) 15.918275596s ago: executing program 5 (id=3474): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000000)={[{@resgid}, {@noload}, {@noblock_validity}]}, 0x84, 0x497, &(0x7f0000001540)="$eJzs3MtvG8UfAPDvrvPoO/n1Vx59QAMFEVFImrRAD0gIBFIvSEhwgGNIQ1XqtqgJEq0q2iJUjoi/ADgi8RdwggsCTiCucEdIFeqlhQMyWns3cWLXuHYdh/rzkdaZ2dfM7OxkZ3e8DmBgTWQfScS2iPglIsZq0dUrTNT+3Lx+cf7P6xfnk6hUXv1jtLrejesX54tVi+225pHJNCL9MIm9TdJdPH/h1Fy5vHAuj08vnX5nevH8hSdPnp47sXBi4czs0aNHDs888/TsU3eknFm5bux5/+y+3cfe+OTl+Uq8+f2XWX635cvry1Ez3nWaEzERlUqlkq6aO1L9fLTrvW8s2yPiSh5OhvqcGdpWioisuoar7X8sSrFSeWPx0gd9zRzQU9n1abRhbin/O5RkyzfVrQvcTRLtGgZUccXP7n+Lab36HhvBteezz4Vq+W/mU23JUGT37cl47Y691KP0t0XE65f/+jSboulzCACAO+vrrP/zRLP+Xxr31q23Ix9DGY+IgxGxMyL+HxG7IuKeiOq690XE/beZfnX86cpKvLH/89PmjgvXhqz/92w+trW6/7c8ajNeymPbq+UfTt46WV44lB+TyRgezeIzLdL45sWfP77Vsom6/l82ZekXfcE8H78PrXlAd3xuaa6bMte7diViz1Cz8ifLIwFJROyOiD0d7D87Zicf/2JfFt6xtXH5v5e/lcsd5Gi1yucRj9Xq/3KsKX8hqQ2R3Gp8cnpTlBcOTRdnRaMffrz6Sn18uC7cXfm7l9X/lqbnf17+ohkU47WLbe54ZCV49deP8n02NuVOz/+R5LVVybw3t7R0biZiZCQa58+ubFvEi/Wz8k8eiLiaDwTXt/+dEX9/lm+3NyKyk/iBiHgwIvbneX8oIh6OiAMtDsV3LzzyduuD1d/6P96q/iPGk/rx+g4CpVPfflXsbLkq838u7dX/kWpoMp/Tzv+/djN4J44hAAAAbHRpdQw6SaeWw2k6NVX7Dv+u2JKWzy4uHZyId88cr41Vj8dwWjzpGqt7HjqTPxsu4rNr4ocj4n/Vbxptrsan5s+Wt/e78DDgtt6i/Wd+69WXXoCN47be10p6lw9g/XlfEwZX2+1/uLf5ANaf6z8MLu0fBlez9n8p4mYfsgKss9u6/j/Xu3wA669V+/fID+5u7v9hcGn/MJAaX4kvfqOhkzf9VwI7j3W1+QAFSj3ac9T/aEcPApH2/dB1Hkg3Qjb254HRiGh3q0s9rdO15w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/3z8BAAD//yxO2No=") socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x81) ioctl$FITRIM(r0, 0xc0185879, 0x0) 14.886531064s ago: executing program 5 (id=3479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0d}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) 14.031327223s ago: executing program 5 (id=3482): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@generic={0x73, 0x1, 0x1, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.094515868s ago: executing program 5 (id=3486): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000040), 0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fchdir(0xffffffffffffffff) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) io_setup(0x20, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = semget$private(0x0, 0x2, 0x100) semop(r3, &(0x7f0000000080)=[{0x1, 0xffff}, {0x0, 0xc000, 0x800}], 0x2) 5.884302008s ago: executing program 5 (id=3487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1003}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) 5.532586304s ago: executing program 7 (id=3488): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000340)={0x0, 0x0}) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000000)) 4.300969737s ago: executing program 6 (id=3491): pipe2(&(0x7f0000000000), 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c002000018006000340000000001400018008c301007f000001080002007f0000010c00198008000100", @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.882813759s ago: executing program 3 (id=3492): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x9, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], "1b8d2069162baf34"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x58, 0x2000, 0x0) 3.882663551s ago: executing program 7 (id=3493): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 3.671013249s ago: executing program 6 (id=3494): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) write$cgroup_type(r1, &(0x7f0000000040), 0x9) 3.252421494s ago: executing program 3 (id=3495): r0 = inotify_init1(0x800) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000640), 0x1, 0x5bc, &(0x7f0000001440)="$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") inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x1000002) inotify_add_watch(r0, &(0x7f0000001080)='./file0\x00', 0xc30002c5) 2.917833133s ago: executing program 6 (id=3496): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setregid(0xffffffffffffffff, 0x0) 2.429609549s ago: executing program 7 (id=3497): setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.295545596s ago: executing program 3 (id=3498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x85862) sendfile(r0, r0, 0x0, 0x80000001) 2.054796785s ago: executing program 6 (id=3499): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x17e) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.639741098s ago: executing program 3 (id=3500): syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204"], 0x0) 1.443680974s ago: executing program 6 (id=3501): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000040)) 1.165997335s ago: executing program 7 (id=3502): io_setup(0x7, &(0x7f0000000280)=0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000340)='/sys/power/pm_async', 0x42, 0x8) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='7', 0x1, 0x4}]) 1.006174922s ago: executing program 3 (id=3503): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 563.363718ms ago: executing program 7 (id=3504): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xb}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) 468.576022ms ago: executing program 3 (id=3505): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f0000000140)=[{r3, 0x8}, {r2, 0x2cfc08c20dafc34e}, {r0, 0xf102}], 0x3, 0x8000007) 413.101249ms ago: executing program 6 (id=3506): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000003f00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 0s ago: executing program 7 (id=3507): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1000, 0x1) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x981) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200200, 0x0) close_range(r1, r1, 0x2) openat2$dir(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)={0x2a40, 0x58, 0x8}, 0x18) io_setup(0x1, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f0000002880)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x9, r1, 0x0, 0x0, 0x9, 0x0, 0x0, r1}]) 0s ago: executing program 6 (id=3508): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)=ANY=[], 0x0) kernel console output (not intermixed with test programs): rts timestamps until 2038-01-19 (0x7fffffff) [ 1790.305679][ T29] audit: type=1800 audit(1778443986.392:152): pid=18278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2730" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1790.800542][T17332] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1791.162909][T18304] loop9: detected capacity change from 0 to 128 [ 1791.235966][T18303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2738'. [ 1792.357941][T14597] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1792.370813][ T5878] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.537164][ T5878] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.539836][T14597] usb 6-1: Using ep0 maxpacket: 8 [ 1792.602703][T14597] usb 6-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 148, changing to 11 [ 1792.655012][T14597] usb 6-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1792.689504][T14597] usb 6-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 16 [ 1792.726615][T14597] usb 6-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1792.764962][ T5878] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.799372][T14597] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1792.838033][T14597] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1792.885734][T14597] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1792.918091][T14597] usb 6-1: SerialNumber: syz [ 1792.972039][T18315] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1793.012462][ T5878] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1793.027590][T18315] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1793.361190][T18315] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1793.391172][T18315] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1793.567733][ T5878] bridge_slave_1: left allmulticast mode [ 1793.620183][ T5878] bridge_slave_1: left promiscuous mode [ 1793.644446][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1793.674466][T14597] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1793.713981][ T5878] bridge_slave_0: left allmulticast mode [ 1793.745299][ T5878] bridge_slave_0: left promiscuous mode [ 1793.755896][T14597] usb 6-1: USB disconnect, device number 2 [ 1793.793467][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1794.985153][ T5878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1795.069284][ T5878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1795.165803][ T5878] bond0 (unregistering): Released all slaves [ 1795.871509][T18352] loop0: detected capacity change from 0 to 512 [ 1795.985000][T18352] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1796.087442][T18352] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1796.128465][T18352] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 1796.160815][T18352] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1796.225648][T18352] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2753: Failed to acquire dquot type 1 [ 1796.301288][T18352] loop0: lost filesystem error report for type 5 error -5 [ 1796.304200][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1796.318401][ C0] EXT4-fs (loop0): initial error at time 1778443992: ext4_acquire_dquot:7034 [ 1796.327529][ C0] EXT4-fs (loop0): last error at time 1778443992: ext4_acquire_dquot:7034 [ 1796.354945][T16898] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1796.367961][T16898] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1796.370244][T18352] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2753: bg 0: block 40: padding at end of block bitmap is not set [ 1796.399279][T16898] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1796.421403][T18352] loop0: lost filesystem error report for type 5 error -117 [ 1796.424950][T16898] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1796.450051][T16898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1796.498120][T18352] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1796.508933][T18352] loop0: lost filesystem error report for type 5 error -117 [ 1796.545203][ T5878] hsr_slave_0: left promiscuous mode [ 1796.561618][T18352] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #16: comm syz.0.2753: data will be lost [ 1796.579115][T18352] EXT4-fs (loop0): 1 truncate cleaned up [ 1796.590211][T18352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1796.612940][ T5878] hsr_slave_1: left promiscuous mode [ 1796.622294][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1796.633213][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1796.698296][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1796.742187][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1796.756266][T18352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1796.858833][ T5878] veth1_macvtap: left promiscuous mode [ 1796.865767][ T5878] veth0_macvtap: left promiscuous mode [ 1796.871821][ T5878] veth1_vlan: left promiscuous mode [ 1796.877345][ T5878] veth0_vlan: left promiscuous mode [ 1802.595223][T16898] Bluetooth: hci0: command tx timeout [ 1805.456007][T16898] Bluetooth: hci0: command tx timeout [ 1807.376871][ T5878] team0 (unregistering): Port device team_slave_1 removed [ 1807.489365][ T5878] team0 (unregistering): Port device team_slave_0 removed [ 1807.619790][T16898] Bluetooth: hci0: command tx timeout [ 1808.156212][T16646] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1808.380953][T16646] usb 1-1: Using ep0 maxpacket: 16 [ 1808.442311][T16646] usb 1-1: config index 0 descriptor too short (expected 4495, got 71) [ 1808.493427][T16646] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1808.539206][T16646] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1808.591139][T16646] usb 1-1: config 0 has no interface number 0 [ 1808.632088][T16646] usb 1-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1808.669120][T16646] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.704847][T16646] usb 1-1: Product: syz [ 1808.735132][T16646] usb 1-1: Manufacturer: syz [ 1808.755463][T16646] usb 1-1: SerialNumber: syz [ 1808.799318][T16646] usb 1-1: config 0 descriptor?? [ 1809.176815][T16646] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 1809.218791][T16646] uvcvideo 1-1:0.105: No valid video chain found. [ 1809.269519][T16646] usb 1-1: USB disconnect, device number 7 [ 1809.574863][T18409] loop5: detected capacity change from 0 to 2048 [ 1809.626489][T18409] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1809.694061][T18409] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1809.749886][T18409] UDF-fs: Scanning with blocksize 512 failed [ 1809.846828][T16898] Bluetooth: hci0: command tx timeout [ 1809.954687][T18409] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1811.057969][T18436] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2776'. [ 1811.119975][T18436] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1812.978075][T18448] xt_CT: No such helper "pptp" [ 1814.356997][T18470] loop7: detected capacity change from 0 to 1024 [ 1814.465479][T18470] hfsplus: failed to load extents file [ 1815.636619][T18357] bridge0: port 1(bridge_slave_0) entered blocking state [ 1815.669398][T18357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.696905][T18357] bridge_slave_0: entered allmulticast mode [ 1815.754350][T18357] bridge_slave_0: entered promiscuous mode [ 1815.821707][T18357] bridge0: port 2(bridge_slave_1) entered blocking state [ 1815.862776][T18357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.912606][T18357] bridge_slave_1: entered allmulticast mode [ 1815.972242][T18357] bridge_slave_1: entered promiscuous mode [ 1816.067391][T18487] loop0: detected capacity change from 0 to 256 [ 1816.107026][T18487] vfat: Bad value for 'time_offset' [ 1816.247124][T18489] loop7: detected capacity change from 0 to 1024 [ 1816.351282][T18489] hfsplus: failed to load extents file [ 1816.543291][T18357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1816.698658][T18357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1817.238331][T18357] team0: Port device team_slave_0 added [ 1817.278332][T18357] team0: Port device team_slave_1 added [ 1817.352842][T16646] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1817.422478][T18500] loop7: detected capacity change from 0 to 1024 [ 1817.483332][T18500] hfsplus: failed to load extents file [ 1817.548209][T14454] Bluetooth: hci5: command 0x0406 tx timeout [ 1817.578433][T16646] usb 1-1: Using ep0 maxpacket: 32 [ 1817.609624][T16646] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 1817.621740][T16646] usb 1-1: config 0 has no interface number 0 [ 1817.628112][T16646] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1817.641053][T16646] usb 1-1: config 0 interface 85 has no altsetting 0 [ 1817.656242][T18357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1817.671175][T16646] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1817.702157][T16646] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.730830][T18357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1817.742338][T16646] usb 1-1: Product: syz [ 1817.839791][T16646] usb 1-1: Manufacturer: syz [ 1817.862438][T18357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1817.869929][T16646] usb 1-1: SerialNumber: syz [ 1817.946344][T16646] usb 1-1: config 0 descriptor?? [ 1817.962751][T18357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1817.995410][T18357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1818.132393][T18357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1818.671791][T16646] appletouch 1-1:0.85: Geyser mode initialized. [ 1818.702642][T18357] hsr_slave_0: entered promiscuous mode [ 1818.720820][T16646] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input22 [ 1818.728600][T18357] hsr_slave_1: entered promiscuous mode [ 1818.783053][T18357] debugfs: 'hsr0' already exists in 'hsr' [ 1818.822851][T18357] Cannot create hsr debugfs directory [ 1819.003864][T14597] usb 1-1: USB disconnect, device number 8 [ 1819.111279][T14597] appletouch 1-1:0.85: input: appletouch disconnected [ 1820.205745][T18521] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1821.898232][T18357] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1822.011358][T18357] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1822.049669][T18357] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1822.162502][T18357] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1822.192630][T18357] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1822.265799][T18357] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1822.344643][T18357] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1822.460920][T18357] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1822.975378][T18549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1822.975448][T18549] IPv6: NLM_F_CREATE should be set when creating new route [ 1822.975515][T18549] IPv6: NLM_F_CREATE should be set when creating new route [ 1824.623390][T18357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1824.805017][T18357] 8021q: adding VLAN 0 to HW filter on device team0 [ 1824.876377][ T428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.876697][ T428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1825.002623][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1825.010343][ T5878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1825.252398][ T29] audit: type=1800 audit(1778444019.080:153): pid=18562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2810" name="net_prio.prioidx" dev="fuse" ino=3 res=0 errno=0 [ 1826.266938][T18583] loop0: detected capacity change from 0 to 512 [ 1826.441176][T18583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1826.498701][T18583] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1827.891463][T18598] xt_CT: No such helper "pptp" [ 1830.052201][ T29] audit: type=1326 audit(1778444023.362:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18610 comm="syz.3.2822" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f284739cdd9 code=0x0 [ 1831.150347][T18589] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1836.320218][T18357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1836.351830][T18633] netlink: 'syz.3.2827': attribute type 2 has an invalid length. [ 1836.360268][T18633] netlink: 'syz.3.2827': attribute type 1 has an invalid length. [ 1839.449235][T14454] Bluetooth: hci3: command 0x0406 tx timeout [ 1841.479000][T18676] loop5: detected capacity change from 0 to 512 [ 1841.564990][T18676] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1841.647027][T18676] EXT4-fs (loop5): fragment/cluster size (1024) != block size (4096) [ 1841.715085][T18357] veth0_vlan: entered promiscuous mode [ 1841.863370][T18681] fuse: fd is not a fuse device [ 1841.899139][T18357] veth1_vlan: entered promiscuous mode [ 1842.463514][T18357] veth0_macvtap: entered promiscuous mode [ 1842.561719][T18357] veth1_macvtap: entered promiscuous mode [ 1842.816919][T18357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1843.078221][T18357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1843.331037][T18096] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.367033][T18096] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.418109][T18096] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.463232][T18096] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.703986][T14454] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1843.724109][T14454] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1843.741895][T14454] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1843.757663][T14454] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1843.773420][T14454] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1844.789678][T18594] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1845.355406][T18725] loop5: detected capacity change from 0 to 512 [ 1845.497706][T18725] EXT4-fs (loop5): 1 orphan inode deleted [ 1845.615764][T18725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1845.752439][ T29] audit: type=1800 audit(1778444038.238:155): pid=18725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2852" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 1845.795916][T18725] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2852: invalid indirect mapped block 234881024 (level 0) [ 1845.937315][T18725] EXT4-fs (loop5): Remounting filesystem read-only [ 1845.954001][T16898] Bluetooth: hci2: command tx timeout [ 1846.118914][T18736] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2853'. [ 1846.374030][T17608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1847.172309][T18750] loop5: detected capacity change from 0 to 512 [ 1847.296388][T18750] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1847.329156][T18750] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1847.623079][T17608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1848.179360][T16898] Bluetooth: hci2: command tx timeout [ 1848.200680][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1848.219579][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1848.922556][ T428] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.177678][ T428] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.394333][ T428] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.746253][ T428] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1850.400804][T16898] Bluetooth: hci2: command tx timeout [ 1850.578078][ T428] bridge_slave_1: left allmulticast mode [ 1850.598741][ T428] bridge_slave_1: left promiscuous mode [ 1850.634970][ T428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1850.724550][ T428] bridge_slave_0: left allmulticast mode [ 1850.754087][ T428] bridge_slave_0: left promiscuous mode [ 1850.796314][ T428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1851.699301][ T428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1851.720942][ T428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1851.746159][ T428] bond0 (unregistering): Released all slaves [ 1852.794739][T16898] Bluetooth: hci2: command tx timeout [ 1854.630044][T18699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1854.637904][T18699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1855.509657][T18699] bridge_slave_0: entered allmulticast mode [ 1855.519250][T18699] bridge_slave_0: entered promiscuous mode [ 1855.824729][T18699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1855.860795][T18699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1855.885503][T18699] bridge_slave_1: entered allmulticast mode [ 1855.927758][T18699] bridge_slave_1: entered promiscuous mode [ 1856.047665][T14454] Bluetooth: hci1: command 0x0406 tx timeout [ 1857.179457][ T428] hsr_slave_0: left promiscuous mode [ 1857.209153][ T428] hsr_slave_1: left promiscuous mode [ 1857.258193][ T428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1857.296140][ T428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1857.336364][ T428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1857.387051][ T428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1857.544369][ T428] veth1_macvtap: left promiscuous mode [ 1857.595089][ T428] veth0_macvtap: left promiscuous mode [ 1857.630528][ T428] veth1_vlan: left promiscuous mode [ 1857.658668][ T428] veth0_vlan: left promiscuous mode [ 1857.787701][T18854] netlink: 908 bytes leftover after parsing attributes in process `syz.5.2879'. [ 1857.947582][T18854] netlink: 'syz.5.2879': attribute type 1 has an invalid length. [ 1859.824026][ T428] team0 (unregistering): Port device team_slave_1 removed [ 1859.914698][ T428] team0 (unregistering): Port device team_slave_0 removed [ 1860.703111][T18699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1860.742057][T14454] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1860.755614][T14454] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1860.766448][T14454] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1860.781389][T14454] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1860.797275][ T5781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1860.797290][T14454] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1860.847593][ T5781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1860.956983][T18699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1861.543198][T18699] team0: Port device team_slave_0 added [ 1861.652689][T18699] team0: Port device team_slave_1 added [ 1862.072410][T18699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1862.084970][T18900] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2891'. [ 1862.122510][T18699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1862.260941][T18699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1862.337837][T18699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1862.375176][T18699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1862.474391][T18699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1862.828249][T18908] net_ratelimit: 44 callbacks suppressed [ 1862.828352][T18908] IPv6: addrconf: prefix option has invalid lifetime [ 1863.063790][T14454] Bluetooth: hci5: command tx timeout [ 1863.102965][T18699] hsr_slave_0: entered promiscuous mode [ 1863.134409][T18699] hsr_slave_1: entered promiscuous mode [ 1863.154929][T18699] debugfs: 'hsr0' already exists in 'hsr' [ 1863.188506][T18699] Cannot create hsr debugfs directory [ 1863.197485][ T29] audit: type=1326 audit(1778444054.554:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18909 comm="syz.7.2894" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e7f79cdd9 code=0x0 [ 1864.888201][T18699] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.992449][ T5878] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.200117][T18699] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.293332][T14454] Bluetooth: hci5: command tx timeout [ 1865.471265][T18935] loop5: detected capacity change from 0 to 128 [ 1865.487756][ T5878] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.590408][T18699] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.619126][T18937] fuse: fd is not a fuse device [ 1865.751376][ T5224] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1866.033305][T18935] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1866.307754][T18935] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1866.480692][ T5878] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.660530][T18935] syz.5.2904 (pid 18935) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1866.972106][T18699] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1867.376280][ T5878] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1867.447797][T17608] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1867.513944][T14454] Bluetooth: hci5: command tx timeout [ 1869.919435][T16898] Bluetooth: hci5: command tx timeout [ 1876.494841][T18699] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1876.579872][T18699] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1876.633807][T18699] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1876.729067][T18699] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1876.771183][ T5878] bridge_slave_1: left allmulticast mode [ 1876.802514][ T5878] bridge_slave_1: left promiscuous mode [ 1876.826243][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1876.894186][ T5878] bridge_slave_0: left allmulticast mode [ 1876.942368][ T5878] bridge_slave_0: left promiscuous mode [ 1876.978333][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1878.564856][ T5878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1878.643036][ T5878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1878.706030][ T5878] bond0 (unregistering): Released all slaves [ 1878.874859][T18699] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1878.932029][T18699] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1879.118001][T18699] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1879.282392][T18699] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1879.824294][ T5878] hsr_slave_0: left promiscuous mode [ 1879.872452][ T5878] hsr_slave_1: left promiscuous mode [ 1879.891773][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1879.922146][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1879.955347][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1879.989635][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1880.104797][ T5878] veth1_macvtap: left promiscuous mode [ 1880.135541][ T5878] veth0_macvtap: left promiscuous mode [ 1880.155012][ T5878] veth1_vlan: left promiscuous mode [ 1880.185311][ T5878] veth0_vlan: left promiscuous mode [ 1881.390558][T19011] fuse: fd is not a fuse device [ 1881.483420][ T5878] team0 (unregistering): Port device team_slave_1 removed [ 1881.585927][ T5878] team0 (unregistering): Port device team_slave_0 removed [ 1883.063004][T19031] Driver unsupported XDP return value 0 on prog (id 318) dev N/A, expect packet loss! [ 1883.269999][T16646] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1883.297118][T18882] bridge0: port 1(bridge_slave_0) entered blocking state [ 1883.316097][T18882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1883.325865][T18882] bridge_slave_0: entered allmulticast mode [ 1883.340273][T18882] bridge_slave_0: entered promiscuous mode [ 1883.440836][T18882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1883.466195][T18882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1883.482101][T16646] usb 6-1: Using ep0 maxpacket: 16 [ 1883.508397][T18882] bridge_slave_1: entered allmulticast mode [ 1884.161840][T18882] bridge_slave_1: entered promiscuous mode [ 1884.189709][T16646] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1884.281865][T16646] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1884.334284][T16646] usb 6-1: can't read configurations, error -71 [ 1884.619772][T18882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1884.737740][T18882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1885.296105][T18882] team0: Port device team_slave_0 added [ 1885.478914][T18882] team0: Port device team_slave_1 added [ 1885.655366][T19042] fuse: fd is not a fuse device [ 1885.926303][T18882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1885.959218][T18882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1886.025220][T18882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1886.108552][T18882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1886.171187][ T29] audit: type=1326 audit(1778444076.021:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.3.2931" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284739cdd9 code=0x7ffc0000 [ 1886.172886][T18882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1886.314026][ T29] audit: type=1326 audit(1778444076.021:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.3.2931" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284739cdd9 code=0x7ffc0000 [ 1886.424568][T18882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1886.432752][ T29] audit: type=1326 audit(1778444076.021:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.3.2931" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f284739cdd9 code=0x7ffc0000 [ 1886.541410][T19050] loop5: detected capacity change from 0 to 2048 [ 1886.548163][ T29] audit: type=1326 audit(1778444076.040:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.3.2931" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284739cdd9 code=0x7ffc0000 [ 1886.633727][T19050] EXT4-fs: Ignoring removed i_version option [ 1886.696009][ T29] audit: type=1326 audit(1778444076.040:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.3.2931" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284739cdd9 code=0x7ffc0000 [ 1886.788057][ T29] audit: type=1326 audit(1778444076.096:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.3.2931" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f284739cdd9 code=0x7ffc0000 [ 1886.790597][T19050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1886.842912][ T29] audit: type=1326 audit(1778444076.096:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.3.2931" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284739cdd9 code=0x7ffc0000 [ 1886.874807][ T29] audit: type=1326 audit(1778444076.096:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.3.2931" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284739cdd9 code=0x7ffc0000 [ 1886.903795][T19050] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1887.172278][T18882] hsr_slave_0: entered promiscuous mode [ 1887.214436][T18882] hsr_slave_1: entered promiscuous mode [ 1887.258930][T18882] debugfs: 'hsr0' already exists in 'hsr' [ 1887.280907][T18882] Cannot create hsr debugfs directory [ 1887.403038][T17608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1887.847578][T18699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1888.869962][T18699] 8021q: adding VLAN 0 to HW filter on device team0 [ 1889.045313][T19081] loop5: detected capacity change from 0 to 8 [ 1889.065136][T18033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1889.072741][T18033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1889.115930][T19081] squashfs: Bad value for 'errors' [ 1889.336035][T18033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1889.343700][T18033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1890.515830][T18882] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1890.598869][T18882] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1890.621481][T18882] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1890.746155][T18882] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1890.781747][T18882] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1890.908682][T18882] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1890.981852][T18882] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1891.091027][T18882] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1900.590468][T18882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1900.711299][T19132] loop7: detected capacity change from 0 to 1024 [ 1900.844804][T18882] 8021q: adding VLAN 0 to HW filter on device team0 [ 1901.051774][ T428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1901.059388][ T428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1901.228430][T18033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1901.236104][T18033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1902.455162][T18699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1902.640430][ T5224] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1902.716552][T19156] loop7: detected capacity change from 0 to 1024 [ 1902.845225][T19156] hfsplus: failed to load root directory [ 1903.508452][T18699] veth0_vlan: entered promiscuous mode [ 1903.678385][T18699] veth1_vlan: entered promiscuous mode [ 1903.775149][T19172] loop7: detected capacity change from 0 to 256 [ 1903.828995][T19167] ------------[ cut here ]------------ [ 1903.834729][T19167] WARNING: kernel/signal.c:2174 at do_notify_parent+0x1d9/0xf30, CPU#1: syz.3.2960/19167 [ 1903.845039][T19167] Modules linked in: [ 1903.849175][T19167] CPU: 1 UID: 0 PID: 19167 Comm: syz.3.2960 Tainted: G W L syzkaller #0 PREEMPT(full) [ 1903.860401][T19167] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1903.865725][T19167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1903.876002][T19167] RIP: 0010:do_notify_parent+0x1d9/0xf30 [ 1903.881902][T19167] Code: e9 4c 31 f1 48 f7 d0 48 21 c8 0f 84 3b 0d 00 00 4d 39 f5 4c 8b 7d b8 0f 85 58 0d 00 00 e8 cf 37 5f 00 eb 60 e8 c8 37 5f 00 90 <0f> 0b 90 31 c0 45 31 ed 45 31 ff e9 56 0c 00 00 44 89 ef e8 9f 5b [ 1903.901726][T19167] RSP: 0018:ffff888084b47cf8 EFLAGS: 00010093 [ 1903.908033][T19167] RAX: ffffffff81a174b8 RBX: ffff8880171c4e38 RCX: ffff8880171c4280 [ 1903.916192][T19167] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 1903.924409][T19167] RBP: ffff888084b47dc0 R08: ffffea000000000f R09: 0000000000000000 [ 1903.932535][T19167] R10: ffff888084347d08 R11: ffffffff82bbdd00 R12: 0000000000000000 [ 1903.940669][T19167] R13: ffff8880171c4280 R14: 0000000000000080 R15: ffff8880171c4280 [ 1903.948799][T19167] FS: 0000000000000000(0000) GS:ffff8881aa70c000(0000) knlGS:0000000000000000 [ 1903.957902][T19167] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1903.964979][T19167] CR2: 00007f3e7fa17dac CR3: 00000000b7ac4000 CR4: 00000000003526f0 [ 1903.973127][T19167] Call Trace: [ 1903.976545][T19167] [ 1903.979587][T19167] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1903.985675][T19167] ? kill_orphaned_pgrp+0x273/0xa70 [ 1903.991158][T19167] ? kmsan_get_metadata+0xf1/0x160 [ 1903.996530][T19167] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1904.002604][T19167] do_exit+0x2430/0x3c30 [ 1904.007115][T19167] __x64_sys_exit+0x35/0x40 [ 1904.011899][T19167] x64_sys_call+0x3e96/0x3ea0 [ 1904.016857][T19167] do_syscall_64+0x134/0xf80 [ 1904.021809][T19167] ? clear_bhb_loop+0x50/0xa0 [ 1904.026732][T19167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1904.032861][T19167] RIP: 0033:0x7f284739cdd9 [ 1904.037490][T19167] Code: Unable to access opcode bytes at 0x7f284739cdaf. [ 1904.044663][T19167] RSP: 002b:00007f28482fcfd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 1904.053298][T19167] RAX: ffffffffffffffda RBX: 00007f2847615fa0 RCX: 00007f284739cdd9 [ 1904.061429][T19167] RDX: 00007f28482fd9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1904.069552][T19167] RBP: 00007f2847432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1904.077677][T19167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1904.085787][T19167] R13: 00007f2847616038 R14: 00007f2847615fa0 R15: 00007ffd8ad911a8 [ 1904.093963][T19167] [ 1904.097106][T19167] ---[ end trace 0000000000000000 ]--- [ 1904.572991][T18699] veth0_macvtap: entered promiscuous mode [ 1904.735334][T18699] veth1_macvtap: entered promiscuous mode [ 1905.025359][T18699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1905.159093][T18699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1905.344016][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.385913][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.589099][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.669687][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1908.019121][T19194] loop5: detected capacity change from 0 to 512 [ 1908.120230][T19194] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1908.241791][T19194] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1908.752180][T17608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1908.911682][T16898] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1908.929977][T16898] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1908.940482][T16898] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1908.969354][T16898] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1908.982249][T18882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1908.990249][T16898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1910.775073][T19238] loop7: detected capacity change from 0 to 8 [ 1911.245852][T14454] Bluetooth: hci0: command tx timeout [ 1912.057211][T14454] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1912.067468][T14454] CPU: 1 UID: 0 PID: 14454 Comm: kworker/u9:0 Tainted: G W L syzkaller #0 PREEMPT(full) [ 1912.067654][T14454] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1912.067708][T14454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1912.067814][T14454] Workqueue: hci1 hci_rx_work [ 1912.067994][T14454] Call Trace: [ 1912.068045][T14454] [ 1912.068105][T14454] __dump_stack+0x26/0x30 [ 1912.068255][T14454] dump_stack_lvl+0x14c/0x1c0 [ 1912.068403][T14454] dump_stack+0x1e/0x25 [ 1912.068534][T14454] sysfs_create_dir_ns+0x46c/0x540 [ 1912.068699][T14454] kobject_add_internal+0x1084/0x19b0 [ 1912.068871][T14454] kobject_add+0x2c1/0x410 [ 1912.069077][T14454] ? kmsan_get_metadata+0xf1/0x160 [ 1912.069260][T14454] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1912.069452][T14454] device_add+0xa70/0x1c90 [ 1912.069622][T14454] hci_conn_add_sysfs+0x159/0x2e0 [ 1912.069796][T14454] le_conn_complete_evt+0x1de1/0x2330 [ 1912.069967][T14454] hci_le_conn_complete_evt+0x157/0x260 [ 1912.070134][T14454] hci_le_meta_evt+0x6eb/0x960 [ 1912.070270][T14454] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1912.070432][T14454] hci_event_packet+0xb8c/0x1820 [ 1912.070604][T14454] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1912.070763][T14454] hci_rx_work+0x8c3/0xfc0 [ 1912.070932][T14454] ? kmsan_get_metadata+0xf1/0x160 [ 1912.071134][T14454] ? __pfx_hci_rx_work+0x10/0x10 [ 1912.071309][T14454] process_scheduled_works+0xb65/0x1e40 [ 1912.071538][T14454] worker_thread+0xee4/0x1590 [ 1912.071735][T14454] kthread+0x53f/0x600 [ 1912.071907][T14454] ? __pfx_worker_thread+0x10/0x10 [ 1912.072072][T14454] ? __pfx_kthread+0x10/0x10 [ 1912.072251][T14454] ret_from_fork+0x20f/0x8d0 [ 1912.072396][T14454] ? __switch_to+0x573/0x7a0 [ 1912.072559][T14454] ? __pfx_kthread+0x10/0x10 [ 1912.072720][T14454] ret_from_fork_asm+0x1a/0x30 [ 1912.072915][T14454] [ 1912.257134][T14454] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1912.274122][T14454] Bluetooth: hci1: failed to register connection device [ 1912.636261][T19259] loop5: detected capacity change from 0 to 1024 [ 1912.710922][T19259] hfsplus: invalid btree extent records (0 size) [ 1912.747525][T19259] hfsplus: failed to load attributes file [ 1913.166569][ T428] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1913.452488][ T428] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1913.480895][T16898] Bluetooth: hci0: command tx timeout [ 1913.741344][ T428] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1913.872718][T18882] veth0_vlan: entered promiscuous mode [ 1913.914819][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1913.934754][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.071672][ T428] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1914.214110][T19283] loop5: detected capacity change from 0 to 256 [ 1914.782281][T18882] veth1_vlan: entered promiscuous mode [ 1914.949108][ T29] audit: type=1326 audit(1778444102.940:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19291 comm="syz.5.2986" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 1915.063774][ T29] audit: type=1326 audit(1778444102.987:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19291 comm="syz.5.2986" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 1915.100703][T19293] loop6: detected capacity change from 0 to 8 [ 1915.160405][T19296] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1915.186986][ T29] audit: type=1326 audit(1778444102.987:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19291 comm="syz.5.2986" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 1915.217504][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1915.228007][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1915.239557][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1915.250065][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1915.273172][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1915.283673][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1915.300969][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1915.311471][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1915.321106][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1915.331665][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1915.346259][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1915.356730][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1915.366095][ T29] audit: type=1326 audit(1778444102.987:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19291 comm="syz.5.2986" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 1915.385435][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1915.392120][ T29] audit: type=1326 audit(1778444102.987:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19291 comm="syz.5.2986" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 1915.401596][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1915.428612][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1915.428759][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1915.430280][T19293] ldm_validate_partition_table(): Disk read failed. [ 1915.438907][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1915.476898][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1915.489901][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1915.524656][T19293] Dev loop6: unable to read RDB block 0 [ 1915.548561][T19293] loop6: unable to read partition table [ 1915.548934][ T29] audit: type=1326 audit(1778444102.987:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19291 comm="syz.5.2986" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 1915.569819][T19293] loop6: partition table beyond EOD, truncated [ 1915.654460][T19293] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 1915.660581][ T29] audit: type=1326 audit(1778444102.996:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19291 comm="syz.5.2986" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 1915.684970][T16898] Bluetooth: hci0: command tx timeout [ 1915.730160][ T29] audit: type=1326 audit(1778444103.005:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19291 comm="syz.5.2986" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 1915.743532][ T428] bridge_slave_1: left allmulticast mode [ 1915.761982][ T29] audit: type=1326 audit(1778444103.015:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19291 comm="syz.5.2986" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 1915.806791][ T29] audit: type=1326 audit(1778444103.015:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19291 comm="syz.5.2986" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 1915.872214][ T428] bridge_slave_1: left promiscuous mode [ 1915.877736][T19303] loop5: detected capacity change from 0 to 256 [ 1915.887707][ T428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1915.899659][T19303] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1915.940622][ T428] bridge_slave_0: left allmulticast mode [ 1915.948566][T19303] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1915.967907][ T428] bridge_slave_0: left promiscuous mode [ 1915.991013][ T428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1916.069545][T19303] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1916.165955][T19303] exFAT-fs (loop5): failed to load alloc-bitmap [ 1916.172919][T19303] exFAT-fs (loop5): failed to recognize exfat type [ 1917.101546][T19315] netlink: 27 bytes leftover after parsing attributes in process `syz.7.2991'. [ 1917.543970][ T428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1917.598025][ T428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1917.649455][ T428] bond0 (unregistering): Released all slaves [ 1917.883789][T18882] veth0_macvtap: entered promiscuous mode [ 1917.910657][T14454] Bluetooth: hci0: command tx timeout [ 1918.195177][ T428] hsr_slave_0: left promiscuous mode [ 1918.243401][ T428] hsr_slave_1: left promiscuous mode [ 1918.258695][ T428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1918.282205][ T428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1918.303344][ T428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1918.335292][ T428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1918.455177][ T428] veth1_macvtap: left promiscuous mode [ 1918.477937][ T428] veth0_macvtap: left promiscuous mode [ 1918.490290][ T428] veth1_vlan: left promiscuous mode [ 1918.503411][ T428] veth0_vlan: left promiscuous mode [ 1919.451210][T16898] Bluetooth: hci1: command 0x0406 tx timeout [ 1919.723759][T19350] loop5: detected capacity change from 0 to 7 [ 1919.744760][T19350] loop5: [ 1919.757105][T19350] loop5: partition table partially beyond EOD, truncated [ 1920.346633][ T428] team0 (unregistering): Port device team_slave_1 removed [ 1920.479647][ T428] team0 (unregistering): Port device team_slave_0 removed [ 1920.905863][ T7843] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1920.957370][T18882] veth1_macvtap: entered promiscuous mode [ 1921.099131][ T7843] usb 6-1: Using ep0 maxpacket: 8 [ 1921.137762][ T7843] usb 6-1: config 0 has an invalid interface number: 96 but max is 0 [ 1921.178769][ T7843] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1921.217749][T18882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1921.228757][ T7843] usb 6-1: config 0 has no interface number 0 [ 1921.260986][ T7843] usb 6-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1921.299410][ T7843] usb 6-1: config 0 interface 96 altsetting 3 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1921.305956][T18882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1921.369569][ T7843] usb 6-1: config 0 interface 96 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1921.405390][ T7843] usb 6-1: config 0 interface 96 has no altsetting 0 [ 1921.448631][ T7843] usb 6-1: New USB device found, idVendor=0b57, idProduct=76aa, bcdDevice=46.5f [ 1921.478235][ T7843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.505737][T18033] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1921.520311][ T7843] usb 6-1: Product: syz [ 1921.533564][T18033] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1921.543679][ T7843] usb 6-1: Manufacturer: syz [ 1921.553718][ T7843] usb 6-1: SerialNumber: syz [ 1921.574292][T18033] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1921.809269][ T7843] usb 6-1: config 0 descriptor?? [ 1922.369238][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.273139][ T7843] usb 6-1: USB disconnect, device number 5 [ 1926.292012][T14454] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1926.301553][T14454] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1926.313944][T14454] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1926.339925][T14454] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1926.358317][T14454] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1927.145974][T19204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1927.176088][T19204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1927.208627][T19204] bridge_slave_0: entered allmulticast mode [ 1927.257346][T19204] bridge_slave_0: entered promiscuous mode [ 1927.336758][T19204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1927.372394][T19204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1927.398045][T19204] bridge_slave_1: entered allmulticast mode [ 1927.443737][T19204] bridge_slave_1: entered promiscuous mode [ 1927.853686][T19204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1927.933101][T19204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1928.164409][T19421] loop7: detected capacity change from 0 to 1024 [ 1928.191075][T19421] EXT4-fs: Ignoring removed mblk_io_submit option [ 1928.282414][T19421] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1928.374407][T19425] loop5: detected capacity change from 0 to 2048 [ 1928.387254][T19425] udf: Bad value for 'anchor' [ 1928.591439][ T5781] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1928.610339][T16898] Bluetooth: hci2: command tx timeout [ 1928.660719][T19204] team0: Port device team_slave_0 added [ 1928.706048][T19204] team0: Port device team_slave_1 added [ 1928.759620][T19425] loop5: detected capacity change from 0 to 512 [ 1928.767839][ T5781] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1928.822526][T17375] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1928.956222][T19425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1929.083084][T19425] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1929.512053][T17608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1929.895112][ T5781] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1930.004025][ T5224] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1930.399589][ T5781] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1930.733635][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1930.733789][ T29] audit: type=1326 audit(1778444117.694:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19459 comm="syz.7.3030" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7f79cdd9 code=0x7ffc0000 [ 1930.814987][ T29] audit: type=1326 audit(1778444117.703:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19459 comm="syz.7.3030" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7f79cdd9 code=0x7ffc0000 [ 1930.850136][T16898] Bluetooth: hci2: command tx timeout [ 1930.857751][ T29] audit: type=1326 audit(1778444117.741:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19459 comm="syz.7.3030" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7f79cdd9 code=0x7ffc0000 [ 1930.884238][ T29] audit: type=1326 audit(1778444117.741:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19459 comm="syz.7.3030" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7f79cdd9 code=0x7ffc0000 [ 1930.911005][ T29] audit: type=1326 audit(1778444117.741:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19459 comm="syz.7.3030" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f3e7f79cdd9 code=0x7ffc0000 [ 1930.945135][ T29] audit: type=1326 audit(1778444117.741:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19459 comm="syz.7.3030" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7f79cdd9 code=0x7ffc0000 [ 1930.972382][ T29] audit: type=1326 audit(1778444117.741:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19459 comm="syz.7.3030" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3e7f79cdd9 code=0x7ffc0000 [ 1930.998565][ T29] audit: type=1326 audit(1778444117.741:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19459 comm="syz.7.3030" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7f79cdd9 code=0x7ffc0000 [ 1931.028603][ T29] audit: type=1326 audit(1778444117.741:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19459 comm="syz.7.3030" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3e7f79cdd9 code=0x7ffc0000 [ 1931.225398][T19204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1931.296618][T19204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1931.414770][T19204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1931.595529][T19204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1931.636196][T19204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1931.699272][T19204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1932.164746][T19204] hsr_slave_0: entered promiscuous mode [ 1932.201480][T19204] hsr_slave_1: entered promiscuous mode [ 1932.226898][T19204] debugfs: 'hsr0' already exists in 'hsr' [ 1932.240428][T19204] Cannot create hsr debugfs directory [ 1932.285226][T19477] loop7: detected capacity change from 0 to 256 [ 1932.386451][T19477] exFAT-fs (loop7): failed to load upcase table (idx : 0x000101ff, chksum : 0x66f7cbb2, utbl_chksum : 0xe619d30d) [ 1932.417788][T19477] exFAT-fs (loop7): failed to load alloc-bitmap [ 1932.426032][T19477] exFAT-fs (loop7): failed to recognize exfat type [ 1933.054470][T16898] Bluetooth: hci2: command tx timeout [ 1935.168955][T19487] loop7: detected capacity change from 0 to 16 [ 1935.289888][T16898] Bluetooth: hci2: command tx timeout [ 1935.337567][T19487] erofs (device loop7): algorithm 1 isn't enabled on this kernel [ 1936.087594][T19495] fuseblk: block size(7680) > page size(4096) not supported by filesystem [ 1936.344273][T19501] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3043'. [ 1936.454266][ T5781] bridge_slave_1: left allmulticast mode [ 1936.472124][ T5781] bridge_slave_1: left promiscuous mode [ 1936.496099][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1936.555306][ T5781] bridge_slave_0: left allmulticast mode [ 1936.571695][ T5781] bridge_slave_0: left promiscuous mode [ 1936.578607][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1936.737928][T19510] loop7: detected capacity change from 0 to 256 [ 1936.837237][T19510] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1936.861948][T19510] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1936.905535][T19510] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1936.932439][ T29] audit: type=1800 audit(1778444123.491:187): pid=19510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3046" name="file1" dev="loop7" ino=1048746 res=0 errno=0 [ 1938.267746][T19514] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1938.396975][T19514] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1938.435460][T19514] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1938.991565][ T5781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1939.128605][ T5781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1939.271651][ T5781] bond0 (unregistering): Released all slaves [ 1940.358196][T19503] batadv_slave_1: entered promiscuous mode [ 1940.371268][T19507] batadv_slave_1: left promiscuous mode [ 1940.822075][T19519] loop7: detected capacity change from 0 to 256 [ 1940.833466][T19519] exFAT-fs (loop7): bogus data start sector [ 1940.849306][T19519] exFAT-fs (loop7): failed to read boot sector [ 1940.856956][T19519] exFAT-fs (loop7): failed to recognize exfat type [ 1940.938165][ T5781] hsr_slave_0: left promiscuous mode [ 1940.963786][ T5781] hsr_slave_1: left promiscuous mode [ 1940.988164][ T5781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1941.010089][ T5781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1941.033848][ T5781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1941.057215][ T5781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1941.133764][ T5781] veth1_macvtap: left promiscuous mode [ 1941.140221][ T5781] veth0_macvtap: left promiscuous mode [ 1941.147377][ T5781] veth1_vlan: left promiscuous mode [ 1941.156563][ T5781] veth0_vlan: left promiscuous mode [ 1942.386566][ T5781] team0 (unregistering): Port device team_slave_1 removed [ 1942.414938][ T5781] team0 (unregistering): Port device team_slave_0 removed [ 1943.321491][T19542] loop7: detected capacity change from 0 to 256 [ 1943.427537][T19542] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1950.728210][T19204] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1950.868286][T19204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1950.916096][T19204] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1950.989495][T19204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1951.017803][T19204] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1951.072970][T19204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1951.099573][T19204] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1951.174271][T19204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1957.936837][T19394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1959.001680][T19394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1959.901286][T19394] bridge_slave_0: entered allmulticast mode [ 1959.965321][T19394] bridge_slave_0: entered promiscuous mode [ 1960.102183][T19394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1960.133300][T19394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1960.151496][T19394] bridge_slave_1: entered allmulticast mode [ 1960.195458][T19394] bridge_slave_1: entered promiscuous mode [ 1960.329684][T19590] loop7: detected capacity change from 0 to 2048 [ 1960.385313][T19590] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 1960.475041][T19590] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1960.586367][T19394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1960.687623][T19394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1961.131836][T19394] team0: Port device team_slave_0 added [ 1961.199846][T19394] team0: Port device team_slave_1 added [ 1961.549327][T19605] loop5: detected capacity change from 0 to 1024 [ 1962.961985][ T5224] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1963.351906][T19394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1963.379446][T19394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1963.464141][T19394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1963.553943][T19394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1963.583151][T19394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1963.662691][T19394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1964.215606][T19632] loop2: detected capacity change from 0 to 7 [ 1964.244986][T19394] hsr_slave_0: entered promiscuous mode [ 1964.262927][T19632] Dev loop2: unable to read RDB block 7 [ 1964.270723][T19394] hsr_slave_1: entered promiscuous mode [ 1964.280964][T19632] loop2: AHDI p1 p2 p3 [ 1964.304344][T19632] loop2: partition table partially beyond EOD, truncated [ 1964.312848][T19394] debugfs: 'hsr0' already exists in 'hsr' [ 1964.318732][T19632] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1964.318856][T19632] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1964.357888][T19394] Cannot create hsr debugfs directory [ 1964.408457][T19635] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1964.471936][T19635] Bluetooth: MGMT ver 1.23 [ 1965.466976][T19204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1965.706135][T19655] loop7: detected capacity change from 0 to 512 [ 1965.735363][T19655] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1965.803966][T19655] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 1965.814300][T19655] System zones: 1-12 [ 1965.846383][T19655] EXT4-fs (loop7): 1 truncate cleaned up [ 1965.865171][T19655] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1966.098528][T19656] loop5: detected capacity change from 0 to 512 [ 1966.225922][T19656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1966.258052][T19656] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1966.283412][T17375] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1966.284615][T19662] pimreg: entered allmulticast mode [ 1966.688212][T19204] 8021q: adding VLAN 0 to HW filter on device team0 [ 1966.818768][T17608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1966.897961][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1966.905590][ T5781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1967.191356][T18033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1967.199127][T18033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1967.297264][T16898] Bluetooth: hci1: unexpected event for opcode 0x0c12 [ 1967.321153][T19673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1969.020892][T19394] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1969.455412][T19394] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1969.690902][T19394] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1970.044430][T19394] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1970.423593][T19394] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1970.782240][T19394] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1970.972256][T19394] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1971.357439][T19394] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1973.126629][T19394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1973.405298][T19394] 8021q: adding VLAN 0 to HW filter on device team0 [ 1973.494016][T19717] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1973.507515][T19717] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1973.518185][T19717] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1973.541717][T19717] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1973.562720][T19717] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1973.596662][ T428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1973.604335][ T428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1973.847481][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1973.855140][ T5878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1974.101775][T19722] loop7: detected capacity change from 0 to 1024 [ 1974.178783][T19717] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1974.199426][T19722] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1974.241369][T19722] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1974.274292][T19722] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 1975.750889][T16898] Bluetooth: hci5: command tx timeout [ 1976.949986][ T8968] bridge_slave_1: left allmulticast mode [ 1976.988197][ T8968] bridge_slave_1: left promiscuous mode [ 1977.012554][ T8968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1977.092961][ T8968] bridge_slave_0: left allmulticast mode [ 1977.127718][ T8968] bridge_slave_0: left promiscuous mode [ 1977.134069][T19765] loop5: detected capacity change from 0 to 8 [ 1977.172026][ T8968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1977.641630][T19769] loop7: detected capacity change from 0 to 256 [ 1977.689135][T19769] exfat: Invalid uid '0x00000000ffffffff' [ 1977.948744][ T29] audit: type=1326 audit(1778444161.845:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19771 comm="syz.5.3119" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 1977.993357][T16898] Bluetooth: hci5: command tx timeout [ 1978.041560][ T29] audit: type=1326 audit(1778444161.854:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19771 comm="syz.5.3119" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 1978.071111][ T29] audit: type=1326 audit(1778444161.882:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19771 comm="syz.5.3119" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 1978.108934][ T29] audit: type=1326 audit(1778444161.882:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19771 comm="syz.5.3119" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 1978.172439][ T29] audit: type=1326 audit(1778444161.892:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19771 comm="syz.5.3119" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 1978.267754][ T29] audit: type=1326 audit(1778444161.929:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19771 comm="syz.5.3119" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 1978.343129][ T29] audit: type=1326 audit(1778444161.929:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19771 comm="syz.5.3119" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 1978.510292][ T29] audit: type=1326 audit(1778444161.929:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19771 comm="syz.5.3119" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 1978.595997][ T29] audit: type=1326 audit(1778444161.948:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19771 comm="syz.5.3119" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 1978.667004][ T8968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1978.708681][ T29] audit: type=1326 audit(1778444161.948:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19771 comm="syz.5.3119" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 1978.771207][ T8968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1978.816682][ T8968] bond0 (unregistering): Released all slaves [ 1979.214519][ T8968] hsr_slave_0: left promiscuous mode [ 1979.286001][ T8968] hsr_slave_1: left promiscuous mode [ 1979.315021][ T8968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1979.388226][ T8968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1979.613707][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1979.622552][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1980.197565][T16898] Bluetooth: hci5: command tx timeout [ 1980.748825][ T8968] team0 (unregistering): Port device team_slave_1 removed [ 1980.855953][ T8968] team0 (unregistering): Port device team_slave_0 removed [ 1981.443235][T19809] netlink: 'syz.5.3131': attribute type 3 has an invalid length. [ 1982.422030][T16898] Bluetooth: hci5: command tx timeout [ 1983.855683][T19394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1986.107740][T19716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1986.132532][T19716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1986.162697][T19716] bridge_slave_0: entered allmulticast mode [ 1986.195361][T19716] bridge_slave_0: entered promiscuous mode [ 1986.252479][T19716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1986.294197][T19716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1986.321029][T19716] bridge_slave_1: entered allmulticast mode [ 1986.355876][T19716] bridge_slave_1: entered promiscuous mode [ 1986.635336][T19716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1986.682963][T19716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1986.902354][T19716] team0: Port device team_slave_0 added [ 1986.982347][T19716] team0: Port device team_slave_1 added [ 1987.341147][T19716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1987.369468][T19716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1987.450942][T19716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1987.511306][T19716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1987.545182][T19716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1987.627142][T19716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1988.253367][T19716] hsr_slave_0: entered promiscuous mode [ 1988.275834][T19716] hsr_slave_1: entered promiscuous mode [ 1988.293026][T19716] debugfs: 'hsr0' already exists in 'hsr' [ 1988.314136][T19716] Cannot create hsr debugfs directory [ 1988.621920][T19887] loop7: detected capacity change from 0 to 512 [ 1988.638994][T19394] veth0_vlan: entered promiscuous mode [ 1988.703900][T19887] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.3148: inode has both inline data and extents flags [ 1988.734902][T19887] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1988.741613][T19887] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.3148: couldn't read orphan inode 15 (err -117) [ 1988.751286][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1988.751389][ C0] EXT4-fs (loop7): initial error at time 1778444171: ext4_orphan_get:1397: inode 15 [ 1988.751636][ C0] EXT4-fs (loop7): last error at time 1778444171: ext4_orphan_get:1397: inode 15 [ 1988.875166][T19887] loop7: lost filesystem error report for type 5 error -117 [ 1988.886624][T19887] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1989.552163][T17375] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1990.835023][T19717] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1990.852502][T19717] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1990.862799][T19717] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1990.885570][T19717] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1990.907628][T19717] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1991.407388][T19716] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1991.487000][T19923] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3157'. [ 1991.526872][T19716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1991.558615][T19716] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1991.692156][T19716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1991.731978][T19716] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1991.839883][T19716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1991.901131][T19716] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1992.028681][T19716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1994.775071][T19717] Bluetooth: hci0: command tx timeout [ 1997.985794][T19717] Bluetooth: hci0: command tx timeout [ 1999.886099][T19965] netlink: 'syz.5.3169': attribute type 3 has an invalid length. [ 2000.029573][T19716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2000.147767][T16898] Bluetooth: hci0: command tx timeout [ 2000.438089][ T1140] bridge_slave_1: left allmulticast mode [ 2000.465188][ T1140] bridge_slave_1: left promiscuous mode [ 2000.508731][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 2000.559061][ T1140] bridge_slave_0: left allmulticast mode [ 2000.584100][ T1140] bridge_slave_0: left promiscuous mode [ 2000.608758][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 2001.327472][T19984] loop5: detected capacity change from 0 to 256 [ 2001.393077][T19984] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 2001.619227][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2001.620270][T19986] netlink: 'syz.3.3178': attribute type 3 has an invalid length. [ 2001.685013][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2001.711016][ T1140] bond0 (unregistering): Released all slaves [ 2002.114166][T19716] 8021q: adding VLAN 0 to HW filter on device team0 [ 2002.123861][T19991] loop5: detected capacity change from 0 to 1024 [ 2002.237468][ T1140] hsr_slave_0: left promiscuous mode [ 2002.251695][T19991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2002.267236][ T1140] hsr_slave_1: left promiscuous mode [ 2002.284576][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2002.312321][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2002.357738][T16898] Bluetooth: hci0: command tx timeout [ 2002.381629][ T1140] veth0_vlan: left promiscuous mode [ 2002.635110][T19998] loop7: detected capacity change from 0 to 1024 [ 2002.762028][T17608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2002.774422][T19998] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 2002.900179][T19998] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2003.068196][T19998] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 3: comm syz.7.3181: lblock 3 mapped to illegal pblock 3 (length 3) [ 2003.136934][T19998] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 2003.169536][T19998] EXT4-fs (loop7): This should not happen!! Data will be lost [ 2003.169536][T19998] [ 2003.288360][T20006] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.3181: lblock 3 mapped to illegal pblock 3 (length 1) [ 2003.333293][T20008] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 4: comm syz.7.3181: lblock 4 mapped to illegal pblock 4 (length 2) [ 2003.402189][T20006] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.3181: lblock 3 mapped to illegal pblock 3 (length 1) [ 2003.450058][T20008] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 4: comm syz.7.3181: lblock 4 mapped to illegal pblock 4 (length 2) [ 2003.494702][T20013] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 4: comm syz.7.3181: lblock 4 mapped to illegal pblock 4 (length 2) [ 2003.562883][T20013] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 4: comm syz.7.3181: lblock 4 mapped to illegal pblock 4 (length 2) [ 2003.571675][T20006] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.3181: lblock 3 mapped to illegal pblock 3 (length 1) [ 2003.626160][T20006] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.3181: lblock 3 mapped to illegal pblock 3 (length 1) [ 2003.667733][T20006] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.3181: lblock 3 mapped to illegal pblock 3 (length 1) [ 2004.080813][ T428] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 2004.125661][ T428] EXT4-fs (loop7): This should not happen!! Data will be lost [ 2004.125661][ T428] [ 2004.174276][T17375] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 2004.219933][T17375] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 2004.255027][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 2004.365859][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 2005.234551][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state [ 2005.242337][ T5902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2005.479514][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state [ 2005.487266][ T5902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2014.867137][T20070] No such timeout policy "syz1" [ 2016.998233][T20078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3200'. [ 2018.099284][T20092] netlink: 'syz.3.3204': attribute type 1 has an invalid length. [ 2018.157215][T20092] netlink: 'syz.3.3204': attribute type 8 has an invalid length. [ 2018.193876][T20092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3204'. [ 2018.381888][T19911] bridge0: port 1(bridge_slave_0) entered blocking state [ 2018.401919][T19911] bridge0: port 1(bridge_slave_0) entered disabled state [ 2018.409649][T19911] bridge_slave_0: entered allmulticast mode [ 2018.436268][T19911] bridge_slave_0: entered promiscuous mode [ 2018.478691][T19911] bridge0: port 2(bridge_slave_1) entered blocking state [ 2018.504230][T19911] bridge0: port 2(bridge_slave_1) entered disabled state [ 2018.531437][T19911] bridge_slave_1: entered allmulticast mode [ 2018.555145][T19911] bridge_slave_1: entered promiscuous mode [ 2018.895207][T19911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2018.982252][T19911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2019.243876][T19911] team0: Port device team_slave_0 added [ 2019.347368][T19911] team0: Port device team_slave_1 added [ 2019.454560][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 2019.454634][ T29] audit: type=1326 audit(1778444200.647:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20105 comm="syz.5.3208" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 2019.567948][ T29] audit: type=1326 audit(1778444200.694:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20105 comm="syz.5.3208" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 2019.667415][T19911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2019.695711][T19911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2019.698935][ T29] audit: type=1326 audit(1778444200.713:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20105 comm="syz.5.3208" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 2019.805475][T19911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2019.847441][T19911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2019.854946][T19911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2019.906623][T19911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2019.967061][ T29] audit: type=1326 audit(1778444200.713:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20105 comm="syz.5.3208" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 2020.103254][ T29] audit: type=1326 audit(1778444200.722:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20105 comm="syz.5.3208" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 2020.135202][T19716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2020.176389][ T29] audit: type=1326 audit(1778444200.722:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20105 comm="syz.5.3208" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 2020.275720][ T29] audit: type=1326 audit(1778444200.722:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20105 comm="syz.5.3208" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 2020.378162][ T29] audit: type=1326 audit(1778444200.750:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20105 comm="syz.5.3208" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 2020.454843][ T29] audit: type=1326 audit(1778444200.750:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20105 comm="syz.5.3208" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 2020.480466][T19911] hsr_slave_0: entered promiscuous mode [ 2020.510977][T19911] hsr_slave_1: entered promiscuous mode [ 2020.519978][ T29] audit: type=1326 audit(1778444200.750:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20105 comm="syz.5.3208" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfe19cdd9 code=0x7ffc0000 [ 2020.548297][T19911] debugfs: 'hsr0' already exists in 'hsr' [ 2020.554746][T19911] Cannot create hsr debugfs directory [ 2029.389503][T20127] loop5: detected capacity change from 0 to 1024 [ 2029.510015][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 2029.510089][ T29] audit: type=1800 audit(1778444210.053:214): pid=20127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3214" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 2035.293325][T16646] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 2040.071616][T20148] netlink: 'syz.5.3222': attribute type 16 has an invalid length. [ 2040.108121][T19911] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2040.125441][T20148] netlink: 64130 bytes leftover after parsing attributes in process `syz.5.3222'. [ 2040.203724][T19911] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2040.227610][T19911] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2040.311245][T19911] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2040.345277][T19911] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2040.466239][T19911] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2040.497995][T19717] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2040.507502][T19717] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2040.525972][T19717] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2040.545508][T19717] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2040.557309][T19717] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2040.581696][T19911] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2040.706502][T19911] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2041.425183][T20165] loop7: detected capacity change from 0 to 8 [ 2042.403258][T19911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2043.606174][T19717] Bluetooth: hci2: command tx timeout [ 2045.325906][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 2045.337901][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 2045.384687][T19911] 8021q: adding VLAN 0 to HW filter on device team0 [ 2045.616887][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state [ 2045.624554][ T5902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2045.823016][T19717] Bluetooth: hci2: command tx timeout [ 2046.091826][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 2046.099345][ T5781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2046.476587][T20188] loop5: detected capacity change from 0 to 2048 [ 2046.594898][T20188] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2046.786635][T20188] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 2046.857847][T20188] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 2046.893991][T20188] EXT4-fs (loop5): This should not happen!! Data will be lost [ 2046.893991][T20188] [ 2046.955200][T20188] EXT4-fs (loop5): Total free blocks count 0 [ 2047.006292][T20188] EXT4-fs (loop5): Free/Dirty block details [ 2047.051767][T20188] EXT4-fs (loop5): free_blocks=66060288 [ 2047.110862][T20188] EXT4-fs (loop5): dirty_blocks=64 [ 2047.129126][T20188] EXT4-fs (loop5): Block reservation details [ 2047.149809][T20188] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 2047.319567][ T8968] bridge_slave_1: left allmulticast mode [ 2047.335474][ T8968] bridge_slave_1: left promiscuous mode [ 2047.353787][ T8968] bridge0: port 2(bridge_slave_1) entered disabled state [ 2047.423653][T18098] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 2047.439245][ T8968] bridge_slave_0: left allmulticast mode [ 2047.447752][ T8968] bridge_slave_0: left promiscuous mode [ 2047.465638][ T8968] bridge0: port 1(bridge_slave_0) entered disabled state [ 2047.486554][T17608] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 2048.052239][T19717] Bluetooth: hci2: command tx timeout [ 2048.520752][T20211] loop5: detected capacity change from 0 to 1024 [ 2048.551529][T20211] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 2048.551529][T20211] [ 2048.720011][ T8968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2049.015587][ T8968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2049.176647][ T8968] bond0 (unregistering): Released all slaves [ 2049.760667][T20223] support for cryptoloop has been removed. Use dm-crypt instead. [ 2050.177087][ T8968] hsr_slave_0: left promiscuous mode [ 2050.273396][T19717] Bluetooth: hci2: command tx timeout [ 2050.301644][ T8968] hsr_slave_1: left promiscuous mode [ 2050.355282][ T8968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2050.500644][ T8968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2054.099065][ T8968] team0 (unregistering): Port device team_slave_1 removed [ 2054.258903][ T8968] team0 (unregistering): Port device team_slave_0 removed [ 2056.291396][T16898] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2056.303675][T16898] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2056.316612][T16898] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2056.331694][T16898] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2056.344335][T16898] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2056.357652][T20268] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3252'. [ 2058.572036][T16898] Bluetooth: hci5: command tx timeout [ 2058.721430][T16646] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2058.928560][T16646] usb 6-1: Using ep0 maxpacket: 8 [ 2058.972756][T16646] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 2059.007932][T16646] usb 6-1: config 0 has no interface number 0 [ 2059.045102][T16646] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2059.073485][T16646] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.095820][T16646] usb 6-1: Product: syz [ 2059.111047][T16646] usb 6-1: Manufacturer: syz [ 2059.127690][T16646] usb 6-1: SerialNumber: syz [ 2059.151699][T16646] usb 6-1: config 0 descriptor?? [ 2059.334924][T20151] bridge0: port 1(bridge_slave_0) entered blocking state [ 2059.383250][T20151] bridge0: port 1(bridge_slave_0) entered disabled state [ 2059.421693][T16646] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 2059.424091][T20151] bridge_slave_0: entered allmulticast mode [ 2059.445126][T16646] uvcvideo 6-1:0.31: Failed to initialize entity for entity 32774 [ 2059.445245][T16646] uvcvideo 6-1:0.31: Failed to register entities (-22). [ 2059.567257][T20151] bridge_slave_0: entered promiscuous mode [ 2059.607458][T20316] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3262'. [ 2059.712585][T20151] bridge0: port 2(bridge_slave_1) entered blocking state [ 2059.742668][T20151] bridge0: port 2(bridge_slave_1) entered disabled state [ 2059.771422][T20151] bridge_slave_1: entered allmulticast mode [ 2059.797852][T20151] bridge_slave_1: entered promiscuous mode [ 2060.544583][T20151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2060.624036][T20151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2060.807694][T16898] Bluetooth: hci5: command tx timeout [ 2060.928072][T20331] loop7: detected capacity change from 0 to 128 [ 2060.986997][T20331] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2061.015288][T20331] ext4 filesystem being mounted at /172/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2061.148260][T20151] team0: Port device team_slave_0 added [ 2061.359458][T20151] team0: Port device team_slave_1 added [ 2061.575970][ T5681] usb 6-1: USB disconnect, device number 7 [ 2062.023079][T20151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2062.049462][T20151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2062.049660][T17375] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2062.137715][T20151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2062.279985][T20151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2062.302604][T20151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2062.366063][T20151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2062.458538][ T8968] bridge_slave_1: left allmulticast mode [ 2062.474948][ T8968] bridge_slave_1: left promiscuous mode [ 2062.491207][ T8968] bridge0: port 2(bridge_slave_1) entered disabled state [ 2062.596826][ T8968] bridge_slave_0: left allmulticast mode [ 2062.603149][ T8968] bridge_slave_0: left promiscuous mode [ 2062.621165][ T8968] bridge0: port 1(bridge_slave_0) entered disabled state [ 2063.021827][T16898] Bluetooth: hci5: command tx timeout [ 2063.691170][ T8968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2063.780546][ T8968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2063.840841][ T8968] bond0 (unregistering): Released all slaves [ 2064.167205][T20373] cgroup: Unexpected value for 'all' [ 2064.269430][ T8968] hsr_slave_0: left promiscuous mode [ 2064.306305][ T8968] hsr_slave_1: left promiscuous mode [ 2064.332023][ T8968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2064.374982][T20374] loop5: detected capacity change from 0 to 2048 [ 2064.386446][ T8968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2064.558605][T20374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2064.697336][T20374] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #12: block 2: comm syz.5.3276: lblock 0 mapped to illegal pblock 2 (length 1) [ 2065.028569][T17608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2065.245398][T16898] Bluetooth: hci5: command tx timeout [ 2065.436869][ T8968] team0 (unregistering): Port device team_slave_1 removed [ 2065.558132][ T8968] team0 (unregistering): Port device team_slave_0 removed [ 2066.540574][T20151] hsr_slave_0: entered promiscuous mode [ 2066.568074][T20151] hsr_slave_1: entered promiscuous mode [ 2066.604087][T20151] debugfs: 'hsr0' already exists in 'hsr' [ 2066.626767][T20151] Cannot create hsr debugfs directory [ 2066.754620][T20395] syz_tun: entered allmulticast mode [ 2066.773765][T20395] syz_tun: left allmulticast mode [ 2066.857284][T20397] pimreg: entered allmulticast mode [ 2069.553046][T20266] bridge0: port 1(bridge_slave_0) entered blocking state [ 2069.580166][T20266] bridge0: port 1(bridge_slave_0) entered disabled state [ 2069.603577][T20266] bridge_slave_0: entered allmulticast mode [ 2069.647245][T20266] bridge_slave_0: entered promiscuous mode [ 2069.714999][T20266] bridge0: port 2(bridge_slave_1) entered blocking state [ 2069.743724][T20266] bridge0: port 2(bridge_slave_1) entered disabled state [ 2069.781276][T20266] bridge_slave_1: entered allmulticast mode [ 2069.808661][T20266] bridge_slave_1: entered promiscuous mode [ 2072.641283][T20266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2073.280625][T20266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2073.704092][T20266] team0: Port device team_slave_0 added [ 2073.793675][T20266] team0: Port device team_slave_1 added [ 2073.922115][T20151] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2074.005346][T20151] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2074.046960][T20151] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2074.107799][T20151] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2074.228275][T20151] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2074.315939][T20151] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2074.343096][T20266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2074.358392][T20266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2074.387769][T20266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2074.408473][T20266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2074.424706][T20266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2074.456838][T20266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2074.607343][T20151] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2074.664857][T20151] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2075.063715][T20266] hsr_slave_0: entered promiscuous mode [ 2075.097394][T20266] hsr_slave_1: entered promiscuous mode [ 2075.119891][T20266] debugfs: 'hsr0' already exists in 'hsr' [ 2075.136633][T20266] Cannot create hsr debugfs directory [ 2077.660389][T20151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2077.926359][T20266] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2077.996377][T20266] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2078.023782][T20266] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2078.122481][T20266] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2078.161240][T20266] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2078.239311][T20266] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2078.291959][T20151] 8021q: adding VLAN 0 to HW filter on device team0 [ 2078.347012][T20266] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2078.374306][T20519] netlink: 'syz.5.3317': attribute type 13 has an invalid length. [ 2078.425827][T20266] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2078.495002][ T428] bridge0: port 1(bridge_slave_0) entered blocking state [ 2078.502907][ T428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2078.708439][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 2078.716410][ T5878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2080.184991][T20266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2080.573404][T20266] 8021q: adding VLAN 0 to HW filter on device team0 [ 2080.713953][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state [ 2080.721674][ T5902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2080.905699][T18098] bridge0: port 2(bridge_slave_1) entered blocking state [ 2080.913264][T18098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2081.693825][T20554] loop5: detected capacity change from 0 to 2048 [ 2081.743465][T20554] EXT4-fs: Ignoring removed i_version option [ 2081.875801][T20554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 2082.257091][T17608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2082.678100][T20573] loop7: detected capacity change from 0 to 128 [ 2082.804930][T20573] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2082.845384][T20573] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2083.387717][T17375] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2083.429113][T16898] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 2083.762360][ T29] audit: type=1326 audit(1778444260.786:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20587 comm="syz.3.3337" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284739cdd9 code=0x7ffc0000 [ 2083.868644][ T29] audit: type=1326 audit(1778444260.815:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20587 comm="syz.3.3337" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284739cdd9 code=0x7ffc0000 [ 2083.969652][ T29] audit: type=1326 audit(1778444260.843:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20587 comm="syz.3.3337" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f284739cdd9 code=0x7ffc0000 [ 2084.104844][ T29] audit: type=1326 audit(1778444260.843:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20587 comm="syz.3.3337" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284739cdd9 code=0x7ffc0000 [ 2084.228833][T20151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2084.241176][ T29] audit: type=1326 audit(1778444260.843:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20587 comm="syz.3.3337" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284739cdd9 code=0x7ffc0000 [ 2085.032818][T20151] veth0_vlan: entered promiscuous mode [ 2085.178385][T20151] veth1_vlan: entered promiscuous mode [ 2085.524921][ T5224] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2085.713075][T20151] veth0_macvtap: entered promiscuous mode [ 2085.912108][T20266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2085.944264][T20151] veth1_macvtap: entered promiscuous mode [ 2085.960724][T20618] loop7: detected capacity change from 0 to 1024 [ 2086.033408][T20618] EXT4-fs: Ignoring removed mblk_io_submit option [ 2086.159613][T20618] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2086.181469][T20151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2086.305486][T20151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2086.465151][ T428] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.522782][ T428] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.588851][ T428] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.640886][ T428] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.791564][T17375] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2088.690004][T16898] Bluetooth: hci3: unexpected event for opcode 0x042c [ 2090.940360][T20266] veth0_vlan: entered promiscuous mode [ 2091.082596][T20266] veth1_vlan: entered promiscuous mode [ 2091.586691][T20685] netlink: 778 bytes leftover after parsing attributes in process `syz.7.3360'. [ 2091.648248][T20266] veth0_macvtap: entered promiscuous mode [ 2091.765776][T20266] veth1_macvtap: entered promiscuous mode [ 2091.927631][ T5224] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2092.121829][T20266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2092.279396][T20266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2094.403949][ T8967] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2094.419825][ T8967] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.128184][ T8967] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.159346][T20695] sit0: entered promiscuous mode [ 2097.174039][T20695] netlink: 'syz.7.3363': attribute type 1 has an invalid length. [ 2097.182177][T20695] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3363'. [ 2097.207698][ T5902] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.357945][T20703] loop5: detected capacity change from 0 to 1024 [ 2097.479382][T20703] hfsplus: failed to load extents file [ 2098.061029][T20712] netlink: 63 bytes leftover after parsing attributes in process `syz.3.3365'. [ 2098.149861][T20703] loop5: detected capacity change from 0 to 4096 [ 2098.279530][T20703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2098.467412][ T29] audit: type=1800 audit(1778444274.522:220): pid=20703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3364" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 2098.553399][T20711] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2098.943379][T20712] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 2099.204880][T17608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2100.923324][T20741] loop7: detected capacity change from 0 to 2048 [ 2100.923364][ T8967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2100.923451][ T8967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2100.974371][T20741] udf: Bad value for 'session' [ 2101.948998][ T5224] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2102.465744][T20761] loop5: detected capacity change from 0 to 128 [ 2102.624503][T20761] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2102.690511][T20761] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2102.845856][T20767] loop7: detected capacity change from 0 to 512 [ 2103.010637][T20767] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2103.101976][T20767] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2103.143576][T20767] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #2: comm syz.7.3376: corrupted inode contents [ 2103.208817][T20767] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #2: comm syz.7.3376: mark_inode_dirty error [ 2103.269544][T20767] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #2: comm syz.7.3376: corrupted inode contents [ 2103.321001][T19717] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2103.330243][T19717] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2103.344499][T19717] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2103.361856][T19717] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2103.374176][T19717] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2103.395411][T20772] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #2: comm syz.7.3376: corrupted inode contents [ 2103.418364][T17608] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2103.563604][T20772] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #2: comm syz.7.3376: mark_inode_dirty error [ 2103.626488][T20772] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #2: comm syz.7.3376: corrupted inode contents [ 2103.699887][T20772] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.3376: mark_inode_dirty error [ 2104.141636][T17375] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2104.898192][T20796] loop5: detected capacity change from 0 to 256 [ 2104.929772][T20796] exfat: Invalid uid '0x00000000ffffffff' [ 2104.940904][ T8968] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2105.172605][ T8968] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2107.160108][T16898] Bluetooth: hci0: command tx timeout [ 2109.395100][T19717] Bluetooth: hci0: command tx timeout [ 2110.577282][ T8968] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2111.555933][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 2111.556181][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 2111.715603][T19717] Bluetooth: hci0: command tx timeout [ 2111.972684][ T8968] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2112.132519][T20810] fuse: Bad value for 'fd' [ 2112.162998][T20811] loop5: detected capacity change from 0 to 256 [ 2112.928934][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2112.947717][ T8968] bridge_slave_1: left allmulticast mode [ 2112.999473][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2113.007516][ T8968] bridge_slave_1: left promiscuous mode [ 2113.031619][ T8968] bridge0: port 2(bridge_slave_1) entered disabled state [ 2113.159151][ T8968] bridge_slave_0: left allmulticast mode [ 2113.217938][ T8968] bridge_slave_0: left promiscuous mode [ 2113.238499][ T8968] bridge0: port 1(bridge_slave_0) entered disabled state [ 2113.527774][T19619] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 2113.752506][T19619] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2113.803974][T19619] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2113.834330][T19619] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2113.865676][T19619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2113.930116][T19717] Bluetooth: hci0: command tx timeout [ 2114.158789][ T8968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2114.180262][ T8968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2114.201596][ T8968] bond0 (unregistering): Released all slaves [ 2114.247765][ T5224] 8021q: adding VLAN 0 to HW filter on device eth4 [ 2114.264769][ T41] usb 6-1: USB disconnect, device number 8 [ 2114.720503][ T5878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2114.758528][ T5878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2115.152507][T20838] loop7: detected capacity change from 0 to 512 [ 2115.258258][T20838] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2115.355888][T20838] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2115.883049][ T8968] hsr_slave_0: left promiscuous mode [ 2115.952217][ T8968] hsr_slave_1: left promiscuous mode [ 2115.976845][ T8968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2116.024935][ T8968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2116.071528][ T8968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2116.094388][ T8968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2116.204349][ T8968] veth1_macvtap: left promiscuous mode [ 2116.220143][ T8968] veth0_macvtap: left promiscuous mode [ 2116.259875][ T8968] veth1_vlan: left promiscuous mode [ 2116.274118][ T8968] veth0_vlan: left promiscuous mode [ 2116.324287][T17375] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2117.388313][T20866] loop7: detected capacity change from 0 to 1024 [ 2117.471510][T20866] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2117.522532][T20866] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2117.862574][T17375] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2118.364009][T20876] loop7: detected capacity change from 0 to 2048 [ 2118.443298][T20876] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2118.536485][ T8968] team0 (unregistering): Port device team_slave_1 removed [ 2118.658112][ T8968] team0 (unregistering): Port device team_slave_0 removed [ 2119.632624][T20888] netlink: 'syz.7.3399': attribute type 12 has an invalid length. [ 2120.439198][T20900] loop6: detected capacity change from 0 to 512 [ 2120.505760][T20900] EXT4-fs: Ignoring removed i_version option [ 2120.532315][T20900] EXT4-fs: Ignoring removed bh option [ 2120.674967][T20900] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2120.740136][T20900] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2121.120651][T20911] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3405'. [ 2121.193242][T20914] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3405'. [ 2121.468474][T20914] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3405'. [ 2121.482895][T20266] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2122.417053][T20931] loop7: detected capacity change from 0 to 16 [ 2122.463480][T20931] erofs (device loop7): mounted with root inode @ nid 36. [ 2123.102097][T20939] loop5: detected capacity change from 0 to 128 [ 2123.186430][T20939] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 2123.278126][T20939] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2123.392989][T20939] ext2 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2123.914741][T20774] bridge0: port 1(bridge_slave_0) entered blocking state [ 2123.962460][T20774] bridge0: port 1(bridge_slave_0) entered disabled state [ 2124.024953][T20774] bridge_slave_0: entered allmulticast mode [ 2124.128942][T17608] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2124.158965][T20774] bridge_slave_0: entered promiscuous mode [ 2124.267575][T20774] bridge0: port 2(bridge_slave_1) entered blocking state [ 2124.333738][T20774] bridge0: port 2(bridge_slave_1) entered disabled state [ 2124.357130][T20774] bridge_slave_1: entered allmulticast mode [ 2124.431985][T20774] bridge_slave_1: entered promiscuous mode [ 2124.832090][T20963] loop6: detected capacity change from 0 to 512 [ 2124.839932][T20961] loop5: detected capacity change from 0 to 1024 [ 2124.893720][T20961] hfsplus: failed to load catalog file [ 2124.988022][T20963] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.3419: inode has both inline data and extents flags [ 2125.140881][T20774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2125.150445][T20963] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 2125.152286][T20963] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3419: couldn't read orphan inode 15 (err -117) [ 2125.162947][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 2125.163045][ C1] EXT4-fs (loop6): initial error at time 1778444299: ext4_orphan_get:1397: inode 15 [ 2125.163203][ C1] EXT4-fs (loop6): last error at time 1778444299: ext4_orphan_get:1397: inode 15 [ 2125.303457][T20774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2125.306074][T20963] loop6: lost filesystem error report for type 5 error -117 [ 2125.394134][T20963] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2125.794002][T20774] team0: Port device team_slave_0 added [ 2125.878971][T20774] team0: Port device team_slave_1 added [ 2125.963123][T20266] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2126.256826][T20774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2126.316973][T20774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2126.446163][T20774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2126.640665][T20774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2126.726359][T20774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2127.593051][T20774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2130.681777][T20774] hsr_slave_0: entered promiscuous mode [ 2130.729787][T20774] hsr_slave_1: entered promiscuous mode [ 2130.791781][T20774] debugfs: 'hsr0' already exists in 'hsr' [ 2130.825963][T20774] Cannot create hsr debugfs directory [ 2130.963155][T20998] fuse: fd is not a fuse device [ 2131.058366][T21000] loop5: detected capacity change from 0 to 1024 [ 2131.161064][T21000] hfsplus: failed to load extents file [ 2133.840590][T20774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2133.968185][T20774] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2134.008579][T20774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2134.083018][T20774] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2134.104955][T20774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2134.198233][T20774] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2134.242450][T20774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2134.336620][T20774] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2134.930881][T21050] fuse: fd is not a fuse device [ 2135.506719][T21057] loop5: detected capacity change from 0 to 1024 [ 2135.568811][T21057] EXT4-fs: Ignoring removed bh option [ 2135.628297][T21057] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 2135.797638][T21057] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2135.950534][T20774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2136.235918][T20774] 8021q: adding VLAN 0 to HW filter on device team0 [ 2136.331980][T17608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2136.377677][T18096] bridge0: port 1(bridge_slave_0) entered blocking state [ 2136.385449][T18096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2136.544767][T18098] bridge0: port 2(bridge_slave_1) entered blocking state [ 2136.552454][T18098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2137.212781][T21082] syzkaller0: entered promiscuous mode [ 2137.245651][T21082] syzkaller0: entered allmulticast mode [ 2137.408065][T21084] af_packet: tpacket_rcv: packet too big, clamped from 3390 to 4294967272. macoff=96 [ 2137.681790][T21089] loop7: detected capacity change from 0 to 2048 [ 2137.729490][T21089] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 2137.774679][T21089] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2140.094417][T21122] loop7: detected capacity change from 0 to 8 [ 2140.152759][ T29] audit: type=1326 audit(1778444313.502:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21120 comm="syz.6.3469" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b879cdd9 code=0x7ffc0000 [ 2140.299941][ T29] audit: type=1326 audit(1778444313.549:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21120 comm="syz.6.3469" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb4b879cdd9 code=0x7ffc0000 [ 2140.431984][ T29] audit: type=1326 audit(1778444313.558:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21120 comm="syz.6.3469" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b879cdd9 code=0x7ffc0000 [ 2140.594905][ T29] audit: type=1326 audit(1778444313.567:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21120 comm="syz.6.3469" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fb4b879cdd9 code=0x7ffc0000 [ 2140.732016][ T29] audit: type=1326 audit(1778444313.567:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21120 comm="syz.6.3469" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b879cdd9 code=0x7ffc0000 [ 2141.303870][T21138] loop5: detected capacity change from 0 to 512 [ 2141.414455][T21138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 2141.950778][T17608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2142.306849][T21150] loop7: detected capacity change from 0 to 2048 [ 2142.430709][T21150] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2143.018726][T20774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2143.371696][T21170] loop7: detected capacity change from 0 to 128 [ 2143.526018][T21170] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2143.663399][T21170] ext4 filesystem being mounted at /233/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2151.344736][T17375] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2151.893484][T20774] veth0_vlan: entered promiscuous mode [ 2152.086909][T20774] veth1_vlan: entered promiscuous mode [ 2152.336664][T21196] netlink: 408 bytes leftover after parsing attributes in process `syz.6.3490'. [ 2152.619404][T20774] veth0_macvtap: entered promiscuous mode [ 2152.730990][T20774] veth1_macvtap: entered promiscuous mode [ 2152.855670][T21199] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3491'. [ 2153.098213][T20774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2153.356333][T20774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2153.592883][ T5878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2153.622826][ T5878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2153.672339][ T5878] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2153.723912][ T5878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2154.210763][ T29] audit: type=1326 audit(1778444326.648:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21216 comm="syz.6.3496" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b879cdd9 code=0x7ffc0000 [ 2154.309320][ T29] audit: type=1326 audit(1778444326.657:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21216 comm="syz.6.3496" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b879cdd9 code=0x7ffc0000 [ 2154.395670][ T29] audit: type=1326 audit(1778444326.704:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21216 comm="syz.6.3496" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fb4b879cdd9 code=0x7ffc0000 [ 2154.465882][ T29] audit: type=1326 audit(1778444326.704:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21216 comm="syz.6.3496" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b879cdd9 code=0x7ffc0000 [ 2154.566687][ T29] audit: type=1326 audit(1778444326.704:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21216 comm="syz.6.3496" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b879cdd9 code=0x7ffc0000 [ 2158.166883][T21267] ===================================================== [ 2158.174281][T21267] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x1a97/0x20d0 [ 2158.182827][T21267] bpf_prog_run_generic_xdp+0x1a97/0x20d0 [ 2158.188908][T21267] do_xdp_generic+0xe07/0x17b0 [ 2158.193858][T21267] tun_get_user+0x52df/0x6fe0 [ 2158.198853][T21267] tun_chr_write_iter+0x3e9/0x5c0 [ 2158.204245][T21267] vfs_write+0xbe1/0x15c0 [ 2158.208914][T21267] ksys_write+0x1d9/0x470 [ 2158.213441][T21267] __x64_sys_write+0x97/0xf0 [ 2158.218246][T21267] x64_sys_call+0x2ff0/0x3ea0 [ 2158.223421][T21267] do_syscall_64+0x134/0xf80 [ 2158.228307][T21267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2158.234598][T21267] [ 2158.237008][T21267] Uninit was stored to memory at: [ 2158.242453][T21267] pskb_expand_head+0x497/0x1a40 [ 2158.247588][T21267] do_xdp_generic+0xb30/0x17b0 [ 2158.252683][T21267] tun_get_user+0x52df/0x6fe0 [ 2158.257540][T21267] tun_chr_write_iter+0x3e9/0x5c0 [ 2158.262874][T21267] vfs_write+0xbe1/0x15c0 [ 2158.267396][T21267] ksys_write+0x1d9/0x470 [ 2158.272081][T21267] __x64_sys_write+0x97/0xf0 [ 2158.276862][T21267] x64_sys_call+0x2ff0/0x3ea0 [ 2158.281713][T21267] do_syscall_64+0x134/0xf80 [ 2158.286713][T21267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2158.292809][T21267] [ 2158.295469][T21267] Uninit was created at: [ 2158.300000][T21267] __kmalloc_node_track_caller_noprof+0x4f6/0x1750 [ 2158.306917][T21267] __alloc_skb+0x90d/0x1190 [ 2158.311597][T21267] alloc_skb_with_frags+0xc5/0x990 [ 2158.317120][T21267] sock_alloc_send_pskb+0xacb/0xc60 [ 2158.322536][T21267] tun_get_user+0xefa/0x6fe0 [ 2158.327623][T21267] tun_chr_write_iter+0x3e9/0x5c0 [ 2158.332825][T21267] vfs_write+0xbe1/0x15c0 [ 2158.337643][T21267] ksys_write+0x1d9/0x470 [ 2158.342245][T21267] __x64_sys_write+0x97/0xf0 [ 2158.347314][T21267] x64_sys_call+0x2ff0/0x3ea0 [ 2158.352214][T21267] do_syscall_64+0x134/0xf80 [ 2158.357020][T21267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2158.363310][T21267] [ 2158.365769][T21267] CPU: 1 UID: 0 PID: 21267 Comm: syz.6.3508 Tainted: G W L syzkaller #0 PREEMPT(full) [ 2158.377507][T21267] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2158.383076][T21267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2158.393519][T21267] ===================================================== [ 2158.401024][T21267] Disabling lock debugging due to kernel taint [ 2158.407742][T21267] Kernel panic - not syncing: kmsan.panic set ... [ 2158.414306][T21267] CPU: 1 UID: 0 PID: 21267 Comm: syz.6.3508 Tainted: G B W L syzkaller #0 PREEMPT(full) [ 2158.425482][T21267] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 2158.432008][T21267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2158.442192][T21267] Call Trace: [ 2158.445587][T21267] [ 2158.448627][T21267] __dump_stack+0x26/0x30 [ 2158.453216][T21267] dump_stack_lvl+0x50/0x1c0 [ 2158.457960][T21267] ? dump_stack+0x12/0x25 [ 2158.462451][T21267] dump_stack+0x1e/0x25 [ 2158.466784][T21267] vpanic+0x7b4/0x1430 [ 2158.471080][T21267] panic+0x15d/0x160 [ 2158.475212][T21267] kmsan_report+0x31a/0x320 [ 2158.479921][T21267] ? __msan_warning+0x1b/0x30 [ 2158.484789][T21267] ? bpf_prog_run_generic_xdp+0x1a97/0x20d0 [ 2158.490896][T21267] ? do_xdp_generic+0xe07/0x17b0 [ 2158.496037][T21267] ? tun_get_user+0x52df/0x6fe0 [ 2158.501067][T21267] ? tun_chr_write_iter+0x3e9/0x5c0 [ 2158.506430][T21267] ? vfs_write+0xbe1/0x15c0 [ 2158.511103][T21267] ? ksys_write+0x1d9/0x470 [ 2158.516322][T21267] ? __x64_sys_write+0x97/0xf0 [ 2158.521276][T21267] ? x64_sys_call+0x2ff0/0x3ea0 [ 2158.526304][T21267] ? do_syscall_64+0x134/0xf80 [ 2158.531333][T21267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2158.537765][T21267] ? ___bpf_prog_run+0xe95c/0xea90 [ 2158.543122][T21267] ? kmsan_get_metadata+0xf1/0x160 [ 2158.548428][T21267] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2158.554927][T21267] ? kmsan_get_metadata+0x146/0x160 [ 2158.560401][T21267] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2158.566912][T21267] ? kmsan_get_metadata+0xf1/0x160 [ 2158.572225][T21267] __msan_warning+0x1b/0x30 [ 2158.576965][T21267] bpf_prog_run_generic_xdp+0x1a97/0x20d0 [ 2158.583149][T21267] do_xdp_generic+0xe07/0x17b0 [ 2158.588116][T21267] ? tun_get_user+0x4e61/0x6fe0 [ 2158.593145][T21267] ? filter_irq_stacks+0x49/0x190 [ 2158.598370][T21267] ? tun_get_user+0x525e/0x6fe0 [ 2158.603459][T21267] tun_get_user+0x52df/0x6fe0 [ 2158.608335][T21267] ? stack_depot_save_flags+0x35/0x790 [ 2158.614080][T21267] ? kmsan_get_metadata+0xf1/0x160 [ 2158.619391][T21267] ? kmsan_get_metadata+0xf1/0x160 [ 2158.624764][T21267] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2158.631087][T21267] ? kmsan_get_metadata+0xf1/0x160 [ 2158.636407][T21267] tun_chr_write_iter+0x3e9/0x5c0 [ 2158.641633][T21267] vfs_write+0xbe1/0x15c0 [ 2158.646189][T21267] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 2158.652046][T21267] ksys_write+0x1d9/0x470 [ 2158.657351][T21267] __x64_sys_write+0x97/0xf0 [ 2158.662245][T21267] x64_sys_call+0x2ff0/0x3ea0 [ 2158.667171][T21267] do_syscall_64+0x134/0xf80 [ 2158.673152][T21267] ? clear_bhb_loop+0x50/0xa0 [ 2158.678112][T21267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2158.684259][T21267] RIP: 0033:0x7fb4b875d60e [ 2158.689318][T21267] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2158.709191][T21267] RSP: 002b:00007fb4b9728fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2158.717968][T21267] RAX: ffffffffffffffda RBX: 00007fb4b97296c0 RCX: 00007fb4b875d60e [ 2158.726176][T21267] RDX: 000000000000fdef RSI: 00002000000000c0 RDI: 00000000000000c8 [ 2158.734456][T21267] RBP: 00007fb4b8832d69 R08: 0000000000000000 R09: 0000000000000000 [ 2158.743209][T21267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2158.751484][T21267] R13: 00007fb4b8a16038 R14: 00007fb4b8a15fa0 R15: 00007ffc99b4dbc8 [ 2158.759636][T21267] [ 2158.763277][T21267] Kernel Offset: disabled [ 2158.767661][T21267] Rebooting in 86400 seconds..