last executing test programs: 2m58.547680943s ago: executing program 3 (id=64): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000180)=0x80, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r0, &(0x7f000000bd00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f000000bb40)=""/19, 0x13}, 0x6}], 0x1, 0x45833af92e4b39ff, 0x0) 2m58.24375818s ago: executing program 3 (id=69): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x242, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 2m56.788822196s ago: executing program 3 (id=81): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x44}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001dc0)={0x11, 0xfe, 0x80000}, 0x20) 2m56.664721289s ago: executing program 3 (id=83): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x3, 0x7ad, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) creat(&(0x7f0000000280)='./bus\x00', 0x122dfb579e447cba) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) truncate(&(0x7f0000000000)='./file1\x00', 0xd1) 2m55.785660241s ago: executing program 3 (id=87): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x11) read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x12) 2m54.147569481s ago: executing program 3 (id=96): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 2m53.728778601s ago: executing program 32 (id=96): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 1m47.796445725s ago: executing program 1 (id=579): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x8}, {0x90010022, 0x4}], 0x10, 0x80}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce00030e00080ff008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 1m47.267647529s ago: executing program 1 (id=581): epoll_create1(0x0) r0 = socket$unix(0x1, 0x5, 0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r1 = io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0xeec2, 0x800, 0x2, 0x116}) close_range(r1, r1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) 1m46.300271412s ago: executing program 1 (id=587): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe(&(0x7f0000000040)) 1m44.665178793s ago: executing program 1 (id=594): mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='pstore\x00', 0x10005, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000680), 0x0, 0x499, &(0x7f00000001c0)="$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") chroot(&(0x7f0000000100)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 1m44.226872633s ago: executing program 1 (id=596): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x50, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x1}}]}, 0x50}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}}, 0x24}}, 0x0) 1m42.826452067s ago: executing program 1 (id=602): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0x3}, {0x825840505c7c76f1}, {0x8}}}, 0x24}}, 0x40004) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x4, 0x4361, 0x9, 0xfff7ffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x65, 0x4, 0x0, 0x7}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) 1m42.556896864s ago: executing program 33 (id=602): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0x3}, {0x825840505c7c76f1}, {0x8}}}, 0x24}}, 0x40004) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x4, 0x4361, 0x9, 0xfff7ffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x65, 0x4, 0x0, 0x7}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) 1m12.496672715s ago: executing program 5 (id=809): socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0x1, 0xc}, {0x8, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0ea79", 0x5}], 0x1, &(0x7f0000000540)}], 0x1, 0x40800) 1m11.919515379s ago: executing program 5 (id=814): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r0) r1 = syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x91c1, 0x400, 0x1, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x20, 0x20, 0x1, 0x0, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 1m10.891114114s ago: executing program 5 (id=822): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x2}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0xc}]}}]}, 0x58}}, 0x0) 1m10.336389318s ago: executing program 5 (id=824): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000b40)='./file2\x00', 0x201480a, &(0x7f00000003c0)=ANY=[], 0xdd, 0x1eb, &(0x7f0000000b80)="$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") sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) 1m9.607527106s ago: executing program 5 (id=831): unshare(0x20060400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000440)=[{}], 0x1, 0x800004, 0x0, 0x0) 1m9.016825371s ago: executing program 5 (id=832): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc1b, &(0x7f0000001940)="$eJzs3V1oXOl5B/DnnSOtPjZNtNnEm7TZdCAlMUpt/BVbwSXIWUVtwPGGyArdq2j0YWdYeWQkufGmbVBb0kJvQvem9KaIpksLuehVt5dVmi0klEIJuUgvCoImy170QheBQstmwjnzjjSyZVtZf0he/37L7H/mzHNG78fozBH4nRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMRnP3fhxMl00K0AAB6lS1NfOnHa5z8APFEu+/sfAAAAAAAAAAAAAAAOuxRFHIkUw69vpZnqccfgxWbrxs3picm9dxtKkaIWRVVf3gZPnjp95lNnz4118+77P2gfjhenLl+ov7B07frywsrKwnx9utWcW5pf2Pcr3O/+txqtBqB+7eUb81eurNRPHT+96+mbI28OPH1k5Py5Y2fHurXTE5OTUz01ff3v+Kff5k4rPJ6KIhqR4u2Rt1IjImpx/2Nxj/fOwzZUdWK06sT0xGTVkcVmo7VaPplquaoWUe/Zabw7Ro9gLu7LeMRa2fyywaNl96auN5Ybs4sL9S82llebq82lVqp1Wlv2px61GEsR6xGxOXD7y/VHER+NFK+e2EqzEVF0x+GT1cLge7en9hD6uA9lO+v9Eeu1x2DODrGBKOJSpPjZG0djrhyzfIuPR3yhzNcjXivzMxGpfGOcifjpHu8jHk99UcS/R4qltJXmq+NB97hy8cv1z7euLPXUdo8rj/3nw6N0yI9Ng1HEbHXE30rv/GQHAAAAAAAAAAAAAAAAgAdtKIr4dqT4k+d/r1pXHNW69PedH3vPS7/du2b8uXu8Tll7PCLWavtbk9uflw6nWvnfQ+gY+zIYRXwjr//7o4NuDAAAAAAAAAAAAAAAAAAAwBOtiJcixVeOHU3r0XtN8Wbrav1yY3axc1XY7rV/u9dMb7fb7Xrq5HjOmZxrOddzbuTczBm1vH/O8ZwztYi+cv/8eD3nRs7NnFHk/XOO55zJuZZzPedGzs2c0Zf3zzmecybnWs71nBs5N3PGIbl2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAu0ktivh5pPjW17ZSpIgYj5iJTm4MHHTrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBSiiKOR4qNlwarx+u1iMsR8fN2u929RcRWmffroPsKAAAAAAAAAAAAAAAAAAAAh1Yq4mOR4tn/20r1iLg58ubA00dGzp87dnasiCJS9R0BPV6cunyh/sLStevLCysrC/P16VZzbml+Yb8/bvBis3Xj5vTE5EPpzD0NPeT2Dw2+sHT9leXm1a+u7vn88OCF2ZXV5cbc3k/HUNQiZnq3jFYNnp6YrBq92Gy0ql1T7Q4NrEWM77czAAAAAAAAAAAAAAAAAAAAHBrDqYjPRYqf/NeZ1F033tdZ8/8rnUfFdu1rf7DzXQCLt2RX7/cH7Od+2m9DR6uF9/XpicnJqZ7Nff23l5ZtSqmI5yLFJ179ULUePsXwnmvjy7r3lnXXzuS6kV8r69Z2VQ2OTk9M1i8ttY5dWFxcmmusNmYXF+pT1xtz+/7iAAAAAAAAAAAAAAAAAAAAALiL4VTEjyLF//z9f6Tudefz+v++zqOe9f+/VS2hrwym3bmtWtv/3mptf+f++86PDX/0+Tttfxjr/8s2pVTENyPF6R99qLqefnf9/8wttWXdn0WKt57/SK6rPVXWNbrd6bzilebiwomy9q8jxa+/3a2NqvZqrn12p/ZkWTsUKf5ya3ftV3PtB3ZqT5W1RyPF9/5779oP7tSeLmt/Ein+6e/q3drhsvb3c+2Rndrjc0uL8/ca1nL+vxMp/vbS76Run+84/z3f/7B2S267bc7vfv9Bzf9Iz7a1PK9/mue/cY/5PxspvjP4kVzXGfvZ/Pwz1f935v8TkeI//2137ZVc+/6d2pP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7XdJut9sHMP/P9Gwbye2a+yXH4km08srXX24sLi4su+OOO+5s3znoIxOPQvn5/+eR4v+PFKl7HpM//9/TebRz/ve/39j5/D9/S247oPO/9/dsO5/PWvr7IgZXr13vfy5icOWVrx9rXmtcXbi60Dp18sSnP3325ImTZ/uf6p7c7dzb99i9G5Tz/4NI8cN/+OH23zG7z//2Pv8fviW3HdD8P9vbp13nNfseiidSOf9/Eyme+eyPt//evNv5f/fv/6Mf253bv38HNP8f6Nk2ktvV/CXHAgAAAAAAAAAA4HEynIr4i0jxu3/8m6m7hmg///5v/pbcdkD//utIz7b5R7SuYd+DDABwiJTnfx+MFP/c/v72Wu7d53/xG93a3vO/OzkM1/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDHXYoi/jBSDL++lTYGyscdgxebrRs3pycm995tKEWKWhRVfXkbPHnq9JlPnT031s277/+gfThenLp8of7C0rXrywsrKwvz9elWc25pfmHfr3C/+99qtBqA+rWXb8xfubJSP3X89K6nb468OfD0kZHz546dHevWTk9MTk711PT1v+Offpt0h+1PRRHfjxRvj7yVvjsQUYv7H4t7vHcetqGqE6NVJ6YnJquOLDYbrdXyyVTLVbWIes9O490xegRzcV/GI9bK5pcNHi27N3W9sdyYXVyof7GxvNpcbS61Uq3T2rI/9ajFWIpYj4jNgdtfrj+K+GakePXEVvqXgYiiOw6fvDT1pROn792e2kPo4z6U7az3R6zXHoM5O8QGooh/jBQ/e+NofG8goi86t/h4xBfKfD3itTI/E5HKN8aZiJ/u8T7i8dQXRZyJFEtpK70xUB4PuseVi1+uf751Zamntntceew/Hx6su/82HPJj02AU8YPqiL+V/tXvNQAAAAAAAAAAAAAAAMAhUsR6pPjKsaOpWh+8vaa42bpav9yYXews6+uu/euumW632+166uR4zpmcaznXc27k3MwZtbx/zvGcMznXcq7n3Mi5mTOKvH/O8ZwzOddyrufcyLmZM/ry/jnHc87kXMu5nnMj52bOOCRr9wAAAAAAAAAAAAAAAAAAgHeXWhTVVdy/9bWt1B7oXF96Jjq54Xqg73q/CAAA//8Snnbv") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x404043000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000140), 0x4) truncate(&(0x7f0000000180)='./file1\x00', 0x8) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) 1m8.584178181s ago: executing program 34 (id=832): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc1b, &(0x7f0000001940)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x404043000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000140), 0x4) truncate(&(0x7f0000000180)='./file1\x00', 0x8) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) 25.411464254s ago: executing program 6 (id=1151): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f0, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2000, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) r2 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r2}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) 24.932541126s ago: executing program 6 (id=1153): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f0000000140)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 24.683437193s ago: executing program 6 (id=1155): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r4, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000014"], 0x38, 0x40044}}], 0x1, 0x4) 24.428201889s ago: executing program 6 (id=1158): syz_mount_image$exfat(&(0x7f0000000a00), &(0x7f0000001540)='./file0\x00', 0x2010c00, &(0x7f00000003c0)=ANY=[], 0x1, 0x150f, &(0x7f0000001c00)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$userns(r0, &(0x7f0000000040)) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x87}, 0x20) 23.750511965s ago: executing program 6 (id=1162): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 22.3556005s ago: executing program 6 (id=1171): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) 21.96085673s ago: executing program 35 (id=1171): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) 10.339647236s ago: executing program 4 (id=1237): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_io_uring_complete(0x0, r0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) socket$packet(0x11, 0x3, 0x300) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x2, 0x349, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0x20e}}], 0x1, 0x0, 0x0) 8.892414231s ago: executing program 4 (id=1250): sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) 8.319978185s ago: executing program 4 (id=1252): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@remote, 0x1, r1}) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000000)=0x7, 0x4) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 7.551383894s ago: executing program 4 (id=1256): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x101100, 0x0) syz_ublk_setup_io_uring(0x17b, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 7.32213933s ago: executing program 0 (id=1261): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unshare(0x22020600) open(&(0x7f00000000c0)='.\x00', 0x204901, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f0000000380)="c867", 0x2}], 0x1, 0x31, 0x4, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000680)={0x0, 0x0, 0x2, 0x29, 0x3}) 6.976264729s ago: executing program 0 (id=1264): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000008000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)={0x4, 0x3, 0xff, 0x8, 0x6, 0x6, 0x20000001000, 0x1, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.827439407s ago: executing program 0 (id=1282): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x1a) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) socket(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x1, r0, 0x4}) 5.456922176s ago: executing program 4 (id=1275): r0 = io_uring_setup(0x664b, &(0x7f0000000500)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) close_range(r0, 0xffffffffffffffff, 0x0) 5.064006616s ago: executing program 7 (id=1277): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x200) 4.844927981s ago: executing program 7 (id=1279): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) close_range(r0, 0xffffffffffffffff, 0x0) 4.771316833s ago: executing program 0 (id=1280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtfilter={0x88, 0x2c, 0x609, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x20000000, 0x6}, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000e890}, 0x8080) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@gettfilter={0x24, 0x2c, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [{0x8, 0x11}]}, 0x24}}, 0x0) 4.632670006s ago: executing program 7 (id=1281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c000180060001"], 0x68}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) 4.313032654s ago: executing program 7 (id=1285): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2c, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_BROADCAST={0x8, 0x4, @private=0xa010100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0xffff}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x48}}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) 4.037454011s ago: executing program 0 (id=1286): socket$inet6(0xa, 0x80003, 0x6) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 4.004412772s ago: executing program 8 (id=1288): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000d080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x45, {0x6, 0x0, 0x0, 0xfa0, 0xffffffff, 0x0, {0x8000, 0x0, 0x0, 0x0, 0x22, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x4000, 0x1, r4, 0x0, 0x0, 0xfffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) syz_fuse_handle_req(r0, &(0x7f000000b040)="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", 0x2000, &(0x7f0000006180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006300)={0x90, 0x0, 0xff, {0x1, 0x2, 0x742, 0x0, 0xad, 0x4, {0x5, 0x9bd, 0x7ffffffffffffffe, 0x0, 0x4, 0xc, 0xa, 0x3, 0x2006, 0x8000, 0x1000, r4, 0x0, 0x20, 0x9465}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.955712453s ago: executing program 4 (id=1289): r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@can={{0x2, 0x0, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "985300"}, 0x10}}, 0xd209f6d814827b17) recvmsg$can_raw(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x42) read(r1, &(0x7f0000002fc0)=""/52, 0x34) 3.907097984s ago: executing program 7 (id=1290): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0xf3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 3.739407959s ago: executing program 7 (id=1291): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xffff8001, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1001}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 3.727243239s ago: executing program 2 (id=1292): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) 3.615477331s ago: executing program 8 (id=1293): socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 2.689125354s ago: executing program 2 (id=1294): r0 = socket(0x80000000000000a, 0x2, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)='y', 0x1}], 0x1}}], 0x1, 0x4008845) sendmsg$kcm(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="87", 0x1}], 0x1}, 0x0) 2.501421549s ago: executing program 2 (id=1295): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000040)='./file0\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x181000, 0x0) 2.498995369s ago: executing program 8 (id=1305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xa101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x528, 0x22b, 0x258, 0x528, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x2d8, 0x300, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x8a}]}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000f, 0x1, 0x0, 0x1, 0x0, 0xd, 0x87b, 0x2, 0x0, 0x1, 0x0, 0x3, 0x6, 0x1, 0x2], 0x70000, 0x203c1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.427233131s ago: executing program 0 (id=1296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="04005b000600650040"], 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) close(r3) 2.117624158s ago: executing program 8 (id=1297): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[], 0xffdd) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) splice(r1, 0x0, r4, 0x0, 0x8001, 0x1) 1.978256312s ago: executing program 8 (id=1298): r0 = socket$netlink(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 1.123116623s ago: executing program 2 (id=1299): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000300)=[{&(0x7f0000005b00)="e0", 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f00000033c0)={0x2020}, 0x2020) 951.166217ms ago: executing program 2 (id=1300): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x2, 0x3, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000980)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00'], 0x48) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e64, @local}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) 741.777552ms ago: executing program 8 (id=1301): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r0, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') accept4$inet(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt\x00', 0x10000, 0x0) getdents64(r1, &(0x7f0000000900)=""/4096, 0x1000) nanosleep(0x0, 0x0) 0s ago: executing program 2 (id=1302): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) kernel console output (not intermixed with test programs): otal free blocks count 0 [ 105.210076][ T4669] device hsr_slave_0 entered promiscuous mode [ 105.210529][ T4783] EXT4-fs (loop1): Free/Dirty block details [ 105.234092][ T4783] EXT4-fs (loop1): free_blocks=0 [ 105.243095][ T4783] EXT4-fs (loop1): dirty_blocks=548 [ 105.256590][ T4783] EXT4-fs (loop1): Block reservation details [ 105.263347][ T4783] EXT4-fs (loop1): i_reserved_data_blocks=548 [ 105.298378][ T4669] device hsr_slave_1 entered promiscuous mode [ 105.373727][ T4783] EXT4-fs (loop1): shut down requested (0) [ 105.862973][ T4669] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.909426][ T4669] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.940886][ T4669] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.978982][ T4669] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.201474][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 106.234559][ T4826] device macsec1 entered promiscuous mode [ 106.251602][ T4826] device vlan1 entered promiscuous mode [ 106.261282][ T4826] device vlan1 left promiscuous mode [ 106.312665][ T4830] loop4: detected capacity change from 0 to 512 [ 106.344792][ T4830] EXT4-fs: Ignoring removed orlov option [ 106.350742][ T4830] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.362043][ T4754] rpcbind: server 127.0.0.1 not responding, timed out [ 106.406075][ T4830] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 106.451158][ T4326] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.479532][ T4669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.494436][ T4828] device vlan2 entered promiscuous mode [ 106.500548][ T4828] device syz_tun entered promiscuous mode [ 106.590353][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.618093][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.629580][ T4669] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.641084][ T4326] usb 3-1: Using ep0 maxpacket: 8 [ 106.648423][ T4326] usb 3-1: unable to get BOS descriptor or descriptor too short [ 106.686880][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.692097][ T4326] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.702607][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.731764][ T4754] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.738935][ T4754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.746638][ T4326] usb 3-1: config 1 interface 0 altsetting 45 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 106.820966][ T4326] usb 3-1: config 1 interface 0 has no altsetting 0 [ 106.861612][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.872022][ T4326] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.893701][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.910326][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.918796][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.941286][ T4754] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.942939][ T4326] usb 3-1: Product: syz [ 106.948385][ T4754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.980300][ T4326] usb 3-1: Manufacturer: syz [ 107.007400][ T4326] usb 3-1: SerialNumber: syz [ 107.013167][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.033217][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.072879][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.105967][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.179718][ T4669] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.196798][ T4669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.224664][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.258660][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.267836][ T4326] cdc_ether 3-1:1.0: skipping garbage [ 107.282365][ T4847] ======================================================= [ 107.282365][ T4847] WARNING: The mand mount option has been deprecated and [ 107.282365][ T4847] and is ignored by this kernel. Remove the mand [ 107.282365][ T4847] option from the mount to silence this warning. [ 107.282365][ T4847] ======================================================= [ 107.307338][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.327529][ T4326] usb 3-1: bad CDC descriptors [ 107.351293][ T4326] usb 3-1: USB disconnect, device number 3 [ 107.358955][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.378444][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.407388][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.429444][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.445256][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.809880][ T4866] loop1: detected capacity change from 0 to 1024 [ 108.050274][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.077496][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.115212][ T4669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.150232][ T4874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.158'. [ 108.282853][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 109.207263][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.226491][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.264246][ T4669] device veth0_vlan entered promiscuous mode [ 109.286407][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.299728][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.322283][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.339101][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.362806][ T4669] device veth1_vlan entered promiscuous mode [ 109.410735][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.424960][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.442294][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.489883][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.520518][ T4669] device veth0_macvtap entered promiscuous mode [ 109.539990][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.557480][ T4669] device veth1_macvtap entered promiscuous mode [ 109.600121][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.624428][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.654995][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.686450][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.703652][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.730971][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.773318][ T4669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.806657][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.835377][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.895845][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.917781][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.946115][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.966895][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.987206][ T4669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.011044][ T4669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.032597][ T4669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.040243][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.056421][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.078382][ T4669] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.096543][ T4669] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.121123][ T4669] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.129883][ T4669] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.443384][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.491269][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.531228][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 110.566885][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.575532][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.608620][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 110.719500][ T4966] loop2: detected capacity change from 0 to 512 [ 110.748969][ T4968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.181'. [ 110.852299][ T4966] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 110.880614][ T4966] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 110.940307][ T4966] System zones: 0-1, 15-15, 18-18, 34-34 [ 110.962181][ T4966] EXT4-fs (loop2): orphan cleanup on readonly fs [ 110.971618][ T4966] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 110.982205][ T4966] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 111.011085][ T4966] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 111.024963][ T4966] EXT4-fs (loop2): 1 truncate cleaned up [ 111.045458][ T4966] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 111.128617][ T4966] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 111.289905][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 111.380501][ T4991] loop0: detected capacity change from 0 to 16 [ 111.435529][ T4991] erofs: (device loop0): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel [ 111.587901][ T4996] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 112.238102][ T5013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.195'. [ 112.529611][ T5013] bond0: (slave bond_slave_1): Releasing backup interface [ 112.639178][ T5025] loop1: detected capacity change from 0 to 512 [ 112.758524][ T5025] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.198: inode has both inline data and extents flags [ 112.915881][ T5025] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.198: couldn't read orphan inode 15 (err -117) [ 112.970446][ T5025] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 113.191417][ T5025] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #2: block 36: comm syz.1.198: lblock 0 mapped to illegal pblock 36 (length 1) [ 113.266208][ T5033] loop5: detected capacity change from 0 to 4096 [ 113.408146][ T5037] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.505550][ T4754] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm kworker/u4:9: Invalid inode table block 5 in block_group 0 [ 113.613000][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 113.672178][ T5049] netlink: 'syz.2.205': attribute type 15 has an invalid length. [ 113.728939][ T5049] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.205'. [ 113.775059][ T5053] netlink: 'syz.2.205': attribute type 11 has an invalid length. [ 113.803278][ T26] audit: type=1800 audit(1785811662.788:5): pid=5033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.200" name="file1" dev="loop5" ino=16 res=0 errno=0 [ 113.840733][ T5053] netlink: 'syz.2.205': attribute type 15 has an invalid length. [ 113.882500][ T5053] netlink: 'syz.2.205': attribute type 16 has an invalid length. [ 113.909293][ T5053] netlink: 'syz.2.205': attribute type 21 has an invalid length. [ 113.939977][ T5053] netlink: 'syz.2.205': attribute type 25 has an invalid length. [ 113.980390][ T5053] netlink: 'syz.2.205': attribute type 27 has an invalid length. [ 114.014369][ T5053] netlink: 'syz.2.205': attribute type 28 has an invalid length. [ 114.035645][ T5053] netlink: 'syz.2.205': attribute type 29 has an invalid length. [ 114.052025][ T5053] netlink: 'syz.2.205': attribute type 30 has an invalid length. [ 114.400688][ T5069] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.210'. [ 114.826182][ T5084] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 116.140203][ T5131] loop0: detected capacity change from 0 to 256 [ 116.240457][ T5131] exfat: Deprecated parameter 'namecase' [ 116.338440][ T5131] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 116.892541][ T5123] loop4: detected capacity change from 0 to 32768 [ 116.949902][ T5123] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.226 (5123) [ 117.030811][ T5169] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.237'. [ 117.048718][ T5123] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.086890][ T5123] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 117.121248][ T5123] BTRFS info (device loop4): force clearing of disk cache [ 117.128441][ T5123] BTRFS info (device loop4): setting nodatacow, compression disabled [ 117.191012][ T5123] BTRFS info (device loop4): disabling free space tree [ 117.198194][ T5123] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 117.233758][ T5123] BTRFS info (device loop4): trying to use backup root at mount time [ 117.521025][ T47] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 117.663461][ T5123] BTRFS warning (device loop4): couldn't read tree root [ 117.670492][ T5123] BTRFS warning (device loop4): try to load backup roots slot 1 [ 117.726169][ T4754] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 117.809405][ T5123] BTRFS warning (device loop4): couldn't read tree root [ 117.824879][ T5123] BTRFS warning (device loop4): try to load backup roots slot 2 [ 117.851863][ T5123] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 117.879318][ T5123] BTRFS warning (device loop4): couldn't read tree root [ 117.888242][ T5123] BTRFS warning (device loop4): try to load backup roots slot 3 [ 117.926132][ T5123] BTRFS info (device loop4): enabling ssd optimizations [ 117.971967][ T5123] BTRFS info (device loop4): rebuilding free space tree [ 118.128962][ T5123] BTRFS info (device loop4): disabling free space tree [ 118.151322][ T5123] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 118.186204][ T5123] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 118.456768][ T26] audit: type=1800 audit(1785811923.436:6): pid=5123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.226" name="file1" dev="loop4" ino=257 res=0 errno=0 [ 118.544923][ T26] audit: type=1800 audit(1785811923.486:7): pid=5123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.226" name="file1" dev="loop4" ino=257 res=0 errno=0 [ 118.679760][ T26] audit: type=1326 audit(1785811923.656:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5220 comm="syz.5.248" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab6299e019 code=0x0 [ 119.111696][ T4283] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.948178][ T5295] tipc: Started in network mode [ 121.981566][ T5295] tipc: Node identity 84e, cluster identity 4711 [ 121.987948][ T5295] tipc: Node number set to 2126 [ 122.300312][ T5304] netlink: 'syz.5.270': attribute type 1 has an invalid length. [ 122.470402][ T5277] loop0: detected capacity change from 0 to 40427 [ 122.497785][ T5277] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 122.571609][ T5277] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 122.676836][ T5317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.274'. [ 122.705957][ T5277] F2FS-fs (loop0): Found nat_bits in checkpoint [ 122.868870][ T5320] Set syz1 is full, maxelem 14 reached [ 122.903192][ T5277] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 122.946118][ T5277] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 123.067717][ T5329] netlink: 'syz.5.277': attribute type 1 has an invalid length. [ 123.284216][ T5332] bond1 (unregistering): Released all slaves [ 123.642853][ T5344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.282'. [ 123.704397][ T5349] loop5: detected capacity change from 0 to 512 [ 123.758914][ T5349] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 123.830564][ T5349] EXT4-fs (loop5): 1 truncate cleaned up [ 123.860868][ T5349] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 124.160153][ T4669] EXT4-fs (loop5): unmounting filesystem. [ 124.389208][ T5377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.292'. [ 124.721236][ T5386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'. [ 124.773185][ T5386] HTB: quantum of class 80040007 is big. Consider r2q change. [ 125.315629][ T5397] netlink: 'syz.4.299': attribute type 1 has an invalid length. [ 125.336769][ T5397] netlink: 'syz.4.299': attribute type 2 has an invalid length. [ 125.365485][ T5397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.299'. [ 125.458246][ T5395] loop2: detected capacity change from 0 to 8192 [ 125.524364][ T5395] loop2: p1 p3 < > p4 < p5 > [ 125.552738][ T5395] loop2: partition table partially beyond EOD, truncated [ 125.560028][ T5395] loop2: p1 start 30976 is beyond EOD, truncated [ 125.655132][ T5395] loop2: p3 start 327168 is beyond EOD, truncated [ 125.703740][ T5395] loop2: p5 start 30976 is beyond EOD, truncated [ 126.310861][ T4391] udevd[4391]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 126.631483][ T5425] loop0: detected capacity change from 0 to 8192 [ 127.011001][ T5241] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 127.223337][ T5241] usb 2-1: unable to get BOS descriptor or descriptor too short [ 127.249329][ T5241] usb 2-1: not running at top speed; connect to a high speed hub [ 127.279083][ T5241] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.309815][ T5241] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.345158][ T5241] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 127.400117][ T5241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.428925][ T5241] usb 2-1: Product: syz [ 127.433548][ T5241] usb 2-1: Manufacturer: syz [ 127.438187][ T5241] usb 2-1: SerialNumber: syz [ 127.801206][ T5241] usb 2-1: USB disconnect, device number 2 [ 127.849558][ T4391] udevd[4391]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.348580][ T5473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.328'. [ 128.676103][ T5475] syz.4.327 (5475) used greatest stack depth: 18128 bytes left [ 128.817429][ T5492] team0: No ports can be present during mode change [ 128.829025][ T5490] loop2: detected capacity change from 0 to 4096 [ 128.839067][ T5492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 128.900027][ T5494] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.947731][ T26] audit: type=1800 audit(1785811933.926:9): pid=5490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.332" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 128.999997][ T5490] NILFS (loop2): error -22 preparing GC: cannot mark copying blocks dirty [ 129.080880][ T5492] team0 (unregistering): Port device team_slave_0 removed [ 129.126856][ T5492] team0 (unregistering): Port device team_slave_1 removed [ 129.347970][ T5499] kvm: pic: level sensitive irq not supported [ 129.981628][ T5528] loop4: detected capacity change from 0 to 512 [ 130.021790][ T5528] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.028281][ T5528] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.092085][ T5528] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.132660][ T5528] EXT4-fs (loop4): Test dummy encryption mode enabled [ 130.171016][ T5528] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 130.215020][ T5535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.344'. [ 130.241749][ T5528] EXT4-fs (loop4): 1 truncate cleaned up [ 130.258920][ T5528] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 130.473885][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 131.050404][ T5572] loop0: detected capacity change from 0 to 4096 [ 131.119808][ T5575] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.177890][ T5577] capability: warning: `syz.4.357' uses deprecated v2 capabilities in a way that may be insecure [ 131.905506][ T5588] netlink: 'syz.1.360': attribute type 1 has an invalid length. [ 132.040745][ T5588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.107838][ T5590] bond1: (slave gretap1): making interface the new active one [ 132.125313][ T5590] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 132.142636][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 132.604636][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.611432][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.126014][ T5620] loop0: detected capacity change from 0 to 8192 [ 133.183234][ T5620] loop0: p1 p3 < > p4 < p5 > [ 133.207077][ T5620] loop0: partition table partially beyond EOD, truncated [ 133.245888][ T5620] loop0: p1 start 30976 is beyond EOD, truncated [ 133.286971][ T5620] loop0: p3 start 327168 is beyond EOD, truncated [ 133.355026][ T5620] loop0: p5 start 30976 is beyond EOD, truncated [ 134.423278][ T5654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.378'. [ 134.698246][ T5634] loop2: detected capacity change from 0 to 32768 [ 134.814835][ T5634] XFS (loop2): Mounting V5 Filesystem [ 134.853387][ T5660] kvm: MWAIT instruction emulated as NOP! [ 134.986456][ T5634] XFS (loop2): Ending clean mount [ 135.291802][ T4281] XFS (loop2): Unmounting Filesystem [ 136.713061][ T5692] loop0: detected capacity change from 0 to 32768 [ 136.761110][ T5692] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.386 (5692) [ 136.811705][ T5692] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.872844][ T5692] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 136.903241][ T5692] BTRFS info (device loop0): using free space tree [ 137.162807][ T5692] BTRFS info (device loop0): enabling ssd optimizations [ 137.331242][ T4286] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 137.789575][ T5768] loop2: detected capacity change from 0 to 164 [ 138.143807][ T5773] loop4: detected capacity change from 0 to 128 [ 138.235514][ T5773] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 139.196357][ T5814] loop4: detected capacity change from 0 to 512 [ 139.221791][ T5814] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.260205][ T5813] loop1: detected capacity change from 0 to 512 [ 139.283559][ T5814] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 139.338251][ T5813] EXT4-fs: Ignoring removed orlov option [ 139.388701][ T5813] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.441854][ T5813] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 139.455438][ T5814] EXT4-fs (loop4): 1 truncate cleaned up [ 139.504171][ T5814] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 139.667879][ T5814] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.413: bad entry in directory: directory entry overrun - offset=108, inode=17, rec_len=916, size=1012 fake=0 [ 139.758503][ T5813] device vlan2 entered promiscuous mode [ 139.775131][ T5813] device syz_tun entered promiscuous mode [ 139.802109][ T5814] EXT4-fs (loop4): Remounting filesystem read-only [ 139.923503][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 140.620706][ T5851] loop5: detected capacity change from 0 to 2048 [ 141.074424][ T5851] UDF-fs: unknown compression code (57) [ 141.589034][ T5870] netlink: 'syz.5.420': attribute type 1 has an invalid length. [ 141.875681][ T5877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.884213][ T5877] bond1: (slave bond2): making interface the new active one [ 141.892504][ T5877] bond1: (slave bond2): Enslaving as an active interface with an up link [ 142.080125][ T5893] loop1: detected capacity change from 0 to 512 [ 142.131057][ T5893] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 142.263337][ T5893] EXT4-fs (loop1): 1 truncate cleaned up [ 142.269075][ T5893] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 142.549510][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 142.791823][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 143.076442][ T5917] bond0: (slave bond_slave_1): Releasing backup interface [ 143.190239][ T5920] netlink: 'syz.5.433': attribute type 1 has an invalid length. [ 143.258314][ T5920] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.200235][ T5962] loop1: detected capacity change from 0 to 164 [ 145.644800][ T5962] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 147.327374][ T5985] loop4: detected capacity change from 0 to 8192 [ 149.197041][ T6060] loop2: detected capacity change from 0 to 4096 [ 149.316136][ T6062] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.796623][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.474'. [ 149.876318][ T6075] bridge2: port 1(vlan2) entered blocking state [ 149.911009][ T6075] bridge2: port 1(vlan2) entered disabled state [ 150.242350][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.477'. [ 150.542656][ T6088] loop5: detected capacity change from 0 to 256 [ 151.662329][ T6121] netlink: 'syz.0.490': attribute type 1 has an invalid length. [ 151.877590][ T6126] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.932562][ T6126] bond1: (slave bond2): making interface the new active one [ 151.976962][ T6126] bond1: (slave bond2): Enslaving as an active interface with an up link [ 152.001123][ T6121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.490'. [ 152.023440][ T6121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.391702][ T6142] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 152.460729][ T6145] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 152.505011][ T6146] netlink: 32 bytes leftover after parsing attributes in process `syz.1.495'. [ 152.597815][ T6146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.495'. [ 152.860316][ T6160] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 152.860316][ T6160] The task syz.2.496 (6160) triggered the difference, watch for misbehavior. [ 153.545420][ T6171] loop0: detected capacity change from 0 to 512 [ 153.600529][ T6171] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.503: inode has both inline data and extents flags [ 153.652814][ T6171] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.503: couldn't read orphan inode 15 (err -117) [ 153.677518][ T6171] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 153.786933][ T6171] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.503: Invalid inode table block 3663419604 in block_group 0 [ 153.826099][ T6171] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #18: comm syz.0.503: error -117 getting inode 18 block [ 153.893940][ T4342] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm kworker/u4:7: Invalid inode table block 3663419604 in block_group 0 [ 153.954473][ T4286] EXT4-fs (loop0): unmounting filesystem. [ 156.243441][ T6224] netlink: 'syz.2.521': attribute type 5 has an invalid length. [ 156.816452][ T6235] netlink: 264 bytes leftover after parsing attributes in process `syz.0.526'. [ 158.944333][ T6258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.533'. [ 159.868663][ T6291] loop2: detected capacity change from 0 to 1024 [ 161.822932][ T6301] loop0: detected capacity change from 0 to 32768 [ 162.298600][ T6389] netlink: 268 bytes leftover after parsing attributes in process `syz.0.561'. [ 163.158434][ T6392] loop1: detected capacity change from 0 to 32768 [ 163.194113][ T6392] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.564 (6392) [ 163.266106][ T6392] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 163.308295][ T6392] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 163.376595][ T6392] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 163.418638][ T6392] BTRFS info (device loop1): use zstd compression, level 3 [ 163.449962][ T6392] BTRFS info (device loop1): using free space tree [ 163.694445][ T6340] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.789864][ T6392] BTRFS info (device loop1): enabling ssd optimizations [ 163.855023][ T6340] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.870007][ T26] audit: type=1800 audit(1785811968.846:10): pid=6392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.564" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 163.920969][ T26] audit: type=1800 audit(1785811968.876:11): pid=6392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.564" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 164.019624][ T6340] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.245627][ T6340] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.484424][ T4275] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 164.844460][ T6340] tipc: Left network mode [ 164.984336][ T6467] syz.1.576 sent an empty control message without MSG_MORE. [ 165.436878][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.447235][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.455287][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.464151][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.486382][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 165.494108][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.148767][ T6478] chnl_net:caif_netlink_parms(): no params data found [ 166.393122][ T6478] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.401649][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.418548][ T6478] device bridge_slave_0 entered promiscuous mode [ 166.432453][ T6478] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.439733][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.459680][ T6478] device bridge_slave_1 entered promiscuous mode [ 166.580188][ T6478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.601473][ T6478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.903159][ T6478] team0: Port device team_slave_0 added [ 166.940508][ T6478] team0: Port device team_slave_1 added [ 167.067227][ T6340] device hsr_slave_0 left promiscuous mode [ 167.085618][ T6340] device hsr_slave_1 left promiscuous mode [ 167.122439][ T6340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.158680][ T6340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.211654][ T6340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.234579][ T6340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.271546][ T6340] device bridge_slave_1 left promiscuous mode [ 167.277800][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.314416][ T6340] device bridge_slave_0 left promiscuous mode [ 167.323773][ T6340] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.458841][ T6340] device veth1_macvtap left promiscuous mode [ 167.517940][ T6340] device veth0_macvtap left promiscuous mode [ 167.530837][ T6340] device veth1_vlan left promiscuous mode [ 167.561047][ T4290] Bluetooth: hci1: command 0x0409 tx timeout [ 167.592719][ T6340] device veth0_vlan left promiscuous mode [ 168.302833][ T6340] bond3 (unregistering): Released all slaves [ 168.389981][ T6547] loop1: detected capacity change from 0 to 512 [ 168.440967][ T6547] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.594: casefold flag without casefold feature [ 168.457767][ T6547] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.594: couldn't read orphan inode 15 (err -117) [ 168.486288][ T6547] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 168.671473][ T6340] bond1 (unregistering): (slave bond2): Releasing backup interface [ 168.682335][ T6340] bond2 (unregistering): Released all slaves [ 168.695802][ T6340] bond1 (unregistering): Released all slaves [ 168.800401][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 168.992458][ T6559] fuse: root generation should be zero [ 169.449181][ T6340] team0 (unregistering): Port device team_slave_1 removed [ 169.489363][ T6340] team0 (unregistering): Port device team_slave_0 removed [ 169.528531][ T6340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.651150][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 169.820103][ T6340] bond0 (unregistering): Released all slaves [ 169.915199][ T6478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.924666][ T6478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.952151][ T6478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.009765][ T6568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.600'. [ 170.037315][ T6572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.600'. [ 170.051449][ T6478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.064136][ T6478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.131031][ T6478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.238546][ T6565] netdevsim netdevsim99 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.297481][ T6478] device hsr_slave_0 entered promiscuous mode [ 170.346054][ T6478] device hsr_slave_1 entered promiscuous mode [ 170.555939][ T6583] device geneve2 entered promiscuous mode [ 171.139355][ T4291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.153553][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.168969][ T4291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.181830][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.191347][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 171.201728][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.440453][ T6600] chnl_net:caif_netlink_parms(): no params data found [ 171.513425][ T6600] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.538942][ T6600] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.574158][ T6600] device bridge_slave_0 entered promiscuous mode [ 171.626397][ T6600] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.650525][ T6600] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.674123][ T6600] device bridge_slave_1 entered promiscuous mode [ 171.721229][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 171.765034][ T6600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.787505][ T6600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.855066][ T6600] team0: Port device team_slave_0 added [ 171.876716][ T6600] team0: Port device team_slave_1 added [ 171.896889][ T6478] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 171.915562][ T6478] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 171.927616][ T6600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.935173][ T6600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.961398][ T6600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.979943][ T6478] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 171.990461][ T6600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.004138][ T6600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.036226][ T6600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.049239][ T6478] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 172.100118][ T6600] device hsr_slave_0 entered promiscuous mode [ 172.107612][ T6600] device hsr_slave_1 entered promiscuous mode [ 172.115547][ T6600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.123637][ T6600] Cannot create hsr debugfs directory [ 172.268060][ T6478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.295480][ T6340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.309706][ T6340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.322241][ T6478] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.391977][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.408320][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.430601][ T6344] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.437850][ T6344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.463560][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.485738][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.504876][ T6344] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.512053][ T6344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.535852][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.544288][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.563821][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.573483][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.594841][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.614821][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.635617][ T6600] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 172.659135][ T6600] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 172.696532][ T6600] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 172.720371][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.731874][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.744204][ T6600] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 172.753769][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.765560][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.779950][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.790447][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.802573][ T6478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.962791][ T6600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.995396][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.016739][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.044102][ T6600] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.077289][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.098083][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.123154][ T6349] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.130334][ T6349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.158812][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.176999][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.195927][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.214678][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.221880][ T6338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.241250][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 173.269352][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.279972][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.338623][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.364606][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.386898][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.408715][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.426443][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.440232][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.467199][ T6600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.496498][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.521220][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.531691][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.571968][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.626016][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.642787][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.685845][ T6478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.717555][ T6656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.619'. [ 173.801461][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 174.407658][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.435818][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.462830][ T6600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.900484][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.916428][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.965474][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.979237][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.009606][ T6478] device veth0_vlan entered promiscuous mode [ 175.029534][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.044686][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.090657][ T6478] device veth1_vlan entered promiscuous mode [ 175.101853][ T6340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 175.147200][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.167648][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.214049][ T6478] device veth0_macvtap entered promiscuous mode [ 175.226859][ T6478] device veth1_macvtap entered promiscuous mode [ 175.272376][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.300792][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.324298][ T4291] Bluetooth: hci0: command 0x041b tx timeout [ 175.341168][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.378015][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.418348][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.449294][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.467458][ T6478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.488591][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.509421][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 175.519094][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 175.528645][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 175.542373][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.555519][ T26] audit: type=1800 audit(1785811980.536:12): pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.625" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 175.577943][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.616356][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.646159][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.659775][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.671275][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.684276][ T6478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.706391][ T6478] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.734865][ T6478] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.745488][ T6478] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.754529][ T6478] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.775622][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.788806][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.841904][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.856689][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.897978][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.934313][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.951432][ T6600] device veth0_vlan entered promiscuous mode [ 176.002676][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.014124][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.023216][ T6600] device veth1_vlan entered promiscuous mode [ 176.039715][ T6348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.061083][ T6348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.081531][ T6351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.101663][ T6351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.124784][ T6351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 176.199845][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.241379][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.259823][ T6329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.269064][ T6600] device veth0_macvtap entered promiscuous mode [ 176.290776][ T6329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.303027][ T6600] device veth1_macvtap entered promiscuous mode [ 176.330462][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.354569][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.370401][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.395304][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.439360][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.512831][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.530618][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.546228][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.556872][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.568094][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.584328][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.598164][ T6600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.617010][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.635351][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.650468][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.667651][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.679164][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.710214][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.727551][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.739770][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.758550][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.779555][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.822407][ T6600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.851936][ T6348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.879009][ T6348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.900364][ T6600] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.941228][ T6600] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.949950][ T6600] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.989265][ T6600] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.120425][ T6745] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 177.162788][ T6351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.176914][ T6351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.202730][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 177.277866][ T6351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.290742][ T6351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.318230][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.410471][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 177.444572][ T26] audit: type=1326 audit(1785811982.426:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.4.636" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f59e019 code=0x0 [ 177.569688][ T6755] loop6: detected capacity change from 0 to 512 [ 177.621152][ T6755] FAT-fs (loop6): bogus number of FAT sectors [ 177.639331][ T6755] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 177.668203][ T6755] FAT-fs (loop6): Can't find a valid FAT filesystem [ 177.917183][ T6741] loop5: detected capacity change from 0 to 40427 [ 177.946272][ T6741] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 177.971487][ T6741] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 177.989920][ T6741] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x3ffff [ 178.015361][ T6741] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x6 [ 178.049312][ T6741] F2FS-fs (loop5): invalid crc value [ 178.095085][ T6741] F2FS-fs (loop5): Found nat_bits in checkpoint [ 178.234427][ T6741] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 178.248407][ T6741] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 178.650562][ T6478] syz-executor: attempt to access beyond end of device [ 178.650562][ T6478] loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 178.720711][ T6478] syz-executor: attempt to access beyond end of device [ 178.720711][ T6478] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 178.793032][ T6478] syz-executor: attempt to access beyond end of device [ 178.793032][ T6478] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 178.966177][ T6780] raw_sendmsg: syz.0.643 forgot to set AF_INET. Fix it! [ 179.034604][ T6779] ipt_CLUSTERIP: Please specify destination IP [ 179.437253][ T6786] netlink: 20 bytes leftover after parsing attributes in process `syz.6.645'. [ 179.468284][ T6786] netlink: 48 bytes leftover after parsing attributes in process `syz.6.645'. [ 179.481417][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 179.550827][ T6786] netlink: 20 bytes leftover after parsing attributes in process `syz.6.645'. [ 179.623128][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.6.645'. [ 179.671180][ T6786] netlink: 20 bytes leftover after parsing attributes in process `syz.6.645'. [ 180.633180][ T26] audit: type=1326 audit(1785811985.616:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.4.656" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f59e019 code=0x7ffc0000 [ 180.709389][ T26] audit: type=1326 audit(1785811985.616:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.4.656" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f59e019 code=0x7ffc0000 [ 180.728478][ T6815] overlayfs: failed to set xattr on upper [ 180.800811][ T26] audit: type=1326 audit(1785811985.616:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.4.656" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f59e019 code=0x7ffc0000 [ 180.840953][ T6815] overlayfs: ...falling back to index=off,metacopy=off. [ 180.896290][ T26] audit: type=1326 audit(1785811985.616:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.4.656" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f59e019 code=0x7ffc0000 [ 180.921532][ T6815] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 180.953459][ T26] audit: type=1326 audit(1785811985.646:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.4.656" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fcb4f59e019 code=0x7ffc0000 [ 181.030069][ T6815] overlayfs: failed to resolve './file1/file0': -2 [ 181.049479][ T26] audit: type=1326 audit(1785811985.746:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.4.656" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f59e019 code=0x7ffc0000 [ 181.124498][ T26] audit: type=1326 audit(1785811985.746:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.4.656" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcb4f59dd82 code=0x7ffc0000 [ 181.200768][ T26] audit: type=1326 audit(1785811985.746:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.4.656" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcb4f59de17 code=0x7ffc0000 [ 181.289238][ T26] audit: type=1326 audit(1785811985.746:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.4.656" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcb4f55ad11 code=0x7ffc0000 [ 181.363448][ T26] audit: type=1326 audit(1785811985.746:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.4.656" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fcb4f59ee09 code=0x7ffc0000 [ 181.754047][ T6831] netlink: 'syz.4.660': attribute type 1 has an invalid length. [ 181.995764][ T6831] device bond1 entered promiscuous mode [ 182.035856][ T6831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.134871][ T6836] bond1: (slave bridge1): making interface the new active one [ 182.204105][ T6836] device bridge1 entered promiscuous mode [ 182.232758][ T6836] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 182.284241][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 184.077765][ T6886] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 184.389974][ T6896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.683'. [ 184.607046][ T6904] netlink: 156 bytes leftover after parsing attributes in process `syz.0.686'. [ 184.728158][ T6908] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 186.349571][ T6940] loop6: detected capacity change from 0 to 256 [ 186.963706][ T6957] netlink: 'syz.6.705': attribute type 1 has an invalid length. [ 187.158893][ T6957] device hsr_slave_1 left promiscuous mode [ 187.337950][ T6962] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 187.701449][ T6964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.761262][ T6964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.850570][ T6964] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 187.892835][ T6964] bond0 (unregistering): Released all slaves [ 188.266772][ T6978] netlink: 'syz.6.713': attribute type 13 has an invalid length. [ 188.337489][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 188.420141][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.446367][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.457354][ T7003] loop6: detected capacity change from 0 to 512 [ 189.639612][ T7000] loop2: detected capacity change from 0 to 32768 [ 189.649980][ T7000] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.720 (7000) [ 189.667497][ T7003] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 189.676892][ T7000] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.687178][ T7000] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 189.695950][ T7000] BTRFS info (device loop2): setting nodatacow, compression disabled [ 189.704116][ T7000] BTRFS info (device loop2): enabling auto defrag [ 189.710604][ T7000] BTRFS info (device loop2): max_inline at 0 [ 189.716704][ T7000] BTRFS info (device loop2): using free space tree [ 189.758249][ T7003] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.944389][ T7000] BTRFS info (device loop2): scrub: started on devid 1 [ 189.970729][ T7000] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0 [ 190.087566][ T4281] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 190.301488][ T4362] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4362) [ 190.424060][ T7038] netlink: 'syz.5.726': attribute type 1 has an invalid length. [ 190.468334][ T6600] EXT4-fs (loop6): unmounting filesystem. [ 190.573771][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'. [ 190.593183][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'. [ 190.626317][ T7048] loop6: detected capacity change from 0 to 2048 [ 190.639160][ T7042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.722'. [ 190.660093][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'. [ 190.703538][ T7048] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.716945][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'. [ 190.789559][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.722'. [ 191.687494][ T7073] tipc: Failed to remove unknown binding: 66,0,0/0:1846890259/1846890260 [ 193.030888][ C1] sched: RT throttling activated [ 194.043458][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.049822][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.334175][ T7110] netlink: 'syz.4.750': attribute type 13 has an invalid length. [ 194.457080][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 194.602852][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.687393][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.911994][ T7127] loop2: detected capacity change from 0 to 256 [ 194.960756][ T7127] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 195.028335][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 195.028350][ T26] audit: type=1800 audit(1785812000.006:57): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.756" name="file1" dev="loop2" ino=1048625 res=0 errno=0 [ 195.131233][ T26] audit: type=1800 audit(1785812000.056:58): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.756" name="file1" dev="loop2" ino=1048625 res=0 errno=0 [ 195.496986][ T7143] loop6: detected capacity change from 0 to 512 [ 195.550760][ T7143] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 195.589905][ T7143] EXT4-fs (loop6): orphan cleanup on readonly fs [ 195.603062][ T7143] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:511: comm syz.6.762: Block bitmap for bg 0 marked uninitialized [ 195.628488][ T7148] loop2: detected capacity change from 0 to 8 [ 195.642521][ T7143] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 195.748766][ T7143] EXT4-fs (loop6): 1 orphan inode deleted [ 195.781050][ T7143] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 195.862683][ T7147] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 196.002551][ T6600] EXT4-fs (loop6): unmounting filesystem. [ 196.008930][ T2168] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 196.218862][ T2168] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 196.242924][ T2168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.284935][ T2168] usb 3-1: config 0 descriptor?? [ 196.338155][ T2168] cp210x 3-1:0.0: cp210x converter detected [ 196.428821][ T7162] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 196.747473][ T2168] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 196.799085][ T2168] usb 3-1: cp210x converter now attached to ttyUSB0 [ 197.006448][ T2168] usb 3-1: USB disconnect, device number 4 [ 197.045633][ T2168] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 197.096122][ T2168] cp210x 3-1:0.0: device disconnected [ 197.742255][ T7193] tipc: Started in network mode [ 197.749557][ T7193] tipc: Node identity 0047a2b78a0000000000000000000001, cluster identity 4711 [ 197.785762][ T7193] tipc: Enabling of bearer rejected, failed to enable media [ 198.126476][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.789'. [ 198.153209][ T7206] loop6: detected capacity change from 0 to 256 [ 198.171819][ T7206] exfat: Deprecated parameter 'utf8' [ 198.191266][ T7206] exfat: Bad value for 'uid' [ 198.434404][ T7214] netlink: 'syz.4.792': attribute type 1 has an invalid length. [ 198.587003][ T2168] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 198.631093][ T7214] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.737102][ T7216] bond2: (slave veth5): Enslaving as an active interface with a down link [ 198.793358][ T2168] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.811330][ T2168] usb 6-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 198.820538][ T2168] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 198.863165][ T2168] usb 6-1: Product: syz [ 198.869690][ T2168] usb 6-1: Manufacturer: syz [ 198.921430][ T2168] usb_debug 6-1:1.0: debug converter detected [ 198.940188][ T2168] usb 6-1: debug converter now attached to ttyUSB0 [ 199.132074][ T2168] usb 6-1: USB disconnect, device number 2 [ 199.151274][ T2168] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 199.168397][ T2168] usb_debug 6-1:1.0: device disconnected [ 199.815894][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.803'. [ 200.050130][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.805'. [ 200.510488][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.809'. [ 200.534331][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.809'. [ 200.570989][ T7261] netlink: 'syz.5.809': attribute type 15 has an invalid length. [ 200.594553][ T7261] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 200.604128][ T7261] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 200.612811][ T7261] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 200.621466][ T7261] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 200.683344][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.809'. [ 200.711056][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.809'. [ 200.726770][ T7261] netlink: 'syz.5.809': attribute type 15 has an invalid length. [ 200.740614][ T7261] netdevsim netdevsim5 netdevsim0: set [0, 1] type 1 family 0 port 60387 - 0 [ 200.749692][ T7261] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 60387 - 0 [ 200.758697][ T7261] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 60387 - 0 [ 200.767591][ T7261] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 60387 - 0 [ 201.329730][ T7267] loop4: detected capacity change from 0 to 32768 [ 201.343600][ T7267] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.811 (7267) [ 201.361898][ T7267] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.372734][ T7267] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 201.382946][ T7267] BTRFS info (device loop4): using free space tree [ 201.472490][ T7267] BTRFS info (device loop4): enabling ssd optimizations [ 201.556007][ T7298] loop2: detected capacity change from 0 to 256 [ 201.568718][ T7298] exfat: Deprecated parameter 'utf8' [ 201.610018][ T7298] exfat: Bad value for 'uid' [ 202.076367][ T4283] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 202.267755][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.822'. [ 202.319036][ T7315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.822'. [ 202.549105][ T4391] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (4391) [ 202.755184][ T7325] loop5: detected capacity change from 0 to 16 [ 202.883182][ T7325] erofs: (device loop5): mounted with root inode @ nid 36. [ 203.229395][ T7344] lo speed is unknown, defaulting to 1000 [ 203.266113][ T7344] lo speed is unknown, defaulting to 1000 [ 203.308381][ T6478] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 203.342961][ T7344] lo speed is unknown, defaulting to 1000 [ 203.420566][ T6478] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36 [ 203.432579][ T7344] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 203.473592][ T7344] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 203.633523][ T7344] lo speed is unknown, defaulting to 1000 [ 203.723849][ T7344] lo speed is unknown, defaulting to 1000 [ 203.730298][ T7344] lo speed is unknown, defaulting to 1000 [ 203.749656][ T7344] lo speed is unknown, defaulting to 1000 [ 203.779008][ T7344] lo speed is unknown, defaulting to 1000 [ 203.813685][ T7344] lo speed is unknown, defaulting to 1000 [ 204.067688][ T6242] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 204.126496][ T6242] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 204.138831][ T6242] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.264275][ T6242] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 204.276681][ T6242] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 204.293404][ T6242] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.426244][ T6242] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 204.469796][ T6242] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 204.506838][ T6242] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.712485][ T6242] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 204.737481][ T6242] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 204.768938][ T6242] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.809860][ T7353] lo speed is unknown, defaulting to 1000 [ 205.077901][ T4291] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.089375][ T4291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.109706][ T4291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.118388][ T4291] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.128366][ T4291] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 205.135778][ T4291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.274003][ T7367] lo speed is unknown, defaulting to 1000 [ 205.325891][ T6242] tipc: Left network mode [ 205.782284][ T7367] chnl_net:caif_netlink_parms(): no params data found [ 205.809671][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.837'. [ 206.358750][ T7367] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.366182][ T4291] Bluetooth: hci2: command 0x0406 tx timeout [ 206.372529][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 206.378579][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 206.448794][ T7367] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.488413][ T7367] device bridge_slave_0 entered promiscuous mode [ 206.668479][ T7367] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.683268][ T7367] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.722137][ T7367] device bridge_slave_1 entered promiscuous mode [ 206.835244][ T7367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.852413][ T6242] IPVS: stopping backup sync thread 6908 ... [ 207.034469][ T7367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.160660][ T7367] team0: Port device team_slave_0 added [ 207.166825][ T4291] Bluetooth: hci1: command 0x0409 tx timeout [ 207.389396][ T7367] team0: Port device team_slave_1 added [ 207.503446][ T6242] device hsr_slave_0 left promiscuous mode [ 207.560486][ T6242] device hsr_slave_1 left promiscuous mode [ 207.581310][ T6242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.625081][ T6242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.659331][ T6242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.687504][ T6242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.743880][ T6242] device bridge_slave_1 left promiscuous mode [ 207.811289][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.847503][ T6242] device bridge_slave_0 left promiscuous mode [ 207.871364][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.923390][ T7437] loop4: detected capacity change from 0 to 512 [ 208.064803][ T6242] device veth1_macvtap left promiscuous mode [ 208.094286][ T7437] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 208.140101][ T6242] device veth0_macvtap left promiscuous mode [ 208.151260][ T7437] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.181109][ T6242] device veth1_vlan left promiscuous mode [ 208.186994][ T6242] device veth0_vlan left promiscuous mode [ 208.503717][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 209.241374][ T4291] Bluetooth: hci1: command 0x041b tx timeout [ 210.446820][ T6242] team0 (unregistering): Port device team_slave_1 removed [ 210.513496][ T6242] team0 (unregistering): Port device team_slave_0 removed [ 210.561651][ T6242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.615962][ T6242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.014720][ T6242] bond0 (unregistering): Released all slaves [ 211.221883][ T7367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.230973][ T7367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.267637][ T7367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.289902][ T7367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.299104][ T7367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.321699][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 211.341234][ T7367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.593142][ T7367] device hsr_slave_0 entered promiscuous mode [ 211.627961][ T7367] device hsr_slave_1 entered promiscuous mode [ 211.723496][ T7496] netlink: 'syz.4.869': attribute type 12 has an invalid length. [ 212.156133][ T7367] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 212.195913][ T7367] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 212.232832][ T7367] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 212.286097][ T7367] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 212.295660][ T7510] loop6: detected capacity change from 0 to 512 [ 212.329129][ T7510] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 212.336055][ T7510] EXT4-fs (loop6): mount failed [ 212.690109][ T7367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.806167][ T7520] team0: Port device team_slave_1 removed [ 212.878250][ T6336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.898631][ T6336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.982834][ T7367] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.018258][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.034845][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.075244][ T6334] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.082418][ T6334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.126143][ T7529] loop4: detected capacity change from 0 to 512 [ 213.141790][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.285623][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.308566][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.344796][ T7529] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 213.354109][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.361294][ T6334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.371377][ T7529] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.401448][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 213.417416][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.443317][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.538436][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.548458][ T7529] EXT4-fs error (device loop4): __ext4_new_inode:1291: comm syz.4.879: failed to insert inode 16: doubly allocated? [ 213.577422][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.599617][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.626197][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.639552][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.655702][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.675716][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.717125][ T7367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.753953][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.784835][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.797834][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 213.821625][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.962241][ T7531] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 214.224987][ T7546] loop4: detected capacity change from 0 to 8192 [ 214.791967][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.824177][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.888497][ T7367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.144485][ T7584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.894'. [ 215.400026][ T7592] tipc: Started in network mode [ 215.425348][ T7592] tipc: Node identity ac14140f, cluster identity 4711 [ 215.458410][ T7592] tipc: New replicast peer: 255.255.255.255 [ 215.481246][ T4291] Bluetooth: hci1: command 0x0411 tx timeout [ 215.518404][ T7592] tipc: Enabled bearer , priority 10 [ 215.763610][ T7604] netlink: 64 bytes leftover after parsing attributes in process `syz.6.899'. [ 216.005874][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.044873][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.116679][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.130849][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.149043][ T7367] device veth0_vlan entered promiscuous mode [ 216.157436][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.170654][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.209899][ T7367] device veth1_vlan entered promiscuous mode [ 216.277342][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 216.303859][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 216.325636][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.358633][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.398339][ T7367] device veth0_macvtap entered promiscuous mode [ 216.425497][ T7367] device veth1_macvtap entered promiscuous mode [ 216.519574][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.556841][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.597107][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.636829][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.647688][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.673793][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.688595][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.709664][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.729100][ T7367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.746751][ T6348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 216.758567][ T6348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 216.771480][ T6348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.801539][ T6348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.830126][ T7032] tipc: Node number set to 2886997007 [ 216.859651][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.897838][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.918714][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.932408][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.942383][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.953364][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.977560][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.998273][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.031987][ T7367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.053496][ T6348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.063052][ T6348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.101417][ T7367] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.140643][ T7367] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.154060][ T7367] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.194432][ T7367] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.221721][ T7648] netlink: 'syz.2.913': attribute type 1 has an invalid length. [ 217.389586][ T7652] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 217.410304][ T7652] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 217.478620][ T7652] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 217.698283][ T6329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.727817][ T6329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.797149][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 217.830500][ T6348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.856376][ T6348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.911899][ T6348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 217.963485][ T4291] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 217.972295][ T4291] Bluetooth: hci2: Injecting HCI hardware error event [ 217.982776][ T4289] Bluetooth: hci2: hardware error 0x00 [ 220.121046][ T4289] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 221.272072][ T7755] netlink: 52 bytes leftover after parsing attributes in process `syz.7.944'. [ 221.302264][ T7755] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.309517][ T7755] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.393927][ T7761] netlink: 76 bytes leftover after parsing attributes in process `syz.7.944'. [ 221.449781][ T7761] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.458339][ T7761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.465927][ T7761] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.473101][ T7761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.558425][ T7761] netlink: 52 bytes leftover after parsing attributes in process `syz.7.944'. [ 221.609201][ T7761] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.616487][ T7761] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.760286][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'. [ 221.781813][ T7772] syz.6.948 uses obsolete (PF_INET,SOCK_PACKET) [ 222.453992][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.7.955'. [ 222.506204][ T7793] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.515070][ T7793] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.523953][ T7793] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.532712][ T7793] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.677569][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.7.955'. [ 222.927739][ T7804] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 223.005213][ T7804] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 223.016830][ T7807] loop2: detected capacity change from 0 to 1024 [ 223.039771][ T7807] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.093469][ T7807] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 223.110405][ T7804] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 223.182853][ T7804] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 223.235631][ T7804] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 223.246422][ T7807] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz.2.959: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 223.324150][ T7804] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 223.366246][ T7807] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.959: couldn't read orphan inode 11 (err -117) [ 223.378889][ T7819] lo: Caught tx_queue_len zero misconfig [ 223.432501][ T7807] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 223.523196][ T7807] EXT4-fs (loop2): shut down requested (1) [ 223.687399][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 224.460546][ T7842] lo speed is unknown, defaulting to 1000 [ 225.706232][ T7699] Set syz1 is full, maxelem 65536 reached [ 226.119271][ T7891] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 226.216798][ T7893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.977'. [ 226.400068][ T7896] 8021q: adding VLAN 0 to HW filter on device bond2 [ 226.499789][ T7896] bond1: (slave bond2): Enslaving as an active interface with an up link [ 226.570509][ T7893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.977'. [ 226.601043][ T7893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.339618][ T6242] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 228.768081][ T26] audit: type=1326 audit(1785812033.746:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.6.1005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68439e019 code=0x7ffc0000 [ 228.852732][ T26] audit: type=1326 audit(1785812033.746:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.6.1005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68439e019 code=0x7ffc0000 [ 228.885568][ T26] audit: type=1326 audit(1785812033.746:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.6.1005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68439e019 code=0x7ffc0000 [ 228.917993][ T26] audit: type=1326 audit(1785812033.746:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.6.1005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68439e019 code=0x7ffc0000 [ 228.955210][ T26] audit: type=1326 audit(1785812033.746:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.6.1005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fb68439e019 code=0x7ffc0000 [ 228.986732][ T26] audit: type=1326 audit(1785812033.746:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.6.1005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68439e019 code=0x7ffc0000 [ 229.046330][ T26] audit: type=1326 audit(1785812033.746:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.6.1005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68439e019 code=0x7ffc0000 [ 229.104877][ T7988] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.112403][ T7988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.120950][ T26] audit: type=1326 audit(1785812033.746:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.6.1005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68439e019 code=0x7ffc0000 [ 229.121355][ T7988] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.152037][ T7988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.187408][ T26] audit: type=1326 audit(1785812033.746:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.6.1005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68439e019 code=0x7ffc0000 [ 229.218128][ T7988] team0: Port device bridge0 added [ 229.230975][ T26] audit: type=1326 audit(1785812033.746:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.6.1005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb68439e019 code=0x7ffc0000 [ 229.257032][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.309267][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1008'. [ 229.376913][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.834813][ T8000] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1012'. [ 229.911197][ T8002] device syzkaller1 entered promiscuous mode [ 229.949895][ T8004] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1014'. [ 230.233185][ T8010] loop2: detected capacity change from 0 to 512 [ 230.267571][ T8010] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 230.279384][ T8013] loop6: detected capacity change from 0 to 512 [ 230.309213][ T8010] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 230.320700][ T8013] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 230.330723][ T8010] EXT4-fs (loop2): orphan cleanup on readonly fs [ 230.352191][ T8010] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 230.419224][ T8010] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 230.465346][ T8010] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 230.521772][ T8010] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.1026: corrupted inode contents [ 230.598211][ T8010] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #12: comm syz.2.1026: mark_inode_dirty error [ 230.641606][ T8010] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.1026: corrupted inode contents [ 230.696306][ T8010] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.1026: mark_inode_dirty error [ 230.739948][ T8010] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.1026: corrupted inode contents [ 230.823224][ T8010] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 230.849049][ T8010] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.1026: corrupted inode contents [ 230.880588][ T8010] EXT4-fs error (device loop2): ext4_truncate:4325: inode #12: comm syz.2.1026: mark_inode_dirty error [ 230.913853][ T8010] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 230.947127][ T8010] EXT4-fs (loop2): 1 truncate cleaned up [ 230.953815][ T8010] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 231.107500][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 231.304556][ T8033] loop2: detected capacity change from 0 to 2048 [ 231.389890][ T8033] Alternate GPT is invalid, using primary GPT. [ 231.403391][ T8033] loop2: p1 p2 p3 [ 231.416465][ T8033] loop2: partition table partially beyond EOD, truncated [ 231.877661][ T8044] device syz_tun entered promiscuous mode [ 231.924218][ T4362] udevd[4362]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 231.972824][ T4360] udevd[4360]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 231.974051][ T4391] udevd[4391]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 231.992892][ T8044] device vlan2 entered promiscuous mode [ 232.556126][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 232.602846][ T6242] wlan1: Trigger new scan to find an IBSS to join [ 233.361963][ T8099] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.369796][ T8099] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.396545][ T8099] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.404135][ T8099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.414782][ T8099] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.422022][ T8099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.467028][ T8099] team0: Port device bridge0 added [ 233.479769][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1045'. [ 233.530117][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.552889][ T8104] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1046'. [ 233.586517][ T8104] device ip6gre1 entered promiscuous mode [ 233.658753][ T8107] netlink: 'syz.7.1046': attribute type 6 has an invalid length. [ 233.680140][ T8107] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1046'. [ 233.771042][ T26] kauditd_printk_skb: 2812 callbacks suppressed [ 233.771055][ T26] audit: type=1326 audit(1785812038.756:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.4.1044" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb4f55e84e code=0x7ffc0000 [ 233.816140][ T26] audit: type=1326 audit(1785812038.786:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.4.1044" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb4f53f399 code=0x7ffc0000 [ 233.862058][ T26] audit: type=1326 audit(1785812038.786:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.4.1044" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb4f597d97 code=0x7ffc0000 [ 233.897329][ T26] audit: type=1326 audit(1785812038.786:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.4.1044" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb4f53f399 code=0x7ffc0000 [ 233.924569][ T26] audit: type=1326 audit(1785812038.786:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.4.1044" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb4f597d97 code=0x7ffc0000 [ 233.983752][ T26] audit: type=1326 audit(1785812038.786:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.4.1044" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb4f53f399 code=0x7ffc0000 [ 233.998456][ T8111] loop6: detected capacity change from 0 to 1024 [ 234.016241][ T26] audit: type=1326 audit(1785812038.786:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.4.1044" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb4f597d97 code=0x7ffc0000 [ 234.040637][ T26] audit: type=1326 audit(1785812038.786:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.4.1044" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb4f55e84e code=0x7ffc0000 [ 234.108835][ T8111] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 234.149151][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 234.200288][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 234.217474][ T26] audit: type=1326 audit(1785812038.786:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.4.1044" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb4f53f399 code=0x7ffc0000 [ 234.243896][ T26] audit: type=1326 audit(1785812038.786:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.4.1044" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb4f597d97 code=0x7ffc0000 [ 234.283944][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 234.355189][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 234.413577][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 234.450380][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 234.495941][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 235.113018][ T6600] EXT4-fs (loop6): unmounting filesystem. [ 235.644908][ T6344] wlan1: Trigger new scan to find an IBSS to join [ 236.062196][ T8193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1060'. [ 236.140578][ T8193] device ip6gre1 entered promiscuous mode [ 236.255076][ T8193] netlink: 'syz.4.1060': attribute type 6 has an invalid length. [ 236.288860][ T8193] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1060'. [ 236.763040][ T8217] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.770561][ T8217] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.834287][ T8217] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.841831][ T8217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.851549][ T8217] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.858691][ T8217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.996970][ T8217] team0: Port device bridge0 added [ 237.017870][ T8216] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1067'. [ 237.114734][ T8224] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1069'. [ 237.318881][ T8225] 8021q: adding VLAN 0 to HW filter on device bond2 [ 237.363348][ T8225] bond1: (slave bond2): Enslaving as an active interface with an up link [ 237.380697][ T8226] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1069'. [ 237.416336][ T8226] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.749401][ T8248] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 237.789798][ T8248] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 237.872139][ T8248] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 237.928522][ T8248] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 237.949314][ T8248] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 237.972017][ T8248] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 238.024130][ T8256] netlink: 'syz.2.1077': attribute type 1 has an invalid length. [ 238.081784][ T8248] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 238.112553][ T8256] 8021q: adding VLAN 0 to HW filter on device bond3 [ 238.131416][ T8248] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 238.143066][ T8248] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 238.153733][ T8248] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 238.381777][ T8263] bond3: (slave geneve2): making interface the new active one [ 238.426974][ T8263] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 238.477333][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 238.601986][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.054162][ T8294] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1088'. [ 239.092849][ T8294] device ip6gre1 entered promiscuous mode [ 239.242984][ T8302] netlink: 'syz.0.1088': attribute type 6 has an invalid length. [ 239.251097][ T8302] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1088'. [ 239.333915][ T8307] loop4: detected capacity change from 0 to 1024 [ 239.373615][ T8307] EXT4-fs: Ignoring removed bh option [ 239.396513][ T8307] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 239.531828][ T8307] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 240.004273][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 241.484571][ T8369] loop6: detected capacity change from 0 to 1024 [ 241.526367][ T8369] EXT4-fs: Ignoring removed bh option [ 241.578822][ T8369] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 241.703164][ T8369] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 242.110222][ T6600] EXT4-fs (loop6): unmounting filesystem. [ 242.280306][ T26] kauditd_printk_skb: 198 callbacks suppressed [ 242.280321][ T26] audit: type=1326 audit(1785812047.256:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.7.1110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa006d9e019 code=0x7ffc0000 [ 242.376145][ T8390] lo speed is unknown, defaulting to 1000 [ 242.390045][ T26] audit: type=1326 audit(1785812047.276:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.7.1110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa006d9e019 code=0x7ffc0000 [ 242.482751][ T26] audit: type=1326 audit(1785812047.296:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.7.1110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa006d9e019 code=0x7ffc0000 [ 242.556895][ T26] audit: type=1326 audit(1785812047.296:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.7.1110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa006d9e019 code=0x7ffc0000 [ 242.629121][ T26] audit: type=1326 audit(1785812047.306:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.7.1110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fa006d9e019 code=0x7ffc0000 [ 242.726983][ T26] audit: type=1326 audit(1785812047.306:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.7.1110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa006d9e019 code=0x7ffc0000 [ 242.743259][ T8399] netlink: 'syz.6.1125': attribute type 1 has an invalid length. [ 242.790582][ T26] audit: type=1326 audit(1785812047.306:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.7.1110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa006d9e019 code=0x7ffc0000 [ 242.821427][ T26] audit: type=1326 audit(1785812047.316:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.7.1110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa006d9e019 code=0x7ffc0000 [ 242.865330][ T26] audit: type=1326 audit(1785812047.316:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.7.1110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa006d9e019 code=0x7ffc0000 [ 242.899906][ T8399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.911280][ T26] audit: type=1326 audit(1785812047.316:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.7.1110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa006d9e019 code=0x7ffc0000 [ 242.987084][ T8404] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 243.021738][ T6349] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 243.054929][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 243.074989][ T8399] netlink: 'syz.6.1125': attribute type 10 has an invalid length. [ 243.181609][ T8399] bond1: (slave dummy0): Removing an active aggregator [ 243.193910][ T4754] bond1: Warning: Found an uninitialized port [ 243.223112][ T8399] bond1: (slave dummy0): Releasing backup interface [ 243.279310][ T8399] team0: Port device dummy0 added [ 243.531938][ T8417] overlayfs: failed to clone upperpath [ 244.148032][ T8437] lo speed is unknown, defaulting to 1000 [ 246.946142][ T8524] loop6: detected capacity change from 0 to 1024 [ 246.987748][ T8524] EXT4-fs: Ignoring removed orlov option [ 247.071983][ T8524] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 247.221441][ T8529] EXT4-fs error (device loop6): xattr_find_entry:297: inode #15: comm syz.6.1147: corrupted xattr entries [ 247.539861][ T8541] loop2: detected capacity change from 0 to 1024 [ 247.562068][ T6600] EXT4-fs (loop6): unmounting filesystem. [ 247.780274][ T8541] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 248.603724][ T8573] loop6: detected capacity change from 0 to 256 [ 248.706884][ T8573] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x8277d129, utbl_chksum : 0xe619d30d) [ 249.009631][ T8583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1159'. [ 249.053252][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 249.618639][ T8600] overlayfs: failed to clone upperpath [ 250.501861][ T4304] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.681948][ T4304] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.856555][ T4304] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.998325][ T4304] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.359533][ T8647] netlink: 'syz.4.1177': attribute type 1 has an invalid length. [ 251.504283][ T8647] 8021q: adding VLAN 0 to HW filter on device bond3 [ 251.673616][ T8651] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 251.711591][ T6349] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 251.761019][ T8652] netlink: 'syz.4.1177': attribute type 10 has an invalid length. [ 251.819614][ T8652] bond3: (slave dummy0): Removing an active aggregator [ 251.848612][ T6342] bond3: Warning: Found an uninitialized port [ 251.863736][ T8652] bond3: (slave dummy0): Releasing backup interface [ 252.191938][ T4291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.203514][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.211630][ T4291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.220987][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.231089][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 252.241081][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.444843][ T8667] lo speed is unknown, defaulting to 1000 [ 253.018783][ T8667] chnl_net:caif_netlink_parms(): no params data found [ 253.272145][ T4304] IPVS: stopping backup sync thread 7162 ... [ 253.311658][ T8667] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.336965][ T8667] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.379807][ T8667] device bridge_slave_0 entered promiscuous mode [ 253.579738][ T8667] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.591021][ T8667] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.610536][ T8667] device bridge_slave_1 entered promiscuous mode [ 253.951913][ T8703] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.959408][ T8703] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.281074][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 254.450977][ T8703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.498985][ T8703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.022263][ T8703] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.030667][ T8703] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.039200][ T8703] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.047729][ T8703] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.056230][ T8703] netdevsim netdevsim99 eth4: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.327828][ T8667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.352275][ T8667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.485329][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.491768][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.729102][ T4304] device hsr_slave_0 left promiscuous mode [ 255.753709][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.780961][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.788840][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.811068][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.818839][ T4304] device bridge_slave_1 left promiscuous mode [ 255.825398][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.863578][ T4304] device bridge_slave_0 left promiscuous mode [ 255.869814][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.907740][ T4304] device veth1_macvtap left promiscuous mode [ 255.949718][ T4304] device veth0_macvtap left promiscuous mode [ 255.956251][ T4304] device veth1_vlan left promiscuous mode [ 255.969208][ T4304] device veth0_vlan left promiscuous mode [ 256.296785][ T4304] bond1 (unregistering): Released all slaves [ 256.365518][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 256.933507][ T4304] team0 (unregistering): Port device team_slave_0 removed [ 256.981356][ T4304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.028778][ T4304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.427610][ T4304] team0 (unregistering): Port device dummy0 removed [ 257.483135][ T4304] bond0 (unregistering): Released all slaves [ 257.622911][ T8744] netlink: 'syz.7.1201': attribute type 4 has an invalid length. [ 257.809788][ T8667] team0: Port device team_slave_0 added [ 257.863405][ T8667] team0: Port device team_slave_1 added [ 257.925138][ T8667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.946460][ T8667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.020527][ T8667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.044200][ T8667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.061158][ T8667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.112086][ T8667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.234643][ T8667] device hsr_slave_0 entered promiscuous mode [ 258.267140][ T8667] device hsr_slave_1 entered promiscuous mode [ 258.287433][ T8667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.321102][ T8667] Cannot create hsr debugfs directory [ 258.441000][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 258.849140][ T8667] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 258.886081][ T8667] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 258.913012][ T8667] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 258.936880][ T8667] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 258.951948][ T8799] 9pnet_fd: p9_fd_create_tcp (8799): problem connecting socket to 127.0.0.1 [ 259.072504][ T8789] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1214'. [ 259.169422][ T8667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.218365][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.256819][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.284832][ T8667] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.332557][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.361776][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.390888][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.398025][ T4304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.451194][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.487167][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.521558][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.528726][ T4304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.597986][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.637479][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.682078][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.692249][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.725780][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.774961][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.826279][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.863809][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.904865][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.936617][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.966716][ T8667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.015311][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 260.037649][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.063762][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.324050][ T8836] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1230'. [ 260.500172][ T8836] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1230'. [ 260.522389][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 260.915585][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1233'. [ 260.998626][ T8849] device wlan0 entered promiscuous mode [ 261.105710][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 261.129812][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 261.163831][ T8667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.674868][ T8868] netlink: 'syz.4.1236': attribute type 4 has an invalid length. [ 261.906340][ T8869] netlink: 'syz.4.1236': attribute type 4 has an invalid length. [ 262.086020][ T4638] lo speed is unknown, defaulting to 1000 [ 262.086030][ T4324] lo speed is unknown, defaulting to 1000 [ 263.146830][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.203099][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.277601][ T8667] device veth0_vlan entered promiscuous mode [ 263.318031][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.331633][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.359488][ T8667] device veth1_vlan entered promiscuous mode [ 263.395619][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.416510][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.449074][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 263.487639][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 263.544050][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.563503][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.601897][ T8667] device veth0_macvtap entered promiscuous mode [ 263.651110][ T8667] device veth1_macvtap entered promiscuous mode [ 263.719287][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.757469][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.788005][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.906133][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.945471][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.989701][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.022413][ T8667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.081978][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1246'. [ 264.116307][ T8913] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.125389][ T8913] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.133675][ T8913] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.141929][ T8913] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.150127][ T8913] netdevsim netdevsim99 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.262442][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1246'. [ 264.285159][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 264.312251][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 264.372057][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 264.420744][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 264.467518][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.491059][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.525356][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.547641][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.570147][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.596529][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.630627][ T8667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.662005][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 264.701123][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.732032][ T8667] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.771080][ T8667] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.786032][ T8667] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.814767][ T8667] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.151012][ T4754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.158894][ T4754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.205082][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 265.237453][ T6329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.246596][ T6329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.276881][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 265.755135][ T8957] overlayfs: failed to clone upperpath [ 265.811543][ T8956] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 265.858010][ T8956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.931529][ T8964] netlink: 'syz.8.1262': attribute type 1 has an invalid length. [ 265.987899][ T8966] device erspan0 entered promiscuous mode [ 266.050177][ T8960] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1262'. [ 266.093086][ T8960] netlink: 'syz.8.1262': attribute type 1 has an invalid length. [ 266.377559][ T8979] netlink: 'syz.2.1267': attribute type 1 has an invalid length. [ 266.470781][ T8979] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.488333][ T8983] bond4: Error: No native XDP support for the current bonding mode [ 266.849246][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1269'. [ 268.073808][ T9024] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 268.649430][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1283'. [ 268.773676][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1285'. [ 269.103492][ T9062] overlayfs: failed to clone upperpath [ 270.663738][ T9073] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.671749][ T9073] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.097460][ T9073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.196164][ T9073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.260498][ T9112] CIFS: Attempting to mount \\127.0.0.1\share [ 272.765519][ T9073] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.775519][ T9073] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.784767][ T9073] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.793778][ T9073] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.957903][ T9073] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.967123][ T9073] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.976351][ T9073] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.985291][ T9073] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.062459][ T6342] ------------[ cut here ]------------ [ 273.068421][ T6342] WARNING: CPU: 1 PID: 6342 at net/mac80211/ibss.c:500 ieee80211_ibss_csa_beacon+0x5b4/0x680 [ 273.078755][ T6342] Modules linked in: [ 273.082766][ T6342] CPU: 1 PID: 6342 Comm: kworker/u4:19 Not tainted syzkaller #0 [ 273.090826][ T6342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.101133][ T6342] Workqueue: phy7 ieee80211_csa_finalize_work [ 273.107257][ T6342] RIP: 0010:ieee80211_ibss_csa_beacon+0x5b4/0x680 [ 273.113763][ T6342] Code: f7 c6 05 8b 63 63 04 01 48 c7 c7 50 ae a6 8b be fd 01 00 00 48 c7 c2 e0 ae a6 8b e8 c6 71 bb f7 e9 69 fe ff ff e8 1c f6 d8 f7 <0f> 0b b8 ea ff ff ff e9 7a ff ff ff e8 0b f6 d8 f7 0f 0b e9 b4 fa [ 273.133475][ T6342] RSP: 0018:ffffc90004e1fb70 EFLAGS: 00010293 [ 273.139598][ T6342] RAX: ffffffff89a93804 RBX: ffff888053c60740 RCX: ffff888073235a00 [ 273.147662][ T6342] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 273.155696][ T6342] RBP: 1ffff1100f92bab5 R08: ffffffff90b10307 R09: 1ffffffff2162060 [ 273.163759][ T6342] R10: dffffc0000000000 R11: fffffbfff2162061 R12: dffffc0000000000 [ 273.171784][ T6342] R13: ffff88807c95dac8 R14: ffff88807c95cc80 R15: 0000000000000000 [ 273.179846][ T6342] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 273.188880][ T6342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.195536][ T6342] CR2: 00007f931d3eb700 CR3: 0000000064cb0000 CR4: 00000000003506e0 [ 273.203597][ T6342] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 273.211635][ T6342] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 273.219642][ T6342] Call Trace: [ 273.222985][ T6342] [ 273.225954][ T6342] ? ieee80211_ibss_finish_csa+0x299/0x390 [ 273.231842][ T6342] ieee80211_csa_finalize+0x4ef/0xc60 [ 273.237349][ T6342] ieee80211_csa_finalize_work+0xf2/0x130 [ 273.243145][ T6342] ? process_one_work+0x7b4/0x1160 [ 273.248322][ T6342] process_one_work+0x8ab/0x1160 [ 273.253353][ T6342] ? worker_detach_from_pool+0x240/0x240 [ 273.259045][ T6342] ? _raw_spin_lock_irq+0xb7/0xf0 [ 273.264131][ T6342] ? _raw_spin_lock_irqsave+0x100/0x100 [ 273.269719][ T6342] ? wq_worker_running+0x97/0x190 [ 273.274828][ T6342] worker_thread+0xaf5/0x12a0 [ 273.279584][ T6342] kthread+0x29d/0x330 [ 273.283796][ T6342] ? worker_clr_flags+0x1a0/0x1a0 [ 273.288853][ T6342] ? kthread_blkcg+0xd0/0xd0 [ 273.293506][ T6342] ret_from_fork+0x1f/0x30 [ 273.297987][ T6342] [ 273.301080][ T6342] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 273.308382][ T6342] CPU: 1 PID: 6342 Comm: kworker/u4:19 Not tainted syzkaller #0 [ 273.316043][ T6342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.326130][ T6342] Workqueue: phy7 ieee80211_csa_finalize_work [ 273.332264][ T6342] Call Trace: [ 273.335577][ T6342] [ 273.338549][ T6342] dump_stack_lvl+0x188/0x24e [ 273.343269][ T6342] ? memcpy+0x3c/0x60 [ 273.347290][ T6342] ? show_regs_print_info+0x12/0x12 [ 273.352529][ T6342] ? load_image+0x410/0x410 [ 273.357078][ T6342] panic+0x2d3/0x710 [ 273.361028][ T6342] ? bpf_jit_dump+0xd0/0xd0 [ 273.365593][ T6342] ? ret_from_fork+0x1f/0x30 [ 273.370265][ T6342] __warn+0x2f8/0x4f0 [ 273.374264][ T6342] ? ieee80211_ibss_csa_beacon+0x5b4/0x680 [ 273.380090][ T6342] ? ieee80211_ibss_csa_beacon+0x5b4/0x680 [ 273.385919][ T6342] report_bug+0x2ba/0x4f0 [ 273.390268][ T6342] ? ieee80211_ibss_csa_beacon+0x5b4/0x680 [ 273.396100][ T6342] handle_bug+0x3a/0x70 [ 273.400282][ T6342] exc_invalid_op+0x16/0x40 [ 273.404810][ T6342] asm_exc_invalid_op+0x16/0x20 [ 273.409677][ T6342] RIP: 0010:ieee80211_ibss_csa_beacon+0x5b4/0x680 [ 273.416129][ T6342] Code: f7 c6 05 8b 63 63 04 01 48 c7 c7 50 ae a6 8b be fd 01 00 00 48 c7 c2 e0 ae a6 8b e8 c6 71 bb f7 e9 69 fe ff ff e8 1c f6 d8 f7 <0f> 0b b8 ea ff ff ff e9 7a ff ff ff e8 0b f6 d8 f7 0f 0b e9 b4 fa [ 273.435746][ T6342] RSP: 0018:ffffc90004e1fb70 EFLAGS: 00010293 [ 273.441836][ T6342] RAX: ffffffff89a93804 RBX: ffff888053c60740 RCX: ffff888073235a00 [ 273.449828][ T6342] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 273.457806][ T6342] RBP: 1ffff1100f92bab5 R08: ffffffff90b10307 R09: 1ffffffff2162060 [ 273.465790][ T6342] R10: dffffc0000000000 R11: fffffbfff2162061 R12: dffffc0000000000 [ 273.473768][ T6342] R13: ffff88807c95dac8 R14: ffff88807c95cc80 R15: 0000000000000000 [ 273.481755][ T6342] ? ieee80211_ibss_csa_beacon+0x5b4/0x680 [ 273.487587][ T6342] ? ieee80211_ibss_finish_csa+0x299/0x390 [ 273.493419][ T6342] ieee80211_csa_finalize+0x4ef/0xc60 [ 273.498828][ T6342] ieee80211_csa_finalize_work+0xf2/0x130 [ 273.504561][ T6342] ? process_one_work+0x7b4/0x1160 [ 273.509695][ T6342] process_one_work+0x8ab/0x1160 [ 273.514658][ T6342] ? worker_detach_from_pool+0x240/0x240 [ 273.520311][ T6342] ? _raw_spin_lock_irq+0xb7/0xf0 [ 273.525345][ T6342] ? _raw_spin_lock_irqsave+0x100/0x100 [ 273.530908][ T6342] ? wq_worker_running+0x97/0x190 [ 273.535952][ T6342] worker_thread+0xaf5/0x12a0 [ 273.540661][ T6342] kthread+0x29d/0x330 [ 273.544734][ T6342] ? worker_clr_flags+0x1a0/0x1a0 [ 273.549772][ T6342] ? kthread_blkcg+0xd0/0xd0 [ 273.554398][ T6342] ret_from_fork+0x1f/0x30 [ 273.558846][ T6342] [ 273.562562][ T6342] Kernel Offset: disabled [ 273.567009][ T6342] Rebooting in 86400 seconds..