last executing test programs: 26m32.209876033s ago: executing program 32 (id=203): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000001c0)={0x40, r1, 0x1, 0x70bd2d, 0x25dfdc03, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x1000}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_NOLEARN={0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8008}, 0x8010) 26m27.876237009s ago: executing program 33 (id=242): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 26m27.624853205s ago: executing program 34 (id=248): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x204410, &(0x7f00000000c0)={[{@barrier}, {@usrquota}, {@errors_remount}, {@grpid}]}, 0xfe, 0x4a1, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) getdents64(r0, 0x0, 0x0) 22m59.469154273s ago: executing program 6 (id=702): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x24020400) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) 22m58.040528488s ago: executing program 6 (id=706): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) 22m56.222013723s ago: executing program 6 (id=711): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500"], 0x88}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 22m54.776616399s ago: executing program 6 (id=714): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) close(r0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000280), &(0x7f0000000b00)=r0}, 0x20) 22m53.275940675s ago: executing program 6 (id=719): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='*U\xa2$\x9b[\xd3\xc5\x7f*') prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='*U\xa2$\x9b[\xd3\xc5\x7f*') 22m51.528907968s ago: executing program 6 (id=721): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) 22m35.716152965s ago: executing program 35 (id=721): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) 18m22.99130542s ago: executing program 36 (id=1153): openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0xfffffffc}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000080)={'dvmrp1\x00', 0x281}) 15m14.056129822s ago: executing program 37 (id=1426): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@setlink={0x44, 0x13, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x6000, 0x183}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x143}, @IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x80640c1}, 0x4000000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 15m11.805616966s ago: executing program 7 (id=1446): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_vhci(&(0x7f0000001740)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x11}, @hci_ev_le_direct_adv_info={{}, {0xe8, 0x1, @none, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}}}}, 0x14) 15m9.402711175s ago: executing program 7 (id=1449): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000440)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 15m7.050415552s ago: executing program 7 (id=1453): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x8f, 0x8}]}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty, 0xffffdffd}}, 0x4, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c) 15m5.196472718s ago: executing program 7 (id=1456): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000240)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700), 0x0, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'trusted.', ',(-)}+.@.\x00'}, 0x0, 0x0, 0x1) llistxattr(&(0x7f0000000800)='./file0\x00', 0x0, 0xfffffdf3) 15m1.901159707s ago: executing program 7 (id=1460): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114b0000000000851000000200ad647300008500"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x94) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace$setregs(0xf, r0, 0x7, &(0x7f0000000000)) 14m59.113066356s ago: executing program 7 (id=1464): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./bus\x00', 0x3008014, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f00000020c0)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./debug\x00', 0x200a416, 0x0, 0x0, 0x0, &(0x7f0000000040)) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x2a990a5, 0x0, 0x1, 0x0, 0x0) rename(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000001c0)='./debug\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) 14m55.628719471s ago: executing program 38 (id=1464): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./bus\x00', 0x3008014, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f00000020c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./debug\x00', 0x200a416, 0x0, 0x0, 0x0, &(0x7f0000000040)) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x2a990a5, 0x0, 0x1, 0x0, 0x0) rename(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000001c0)='./debug\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) 12m49.916548203s ago: executing program 3 (id=1632): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000007c0)={@dev={0xfe, 0x80, '\x00', 0x5}}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000800)={@remote}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 12m47.601962379s ago: executing program 3 (id=1636): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0) 12m46.134911425s ago: executing program 0 (id=1640): r0 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f00000005c0)={0x0, "72a59baeb6c10b67b134a5f267418d0000000000000000000000820f2cf9ff6c8d2600", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000740)={0x1, 0x0, 0xffff5f0f, 0xfffd, 0xfffffffffffffffb, 0xb, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x28, 0x4, 0x2}) 12m44.571766883s ago: executing program 0 (id=1643): r0 = syz_open_dev$ndb(&(0x7f00000005c0), 0x0, 0x61c7c039d0921a4e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_DO_IT(r0, 0xab03) 12m43.371907432s ago: executing program 3 (id=1645): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000200)={0x80000002, 0x1801, 0x9, 0xb, 0x59, "ea7102000000f900edffff0900000000000005", 0x800, 0x3}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 12m42.302044368s ago: executing program 0 (id=1647): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f0000000300)='./file0\x00', 0x100000005) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 12m40.358963365s ago: executing program 3 (id=1649): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000c42000/0x4000)=nil, 0x400000, 0x3, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 12m40.249664978s ago: executing program 0 (id=1651): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write$P9_RVERSION(r0, 0x0, 0x13) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0xfffffffffffffe34, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12m38.581346409s ago: executing program 0 (id=1652): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x68, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e353e79d08044f4e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xffffffffffffff80, 0x3, "e734a6e33419021c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2273f5630c4d794c1b62620dfc5bc69922f49fa64684964c"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a3641326b76e87f748151ef6c94c5bfe"}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040817}, 0x8040) 12m38.11157969s ago: executing program 1 (id=1654): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=' ', 0x1}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a80)="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", 0x4b3}], 0x1}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000f40)="0327ea92e8a13af0a5ebf9eb958ba316f3ace9ed84f9f68649c6096912ed545842bbf3b24f9145085009d9b4219979ca89092b2e19aa11a04a5ab0536d32be5ddfabfab36a2f45498fa65d6ed617d67a42eaf529bb303707eb8caea31c4a56c5b6e8d270", 0x64}], 0x1}}], 0x5, 0x2400c0a2) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000a40)="b0", 0x1}], 0x1) 12m37.441493946s ago: executing program 3 (id=1655): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/drivers/usbip-host\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000100)='match_busid\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) 12m36.87699889s ago: executing program 0 (id=1656): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "b12002fb8e6c2217ff7fd4cff2d56f96"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008084}, 0x40000) 12m36.726315604s ago: executing program 1 (id=1658): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r1, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000012c0)="b9354b27b553aeee40000b0000a4df2a9080f3c9aa55548f47b480f3", 0x0, 0x603, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 12m35.916697683s ago: executing program 3 (id=1659): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x0, 0x401c0}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x50}}, 0x24000840) 12m34.311604322s ago: executing program 1 (id=1661): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc) 12m33.1980644s ago: executing program 1 (id=1663): unshare(0x22020600) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2c4043, 0x20) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 12m31.976775339s ago: executing program 1 (id=1665): syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x62a, &(0x7f0000000440)="$eJzs3N1u29YdAPDD2KrVFA0GBFvTNEDZtBcZhriSsjgwsotoNG2zlUSBlAv3aggWuwtqt0C7AWtutmDAtgIbdrXrobvYxZ5g77Bn6TN4oET5O7bhpE2G/H6AdSjxT54/P3COJfCcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEKFlqtdpR6GWDtfX4yZKlIu+fsH66v/8cKA5o7HsNUQhR9ReazXBl8tGVy3uxP6xeroc3Ju/eCM2qaIZHr/3oB3cvz16oNmxEUTghoafQ2N3vq9XLzkyoP/j8wiSf3cgvv3r06f2trY0v6vfN/StfAivpICvzrN9dSeOszOPFhYXW+6vLZbyc9dLy43KU9uOkSLujvIhvJPdCCIu34nT+43xtsLLU7aXxjeTHcXtx8c7NTqu1EH8wP0y7RZkP3v9gvkxWs14vG6yMY6rVNztvhzvVjfhhNopHabMfx5sPtzZunZZkFdQ+S1DntKBOq9Nptzud9sLtxdt3Wq3m5Hb4V+eLMPlgtnVIOLzJ7Hd10/ICeyXsazimbdwrz6oNh/PaSf42LucOr5g5Gvr9ZAQAAAA8a9H4N/YohMbuN/6sl7YOxOxErz6X3AAAAIBnIwrj5+ui+sG8KyFaPvL9/974dbzeMysAAADwf+jPu2Ps5o4ZYxeiKJTDuWj6tX+4/l603a2Wutv14wJHxgmMlq9Gl+qdjIuF2fpdkl6L3pwEvTmN/rYuNg+O9WuEw3lERdGIHo8TCCHM7tV3tgRmxhv9JVydxFx9MCkf1HH1iMSLy1kvnU/y3t126HYvXRil66PffPbwtyEUxc7M14P+pShsPtzamP/l51sPxrk8rvbyeDua7C46OZe5sHcywq93xz3WoxvvHTzixviHmOqovx70L07qbe2/APVgxAtnvwDhj+GtScxbFyflxeman4zrbFZ1tuePOfr9WbSH6+9Nx4uc8cgPZXFtEnPtxrtV8e6Nek0j7GXROS2LTn3+f1ed/3OdiydkEfZlceu0LG7tvwsuHLwz97KoztZxWfg5DXh+Ng/3Qkf6/71+94n9zmRM/wlt7eaJI/nHXfjhWo78e/GrSTH67+tPbtHfmcS8c3V2r0c61KK3TmvRW9MWffbkfv34Fn02/Dtc/8ffQ1gL16fBx/Qr4z62qvevB3rVaPubaoNv6nr/+YedsRDqkeah7M1V1+TVu5P++6uZmw+373+y8cnGZ53OrYXWT1ut253QGB9GXRx/VWbC5eM6KgBeFmnxbXRx9KeoKLLhL9qLi+3uaDWNizz5MC6ypZU0zgajtEhWu4OVNB4W+ShP8l618FG2lJZxuTYc5sUoXs6LeJiX2fp45pe4nvqlTPvdwShLymEv7ZZpnOSDUTcZxUtZmcTDtZ/3snI1LcYbl8M0yZazpDvK8kFc5mtFks7HcZmm+wKzpXQwypazanEQD4us3y1m4o/y3lo/nVtKy6TIhqN8ssNpXdlgOS/61W6PdOIA8LL6MoxnsIt+H0I9ld3unHZnXQjNU2Ke9zECAAcd7qWPzAO4yxwAAAAAAAAAAAAAAADwvOwfrvezekqf8w4EPLLQPNdW0ynUzrxV8+An9147Lvjtpz+cZ7kQQph99On96SQ8T7XD6UxML8JxPf1CFEJ4AdI4+R77rhaap1zKRr3+vFVUJ/f04NermO+1GQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM/lfAAAA//8RzIVU") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x1040, @remote, 0x8}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 12m29.581976748s ago: executing program 1 (id=1667): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x24, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x200000d0) syz_80211_join_ibss(&(0x7f0000000b40)='wlan1\x00', 0x0, 0x0, 0x0) 12m21.113770314s ago: executing program 39 (id=1656): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "b12002fb8e6c2217ff7fd4cff2d56f96"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008084}, 0x40000) 12m20.551648368s ago: executing program 40 (id=1659): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x0, 0x401c0}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x50}}, 0x24000840) 12m13.943140849s ago: executing program 41 (id=1667): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x24, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x200000d0) syz_80211_join_ibss(&(0x7f0000000b40)='wlan1\x00', 0x0, 0x0, 0x0) 8m32.19598061s ago: executing program 2 (id=1789): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, 0x0, 0x0, 0xc, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) syz_emit_ethernet(0x61, &(0x7f0000000580)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x2b, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x3, "f79568c029e530c3899ae5d322348df7"}]}}, {"d4be29"}}}}}}}, 0x0) 8m31.509689797s ago: executing program 2 (id=1790): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes128, 0x3, @desc1}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @aes128, 0x3, @desc1}) 8m29.997164993s ago: executing program 2 (id=1791): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$bt_hci(r0, 0x84, 0x71, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) 8m27.845547616s ago: executing program 2 (id=1792): syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@inlinecrypt}, {@grpid}, {@journal_ioprio}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49f, &(0x7f00000004c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000340)='./file0/../file0\x00', 0x152) 8m26.459861279s ago: executing program 2 (id=1793): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x50, 0x0, 0x87, 0x4}, {0x6, 0xfc, 0xb, 0x5d}]}) write$ppp(r0, &(0x7f0000000200)='rM+', 0x3) 8m18.737157747s ago: executing program 2 (id=1794): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r1}, &(0x7f0000000200), &(0x7f00000009c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r1, &(0x7f0000000680), 0x0}, 0x20) 8m14.260461217s ago: executing program 42 (id=1794): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r1}, &(0x7f0000000200), &(0x7f00000009c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r1, &(0x7f0000000680), 0x0}, 0x20) 6m15.772794522s ago: executing program 4 (id=1868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bc2d, 0x21dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x3}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008850}, 0x20000814) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 6m13.841496729s ago: executing program 4 (id=1870): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newnexthop={0x40, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}]}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@ipv4_newnexthop={0x28, 0x68, 0x501, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) 6m12.219272189s ago: executing program 4 (id=1872): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x88, r3, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x4a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x801}, @device_b, @broadcast, @initial, {0x5, 0x5}, @value=@ver_80211n={0x0, 0x7984, 0x2, 0x2, 0x0, 0x2}}, 0x2810, 0x2, {0x0, 0x6, @default_ap_ssid}, @val, @val={0x2d, 0x1a, {0x1, 0x0, 0x4, 0x0, {0x2, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x6, 0x4, 0xfe}}}}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x41f}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x146e}]]}, 0x88}, 0x1, 0x0, 0x0, 0x6a845ecb4f243e70}, 0x24008080) 6m9.520761805s ago: executing program 4 (id=1873): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000300)={[{@nolazytime}, {@auto_da_alloc}]}, 0x3, 0x42f, &(0x7f0000000480)="$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") r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000775) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 6m5.725098227s ago: executing program 4 (id=1876): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x814c98, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=0x0]) 5m59.43716041s ago: executing program 4 (id=1879): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in=@broadcast, 0x2, 0x0, 0x4e22, 0x4, 0xa}, {0x10000000004, 0x0, 0x10008, 0xd0, 0x4, 0x401, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x4041}, 0xfffffffe, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0x32}, 0x2, @in=@multicast1, 0x3502, 0x4, 0x2, 0xf7, 0x11, 0x20000, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) 5m56.385200565s ago: executing program 43 (id=1879): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in=@broadcast, 0x2, 0x0, 0x4e22, 0x4, 0xa}, {0x10000000004, 0x0, 0x10008, 0xd0, 0x4, 0x401, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x4041}, 0xfffffffe, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0x32}, 0x2, @in=@multicast1, 0x3502, 0x4, 0x2, 0xf7, 0x11, 0x20000, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) 5m44.115333194s ago: executing program 5 (id=1886): unshare(0x22020600) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) poll(&(0x7f0000000100)=[{r0, 0x3040}], 0x1, 0xee16) 5m41.987714865s ago: executing program 5 (id=1887): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 5m40.702218587s ago: executing program 5 (id=1888): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x121a03, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xf8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9) 5m38.781774303s ago: executing program 5 (id=1889): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 5m37.192833172s ago: executing program 5 (id=1890): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x70, r1, 0x1, 0x70bd2a, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xffffffff}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000b00)='INVITE sip:test@12\r\nCall-ID:', 0x1c, 0x0, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10) 5m35.807771966s ago: executing program 5 (id=1891): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000540)="1100f8ae", 0x4}, {&(0x7f00000002c0)="00020283", 0x4}], 0x3) 5m19.770319826s ago: executing program 44 (id=1891): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000540)="1100f8ae", 0x4}, {&(0x7f00000002c0)="00020283", 0x4}], 0x3) 12.597565584s ago: executing program 9 (id=2126): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x2, {{0xa, 0x1, 0x9, @mcast2}}, {{0xa, 0x4e20, 0x2, @local}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0xff, @private2, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000cc0)=ANY=[@ANYBLOB="02000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000590000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000003"], 0x210) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000d80)={0x2, {{0xa, 0x4e23, 0x3, @mcast2}}}, 0x90) 10.649022051s ago: executing program 9 (id=2128): socketpair$unix(0x1, 0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0xc) connect$x25(r0, &(0x7f0000000a80), 0x12) 10.475308615s ago: executing program 8 (id=2129): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000001600)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x574, &(0x7f0000000300)="$eJzs3W9v09odwPGfS7tmmdRNY0KoKnAom1SkEpwEgiIeec5JakjsyHZQ+whVNEUVKUyUSWufMJ6wTdpeBHt4X8R9R+i+hF752Onf/AFa2t7e7ydqfWKf+PzsRufX08bHAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxHJrtl20pOn5nWU1nFsLg9b+0+zVx1bI3UOLEe2KWMmX5HJyPV11/U/7m68l3+ZlLn02J7lkkZOd3137w+OrkxP9148I+Kv8/xv3tLW982q11+u+Pa1ALqAb08O3NbTvRYHXchpaeVGgqpWKfX+pHqm619TRShTrlnJD7cRBqBbcu6pYrZaVLqwEHb9Rc5q6v/LRvZJtV9STQls7YRT4958UInfJazY9v2HqJJuTOo+SN+JTL1axdlpKrW/0uuVxB5BUKn5JpdK4SiW7VCoWS6Vi5WH14SPbnjy2wj5CjtU4vTctfplOsfcGTmYiy//SFE986ciyqIEPV2oSSiCtIdsz/fz/l/t6ZLsH838/y1/f3zwrJv/fTJ/dHJb/h8Rydo8t2ZYdeSWr0pOedOXtuUd0to+GaPHFk0gC8aQljlmjsjVKqlKRitjyXJakPpX8EOviSVO0RLIikcSizTvKlVC0OBJLIKEoWRBX7oqSolSlKmVRoqUgKxJIR3xpSE0cs5d12TDnvSzKGhbjXqXi0MPI9993XSmNOFryP07uNLtv4ER2+/kfAAAAAABcWpb56/uU+bphnte9prbPOywAAAAAAHCKzH/+55KF+XTWDbEY/wMAAAAAcNlY5ho7S0TycistrYtlLpfijwAAAAAAAFwS5v//N5OFmQPlllh706Uw/gcAAAAA4JL499g59qP2tPXjTxKGU9aH9vKfrU0zN6+zeSV93ZWje4zrs9ZMthOzqKSLyUlXz1m5tNLeJJifs8X6yDh+m9VOA3D2Avjn1wRwdVL+K7fTOrfX0uVatuX36dHm615TF9yg+bgojjMzEevl+O+vN/4h5vD/47dmrJxs9LqFF296ayaWDyaszWwCxWPzKI6I5Z2Zb8FcczHwzE+ZCzGydvOWrG/0unZ7eTrbs7M5kRYmDrf4fmZEmx9lPq01n814m+9vSdvMJW0WC8OOPouieMIj/yh30jp3Fu6kiwFRlMZFUToYxeBzcfIoyuOiKJ8wCgA4L+tjspB1IPFnefcberkj2T3p9g63Yh1r5Wt/vTA9+kJaZ2HWdKyTswN6dHtcj26fMLv9cOweSMNybNLu/45k1U/JCz4NbTdqlqzkFF55t/k3uba1vXNvY3P1Zfdl93WpVK7YD2z7YUmmzGFkC3IPAGCAg/fYsQbm/1F34dndTXL3g2xU/eHoqDrLeH/c+0hBQV7IG+nJmiyaqw3MJw4G/t6RP/AxhMUxo9a8SZPpHV4WR4zqfmOucujvtzSy7uEYymfxowAA4MzMj8nDo/N/OnZfHDPuPpzLR4+O8wfu1rZvd/qMTgcAAL8KOvxs5eN/WWHotZ8Xq9WiEy9pFQbuUxV6tYZWnh/r0F1y/IZW7TCIAzdoJoVnXk1HKuq020EYq3oQqnYQectm+kCV3fo90i3Hjz03aje1E2nlBn7suLGqeZGr2p2/Nr1oSYfmxVFbu17dc53YC3wVBZ3Q1QWlIq0PVPRq2o+9upcUfdUOvZYT5tSzoNlpaVXTkRt67ThId5i2lQz560HYMrstnPfJBgDggtja3nm12ut1337HwsCGc2d+qAAAIDMmSwMAAAAAAAAAAAAAAAAAAAAAgAvgLK7/+5ZC7mKEQeFLCv2poC9KPBROoTC263j/3TsnAN/VzwEAAP//cPBPWw==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x4000) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3) 8.302625378s ago: executing program 9 (id=2130): setns(0xc9, 0x0) mkdir(&(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/net/ipv4/neigh/default/app_solicit\x00', 0x2, 0x0) write$FUSE_STATX(r0, 0x0, 0x0) 7.496274898s ago: executing program 8 (id=2131): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000300)={{0x1, 0x3, 0x88a}, 0x5, 0x1000}) 6.014011343s ago: executing program 9 (id=2132): setns(0xc9, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000700)=@ethtool_rxnfc={0x2d, 0x9, 0x7fffffffffffffff, {0xd, @esp_ip4_spec={@remote, @rand_addr=0x64010102, 0x7fff, 0x9}, {0x0, @broadcast, 0x5, 0xfffa, [0x2, 0x1]}, @ether_spec={@local, @remote, 0x64}, {0x0, @local, 0x2, 0x5, [0xffff8cf6, 0x6]}, 0x5, 0xd09}}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a0, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 5.676716022s ago: executing program 8 (id=2133): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r1, &(0x7f0000000640), &(0x7f0000000680)=@tcp6=r0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f00000006c0)={'syztnl1\x00', 0x0}) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/97, 0x61}], 0x1}, 0x0) 3.688003931s ago: executing program 9 (id=2134): r0 = socket(0x1e, 0x802, 0x0) r1 = epoll_create1(0x80000) close(r0) syz_open_dev$video4linux(&(0x7f0000000000), 0xfffffffffffffffe, 0x101001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0x60002005}) 3.613644692s ago: executing program 8 (id=2135): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0) 2.335923044s ago: executing program 8 (id=2136): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@part={'part', 0x3d, 0xa0}}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@gid}, {@codepage={'codepage', 0x3d, 'iso8859-1'}}]}, 0x9, 0x344, &(0x7f0000000980)="$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") syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000cc0)=ANY=[], 0x4, 0x5d9, &(0x7f00000010c0)="$eJzs3U9rHOcdB/DvrNZrrQuOktiJ2wYqUvqHitqS1m2TgqlaTNEhlIBfgajlWHitBGlTlByKXfxCUoLeQC+55OCDz+1LEPRYKPRURC8uMzu72tiyLCWWdhV/Pvaz8zx6Zn7zm9/OjHZXAgV4aS3PpfkwRZbn3tsqxzvbne7OdufuoJ/kbJJG9T/NsvvPZOpBMpt+y3eTFHW44ln7ufbF5818ef9Gf9SoW7X+1EHbHc69umWpTnLpBcZ79I3jFcMjLINeHwSfBI+f7z/HuPupY4zNYbT6i+IZz8VMci7JdH0fGJy4jRPM8FhMzAUIAAAAx+iV3exmK+fHnQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcJvXf/y/q1hj0Z1MM/v5/q/5a6v6p9nDcCQAAAAAAAADAC/CD3exmK+cH48dF9TP/t6vBherxO/k4m1nNRi5nKyvppZeNLCSZGQnU2lrp9TYWDrHl4r5bLp7M8QIAAAAAAADAt9Rfsrz3838AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgERTLVX1TtwqA/k0YzyXSSVrneveQfg/5p9nDcCQAAAMAJeGU3u9nK+cH4cVG953+jet8/nY+znl7W0ks3q7lZfRbQf9ff2NnudHe2O3fL9nTc3/77SGlUEdP/7GH/PV+q1mjn1p1mvc0f82G6uZlGtWXp0iCf/fO6X+ZU/KZ2yMxu1ssiKb5ffxoyGWaqipzJraxVNZqvcyur8erBlTjis/PknhbSGH7yc+EYan6uXpY1n57omi+OnH1vHFyJ5EfX/rt+u7t+5/atzbnJOaSv6clKdEYq8eZLVYn5qhIXh+Pl/D43MpfZvJ+NrOVPWUkvq5nN9aq3Up/P5ePMwZVa+sro/edl0qqfl/5d9Gg5vV1tez5r+UM+zM2s5pdZzNW8k4X8qvp3deQZvniIq75xtKv+hz+tO68lRbu/nBBlXV8dqevoPXemmhv9yl6VXnvx98bm9+rOVFI0hzlNgicrsTBSidcPrsRfH5ePm931Oxu3Vz465P5+Ui/L7xJnn/td4iTr1KrP3v4rla+eHeXc6/vOLVRzF4ZzjafmLg7nnnelturXcE9HWqzm3tx3rlPNXRqZaw/nLg9fbwEw8c797Fyr/a/239uftR+0b7ffm/7d2XfOvtXKmUdnft2cn/px463ib/ksf957/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHx9m598emel213d0NHR0Rl2xn1n4iRc6d396MrmJ5/+fO3uygerH6yud+Z/sfhuZ2Hx3atXbq11V+f7j+NOk2Oyd9GPOxMAAAAAAAAAAACO4iR+nXTcxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDpsTyX5sMUWZi/PF+Od7Y73bIN+ntrNpI0y+X/kqkHyWz6LTMj4Ypn7efaF5838+X9G3uxGoP1pw7a7nDu1S1LdZJLLzDeo28crxgeYRn0+iA4jNv/AwAA///YHBzc") ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x408}], 0x1, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.993087972s ago: executing program 9 (id=2137): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x79, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20046f39, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000540)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) 0s ago: executing program 8 (id=2138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x142, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000f50400000007"], 0x11) kernel console output (not intermixed with test programs): 0003e syscall=202 compat=0 ip=0x7f4910c1e559 code=0x7ffc0000 [ 289.402320][ T25] audit: type=1326 audit(1792429699.730:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.6.719" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4910c1e559 code=0x7ffc0000 [ 289.414630][ T6405] si4713 0-0063: Error while sending command 0x01 [ 289.532518][ T6405] si4713 0-0063: Failed to probe device information. [ 289.545136][ T25] audit: type=1326 audit(1792429699.730:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.6.719" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4910c1e559 code=0x7ffc0000 [ 289.663354][ T6405] si4713: probe of 0-0063 failed with error -5 [ 289.680073][ T6409] loop0: detected capacity change from 0 to 128 [ 289.702532][ T25] audit: type=1326 audit(1792429699.740:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.6.719" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4910c1e559 code=0x7ffc0000 [ 289.752511][ T6405] i2c i2c-0: new_device: Instantiated device si4713 at 0x63 [ 289.882253][ T25] audit: type=1326 audit(1792429699.740:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.6.719" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4910c1e559 code=0x7ffc0000 [ 289.952417][ T6409] hpfs: hpfs_map_sector(): read error [ 289.960296][ T6409] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 290.046561][ T25] audit: type=1326 audit(1792429699.740:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.6.719" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4910c1e559 code=0x7ffc0000 [ 290.187959][ T6409] hpfs: hpfs_map_sector(): read error [ 290.241830][ T25] audit: type=1326 audit(1792429699.740:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.6.719" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4910c1e559 code=0x7ffc0000 [ 290.386806][ T25] audit: type=1326 audit(1792429699.780:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.6.719" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4910c1e559 code=0x7ffc0000 [ 290.532177][ T25] audit: type=1326 audit(1792429699.780:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4910c1e559 code=0x7ffc0000 [ 291.203986][ T6420] ip_tables: iptables: counters copy to user failed while replacing table [ 291.941463][ T6418] rxe_eth0 speed is unknown, defaulting to 1000 [ 292.332518][ T6423] netlink: 16 bytes leftover after parsing attributes in process `syz.7.723'. [ 294.473017][ T6436] loop5: detected capacity change from 0 to 1024 [ 299.502308][ T4262] Bluetooth: hci0: command 0x0401 tx timeout [ 301.585030][ T6474] MTRR 0 not used [ 303.312563][ T6485] syz.2.742 uses obsolete (PF_INET,SOCK_PACKET) [ 304.453780][ T6491] netlink: 14 bytes leftover after parsing attributes in process `syz.7.744'. [ 305.951954][ T6500] loop5: detected capacity change from 0 to 1024 [ 306.263710][ T6500] EXT4-fs (loop5): inline encryption not supported [ 306.270437][ T6500] EXT4-fs (loop5): Ignoring removed bh option [ 306.508441][ T6500] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,noauto_da_alloc,nolazytime,errors=continue,lazytime,inlinecrypt,stripe=0x0000000000000005,bh,nombcache,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 310.795019][ T6526] loop5: detected capacity change from 0 to 512 [ 311.004072][ T6523] loop0: detected capacity change from 0 to 4096 [ 311.153788][ T6523] EXT4-fs (loop0): inline encryption not supported [ 311.385278][ T6523] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c019, mo2=0003] [ 311.557726][ T6523] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,noblock_validity,grpjquota=,lazytime,delalloc,nombcache,,errors=continue. Quota mode: writeback. [ 313.223281][ T6533] overlayfs: failed index dir cleanup (-512) [ 313.301495][ T6533] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 313.811426][ T6549] loop5: detected capacity change from 0 to 512 [ 314.143499][ T6534] rxe_eth0 speed is unknown, defaulting to 1000 [ 314.173480][ T6549] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.759: bg 0: block 7: invalid block bitmap [ 314.185106][ T6553] netlink: 104 bytes leftover after parsing attributes in process `syz.2.758'. [ 314.292259][ T6549] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 314.382211][ T6549] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2928: inode #11: comm syz.5.759: corrupted xattr block 95 [ 314.455473][ T5126] Bluetooth: hci5: command 0x0409 tx timeout [ 314.530111][ T6549] EXT4-fs warning (device loop5): ext4_evict_inode:304: xattr delete (err -117) [ 314.643128][ T6549] EXT4-fs (loop5): 1 orphan inode deleted [ 314.648978][ T6549] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,dax=inode,,errors=continue. Quota mode: none. [ 316.703404][ T4262] Bluetooth: hci5: command 0x041b tx timeout [ 316.916689][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.923262][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.163280][ T6567] netlink: 'syz.7.763': attribute type 3 has an invalid length. [ 318.781890][ T5126] Bluetooth: hci5: command 0x040f tx timeout [ 320.285422][ T6573] loop0: detected capacity change from 0 to 2048 [ 320.760779][ T6573] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000004,noquota,. Quota mode: none. [ 320.898697][ T5126] Bluetooth: hci5: command 0x0419 tx timeout [ 321.192156][ T6573] EXT4-fs (loop0): shut down requested (1) [ 322.136741][ T6534] chnl_net:caif_netlink_parms(): no params data found [ 324.325817][ T6534] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.392371][ T6534] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.459773][ T6534] device bridge_slave_0 entered promiscuous mode [ 324.548028][ T6534] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.612200][ T6534] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.707215][ T6534] device bridge_slave_1 entered promiscuous mode [ 325.469107][ T6534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.650155][ T6534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.412685][ T6534] team0: Port device team_slave_0 added [ 326.509532][ T6534] team0: Port device team_slave_1 added [ 327.244905][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.328518][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.540401][ T6534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.698618][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.769513][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.881895][ T4262] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 327.918952][ T6534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.152893][ T4262] usb 6-1: Using ep0 maxpacket: 32 [ 328.274153][ T4262] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 328.289609][ T4262] usb 6-1: config 0 has no interface number 0 [ 328.318946][ T4262] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 328.391658][ T4262] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 328.445065][ T4262] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 328.520682][ T4262] usb 6-1: config 0 interface 196 has no altsetting 0 [ 328.732756][ T4262] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 328.761727][ T4262] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.813140][ T4262] usb 6-1: Product: syz [ 328.817388][ T4262] usb 6-1: Manufacturer: syz [ 328.831659][ T4262] usb 6-1: SerialNumber: syz [ 329.252232][ T6534] device hsr_slave_0 entered promiscuous mode [ 329.308425][ T6534] device hsr_slave_1 entered promiscuous mode [ 330.823112][ T4262] usb 6-1: USB disconnect, device number 5 [ 330.949860][ T6634] loop2: detected capacity change from 0 to 8 [ 331.175226][ T6634] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 333.000365][ T6534] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 333.186648][ T6534] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 333.305718][ T6534] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 333.423488][ T6534] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 335.315926][ T6534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.559979][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.584548][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.661303][ T6534] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.907025][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 335.944521][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 336.023121][ T3093] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.030609][ T3093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.183654][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 336.238572][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 336.294327][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 336.365049][ T3093] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.372461][ T3093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.462975][ T6653] loop2: detected capacity change from 0 to 1024 [ 336.519645][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 336.653951][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 336.791492][ T6653] EXT4-fs (loop2): Ignoring removed orlov option [ 336.817018][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 336.931927][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 337.059342][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 337.091175][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 337.158564][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 337.295687][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 337.348428][ T6653] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 337.398567][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 337.604464][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 337.637264][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 337.752086][ T6534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 339.629748][ T6676] bond0: no command found in slaves file - use +ifname or -ifname [ 341.822959][ T6689] loop7: detected capacity change from 0 to 64 [ 343.524996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 343.550366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 343.722670][ T6534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.497147][ T6737] loop7: detected capacity change from 0 to 256 [ 351.485660][ T6741] loop0: detected capacity change from 0 to 512 [ 351.763317][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 351.805142][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 351.894901][ T6745] loop5: detected capacity change from 0 to 16 [ 351.937859][ T6741] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 352.231133][ T6745] erofs: (device loop5): mounted with root inode @ nid 36. [ 352.292764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 352.317683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 352.405454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 352.493967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 352.626004][ T6534] device veth0_vlan entered promiscuous mode [ 352.889309][ T6534] device veth1_vlan entered promiscuous mode [ 353.206854][ T6745] overlayfs: failed to get redirect (-117) [ 353.705797][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 353.744819][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 353.903722][ T6534] device veth0_macvtap entered promiscuous mode [ 354.083177][ T6534] device veth1_macvtap entered promiscuous mode [ 354.696051][ T6534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.792205][ T6534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.840784][ T6534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.913824][ T6534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.985240][ T6534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.048094][ T6534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.092273][ T6534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.142347][ T6534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.201825][ T6534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.261859][ T6534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.365310][ T6534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.430215][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 355.445981][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 355.592401][ T6534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.642095][ T6534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.702507][ T6534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.762122][ T6534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.822085][ T6534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.882482][ T6534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.931981][ T6534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.972164][ T6534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.011706][ T6534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.061701][ T6534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.092375][ T4276] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 356.144680][ T6534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.214826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 356.293915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 356.451486][ T6534] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.479386][ T6534] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.482636][ T4276] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 356.546270][ T4276] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.578336][ T6534] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.628169][ T6534] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.561277][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.635332][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.737721][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 359.244619][ T4269] usb 8-1: USB disconnect, device number 4 [ 359.312813][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.320719][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.421502][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 359.902356][ T6775] loop5: detected capacity change from 0 to 1024 [ 361.022706][ T6779] hfsplus: request for non-existent node 62977 in B*Tree [ 361.030306][ T6779] hfsplus: request for non-existent node 62977 in B*Tree [ 362.578492][ T3093] hfsplus: b-tree write err: -5, ino 3 [ 363.772681][ T6792] overlayfs: upper fs does not support file handles, falling back to index=off. [ 363.882378][ T6792] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 367.407740][ T6813] loop2: detected capacity change from 0 to 512 [ 368.243048][ T6813] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 368.358875][ T6813] ext4 filesystem being mounted at /172/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.511096][ T6841] loop0: detected capacity change from 0 to 64 [ 372.255526][ T6841] attempt to access beyond end of device [ 372.255526][ T6841] loop0: rw=0, want=1026, limit=64 [ 372.355827][ T6841] Buffer I/O error on dev loop0, logical block 512, async page read [ 372.433001][ T6841] attempt to access beyond end of device [ 372.433001][ T6841] loop0: rw=0, want=113154, limit=64 [ 372.602488][ T6841] Buffer I/O error on dev loop0, logical block 56576, async page read [ 378.348422][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.358074][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.402841][ T6881] jffs2: notice: (6881) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 378.595594][ T6880] loop8: detected capacity change from 0 to 1024 [ 379.184232][ C0] hrtimer: interrupt took 9078934 ns [ 381.038185][ T3093] hfsplus: b-tree write err: -5, ino 25 [ 381.050675][ T3093] hfsplus: b-tree write err: -5, ino 4 [ 381.112359][ T3093] hfsplus: b-tree write err: -5, ino 2 [ 382.215412][ T6898] loop8: detected capacity change from 0 to 64 [ 383.512485][ T21] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 384.213107][ T21] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 384.251646][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.311816][ T21] usb 6-1: Product: syz [ 384.316123][ T21] usb 6-1: Manufacturer: syz [ 384.381640][ T21] usb 6-1: SerialNumber: syz [ 385.275609][ T6911] loop7: detected capacity change from 0 to 256 [ 386.893946][ T4269] usb 6-1: USB disconnect, device number 6 [ 390.138865][ T6923] loop8: detected capacity change from 0 to 4096 [ 390.307632][ T6923] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 390.872091][ T6923] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 390.942211][ T6923] ntfs3: loop8: Failed to load $Extend. [ 392.525198][ T6939] loop2: detected capacity change from 0 to 1024 [ 393.751026][ T25] kauditd_printk_skb: 9 callbacks suppressed [ 393.751051][ T25] audit: type=1800 audit(1792429804.190:25): pid=6939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.876" name="file1" dev="loop2" ino=1 res=0 errno=0 [ 395.441189][ T6959] netlink: 48 bytes leftover after parsing attributes in process `syz.0.882'. [ 399.504980][ T25] audit: type=1326 audit(1792429809.950:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6977 comm="syz.0.890" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34dd071559 code=0x0 [ 400.400726][ T6982] loop8: detected capacity change from 0 to 1024 [ 400.894836][ T6982] Quota error (device loop8): find_tree_dqentry: Getting block too big (64 >= 6) [ 401.008919][ T6982] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 401.063055][ T6982] EXT4-fs error (device loop8): ext4_acquire_dquot:6236: comm syz.8.891: Failed to acquire dquot type 0 [ 401.183402][ T6982] EXT4-fs error (device loop8): mb_free_blocks:1889: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 401.302598][ T6982] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #13: comm syz.8.891: corrupted inode contents [ 401.421118][ T6982] EXT4-fs error (device loop8): ext4_dirty_inode:6087: inode #13: comm syz.8.891: mark_inode_dirty error [ 401.535537][ T6982] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #13: comm syz.8.891: corrupted inode contents [ 401.633336][ T6982] EXT4-fs error (device loop8): __ext4_ext_dirty:183: inode #13: comm syz.8.891: mark_inode_dirty error [ 401.728773][ T6982] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #13: comm syz.8.891: corrupted inode contents [ 401.791990][ T6982] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 401.848761][ T6982] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #13: comm syz.8.891: corrupted inode contents [ 401.935373][ T6982] EXT4-fs error (device loop8): ext4_truncate:4286: inode #13: comm syz.8.891: mark_inode_dirty error [ 402.006658][ T6982] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 402.122928][ T6982] EXT4-fs (loop8): 1 truncate cleaned up [ 402.128758][ T6982] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 402.149888][ T6992] loop0: detected capacity change from 0 to 1024 [ 403.373040][ T25] audit: type=1800 audit(1792429813.820:27): pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.893" name="file1" dev="loop0" ino=1 res=0 errno=0 [ 406.675101][ T7009] jffs2: notice: (7009) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 409.314874][ T7025] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4193] was attempted by ""[7025] [ 409.744774][ T7024] loop5: detected capacity change from 0 to 2048 [ 410.247235][ T7024] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 411.107647][ T25] audit: type=1800 audit(1792429821.550:28): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.905" name="file1" dev="loop5" ino=1346 res=0 errno=0 [ 418.665050][ T4253] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 418.868734][ T7074] jffs2: notice: (7074) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 419.052609][ T4253] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.099301][ T4253] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 419.180070][ T4253] usb 3-1: New USB device found, idVendor=076d, idProduct=c262, bcdDevice= 0.00 [ 419.195876][ T7077] loop5: detected capacity change from 0 to 256 [ 419.221375][ T4253] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.700136][ T9] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.415758][ T9] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.900774][ T9] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.620152][ T4276] usb 3-1: USB disconnect, device number 7 [ 421.756996][ T9] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.336705][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.928'. [ 422.441061][ T7093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.929'. [ 422.645146][ T7092] loop7: detected capacity change from 0 to 256 [ 423.307313][ T7092] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 424.493260][ T7104] sctp: [Deprecated]: syz.2.933 (pid 7104) Use of int in max_burst socket option deprecated. [ 424.493260][ T7104] Use struct sctp_assoc_value instead [ 427.732144][ T4289] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 428.113894][ T4289] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.141908][ T4289] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 428.192726][ T4289] usb 6-1: New USB device found, idVendor=076d, idProduct=c262, bcdDevice= 0.00 [ 428.244496][ T4289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.789104][ T7146] loop2: detected capacity change from 0 to 2048 [ 431.050260][ T7146] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 431.203502][ T4269] usb 6-1: USB disconnect, device number 7 [ 431.404254][ T7150] loop8: detected capacity change from 0 to 512 [ 431.798577][ T7150] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 431.881801][ T7150] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.920590][ T9] device hsr_slave_0 left promiscuous mode [ 435.022677][ T9] device hsr_slave_1 left promiscuous mode [ 435.138458][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.172991][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.256802][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.286818][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.484907][ T9] device bridge_slave_1 left promiscuous mode [ 435.491721][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.545087][ T9] device bridge_slave_0 left promiscuous mode [ 435.613528][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.151338][ T7178] bonding: no command found in bonding_masters - use +ifname or -ifname [ 436.662198][ T9] device veth1_macvtap left promiscuous mode [ 436.668718][ T9] device veth0_macvtap left promiscuous mode [ 436.720465][ T9] device veth1_vlan left promiscuous mode [ 436.772198][ T9] device veth0_vlan left promiscuous mode [ 436.780460][ T21] Bluetooth: hci5: command 0x0406 tx timeout [ 439.788536][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.796994][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.136758][ T9] team0 (unregistering): Port device team_slave_1 removed [ 441.325557][ T9] team0 (unregistering): Port device team_slave_0 removed [ 441.457143][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.583971][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.444222][ T25] audit: type=1400 audit(1792429852.890:29): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=7200 comm="syz.7.964" [ 442.544744][ T9] bond0 (unregistering): Released all slaves [ 444.717101][ T7214] loop0: detected capacity change from 0 to 512 [ 445.152700][ T7214] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 445.242929][ T7214] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.370742][ T7228] loop8: detected capacity change from 0 to 256 [ 448.584102][ T7232] loop2: detected capacity change from 0 to 4096 [ 449.352133][ T7232] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 451.544726][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.977'. [ 451.818635][ T7251] device syz_tun entered promiscuous mode [ 454.205181][ T7272] loop5: detected capacity change from 0 to 64 [ 456.195654][ T7282] netlink: 'syz.2.986': attribute type 6 has an invalid length. [ 457.333329][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.990'. [ 457.400149][ T7289] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-tlb(5) [ 459.311943][ T7300] sctp: [Deprecated]: syz.0.994 (pid 7300) Use of int in max_burst socket option deprecated. [ 459.311943][ T7300] Use struct sctp_assoc_value instead [ 459.691229][ T7303] loop2: detected capacity change from 0 to 1024 [ 461.209379][ T7309] loop0: detected capacity change from 0 to 64 [ 467.592678][ T7] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 467.863020][ T7] usb 9-1: Using ep0 maxpacket: 16 [ 467.982573][ T7] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 468.182083][ T7] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 468.221757][ T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.272319][ T7] usb 9-1: Product: syz [ 468.282893][ T7] usb 9-1: Manufacturer: syz [ 468.311983][ T7] usb 9-1: SerialNumber: syz [ 468.719586][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1012'. [ 470.655131][ T4253] usb 9-1: USB disconnect, device number 2 [ 471.183919][ T7368] device syzkaller1 entered promiscuous mode [ 471.371978][ T7371] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved [ 471.422958][ T7371] bond0: option slaves: unable to set because the bond device is up [ 473.281192][ T7385] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 473.442219][ T7388] tipc: Started in network mode [ 473.492134][ T7388] tipc: Node identity 1000001, cluster identity 4369 [ 473.498916][ T7388] tipc: Node number set to 16777217 [ 473.644493][ T7390] tipc: New replicast peer: 127.0.0.1 [ 473.892249][ T7390] tipc: Enabled bearer , priority 10 [ 474.256612][ T7387] loop0: detected capacity change from 0 to 2048 [ 474.547212][ T7387] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 477.687290][ T7400] loop8: detected capacity change from 0 to 4096 [ 478.556492][ T7400] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 478.655570][ T7400] ntfs3: loop8: Failed to load $Extend. [ 479.588521][ T6534] ntfs3: loop8: ntfs_sync_fs r=9 failed, -22. [ 479.650504][ T6534] ntfs3: loop8: ntfs_evict_inode r=9 failed, -22. [ 480.304716][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'. [ 481.823661][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1032'. [ 485.380814][ T7447] loop8: detected capacity change from 0 to 2048 [ 485.626985][ T7451] loop7: detected capacity change from 0 to 512 [ 485.807766][ T7447] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 486.592267][ T7451] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 486.693080][ T7451] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.247846][ T7447] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 487.432012][ T7447] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 112 with error 28 [ 487.602083][ T7447] EXT4-fs (loop8): This should not happen!! Data will be lost [ 487.602083][ T7447] [ 487.701731][ T7447] EXT4-fs (loop8): Total free blocks count 0 [ 487.740886][ T7447] EXT4-fs (loop8): Free/Dirty block details [ 487.792035][ T7447] EXT4-fs (loop8): free_blocks=4096 [ 487.818724][ T7447] EXT4-fs (loop8): dirty_blocks=112 [ 487.862114][ T7447] EXT4-fs (loop8): Block reservation details [ 487.912701][ T7447] EXT4-fs (loop8): i_reserved_data_blocks=7 [ 489.788116][ T7469] loop2: detected capacity change from 0 to 4096 [ 489.983336][ T7469] EXT4-fs (loop2): Test dummy encryption mode enabled [ 489.990644][ T7469] EXT4-fs (loop2): Test dummy encryption mode enabled [ 490.280267][ T7469] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 490.623559][ T7478] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1046'. [ 491.502138][ T7485] FAULT_INJECTION: forcing a failure. [ 491.502138][ T7485] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 491.589140][ T7485] CPU: 1 PID: 7485 Comm: syz.5.1049 Not tainted syzkaller #0 [ 491.596666][ T7485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 491.606936][ T7485] Call Trace: [ 491.610322][ T7485] [ 491.613314][ T7485] dump_stack_lvl+0x188/0x250 [ 491.618194][ T7485] ? show_regs_print_info+0x20/0x20 [ 491.623566][ T7485] ? load_image+0x410/0x410 [ 491.628312][ T7485] ? __lock_acquire+0x7d40/0x7d40 [ 491.633596][ T7485] should_fail+0x383/0x4b0 [ 491.638379][ T7485] strncpy_from_user+0x32/0x350 [ 491.643431][ T7485] __se_sys_add_key+0xd8/0x410 [ 491.648394][ T7485] ? __x64_sys_add_key+0xc0/0xc0 [ 491.653682][ T7485] ? lockdep_hardirqs_on+0x94/0x140 [ 491.659030][ T7485] ? __x64_sys_add_key+0x1c/0xc0 [ 491.664093][ T7485] do_syscall_64+0x4c/0xa0 [ 491.668606][ T7485] ? clear_bhb_loop+0x30/0x80 [ 491.673466][ T7485] ? clear_bhb_loop+0x30/0x80 [ 491.678373][ T7485] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 491.684362][ T7485] RIP: 0033:0x7f2eb8228559 [ 491.688847][ T7485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.708531][ T7485] RSP: 002b:00007f2eb6480028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 491.717102][ T7485] RAX: ffffffffffffffda RBX: 00007f2eb84affa0 RCX: 00007f2eb8228559 [ 491.725209][ T7485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 491.733328][ T7485] RBP: 00007f2eb82bfad8 R08: ffffffffffffffff R09: 0000000000000000 [ 491.741341][ T7485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.749376][ T7485] R13: 00007f2eb84b0038 R14: 00007f2eb84affa0 R15: 00007fff6c3efc88 [ 491.757820][ T7485] [ 495.302354][ T4289] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 495.712835][ T4289] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.731872][ T4289] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 495.772571][ T4289] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 495.825522][ T4289] usb 9-1: New USB device found, idVendor=0a5c, idProduct=21e8, bcdDevice= 1.00 [ 495.863540][ T7508] loop7: detected capacity change from 0 to 1024 [ 495.881056][ T4289] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.072326][ T7508] EXT4-fs (loop7): Ignoring removed bh option [ 496.402463][ T7508] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none. [ 496.855754][ T7513] loop2: detected capacity change from 0 to 2048 [ 497.151428][ T7513] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 498.324819][ T7513] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 498.362402][ T4253] usb 9-1: USB disconnect, device number 3 [ 498.503954][ T7513] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 158 with error 28 [ 498.591611][ T7513] EXT4-fs (loop2): This should not happen!! Data will be lost [ 498.591611][ T7513] [ 498.644276][ T7513] EXT4-fs (loop2): Total free blocks count 0 [ 498.650368][ T7513] EXT4-fs (loop2): Free/Dirty block details [ 498.702223][ T7513] EXT4-fs (loop2): free_blocks=4096 [ 498.707575][ T7513] EXT4-fs (loop2): dirty_blocks=160 [ 498.772006][ T7513] EXT4-fs (loop2): Block reservation details [ 498.778117][ T7513] EXT4-fs (loop2): i_reserved_data_blocks=10 [ 499.386787][ T7529] loop8: detected capacity change from 0 to 1024 [ 499.709453][ T7529] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 501.189439][ T7529] EXT4-fs warning (device loop8): ext4_rmdir:3245: inode #11: comm syz.8.1060: empty directory 'file0' has too many links (111) [ 501.227926][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.234735][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.878799][ T7537] loop5: detected capacity change from 0 to 7 [ 502.036111][ T4883] loop: Write error at byte offset 4, length 3584. [ 502.052893][ T7537] Dev loop5: unable to read RDB block 7 [ 502.058897][ T7537] loop5: unable to read partition table [ 502.092174][ C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 502.103768][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 502.181786][ T4883] loop: Write error at byte offset 4, length 3584. [ 502.190065][ C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 502.201764][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 502.273277][ T7537] loop5: partition table beyond EOD, truncated [ 502.366533][ T7537] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 511.741229][ T7638] loop0: detected capacity change from 0 to 1024 [ 512.139110][ T7638] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,nobarrier,barrier,block_validity,nodioread_nolock,nodelalloc,nolazytime,init_itable=0x0000000000000006,,errors=continue. Quota mode: none. [ 512.204313][ T7638] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.674255][ T25] audit: type=1800 audit(1792429923.120:30): pid=7638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1074" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 512.785965][ T7647] loop5: detected capacity change from 0 to 256 [ 512.928827][ T7638] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: comm syz.0.1074: lblock 0 mapped to illegal pblock 0 (length 1) [ 513.167371][ T7652] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: comm syz.0.1074: lblock 0 mapped to illegal pblock 0 (length 1) [ 513.194605][ T7647] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 513.334365][ T7652] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: comm syz.0.1074: lblock 0 mapped to illegal pblock 0 (length 1) [ 514.126330][ T7650] loop2: detected capacity change from 0 to 2048 [ 514.501905][ T7644] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 514.546745][ T7650] NILFS (loop2): invalid segment: Magic number mismatch [ 514.647526][ T7650] NILFS (loop2): trying rollback from an earlier position [ 514.973630][ T7650] NILFS (loop2): recovery complete [ 515.041771][ T7655] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 515.478250][ T7650] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 523.036707][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1089'. [ 526.908758][ T7725] loop8: detected capacity change from 0 to 2048 [ 527.209695][ T7725] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 527.437269][ T7730] loop2: detected capacity change from 0 to 1024 [ 527.733595][ T7730] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 527.828923][ T7730] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 528.101580][ T7730] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 528.192315][ T7730] System zones: 0-1, 3-36 [ 528.348611][ T7730] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 528.459123][ T7735] loop0: detected capacity change from 0 to 1024 [ 528.631659][ T7735] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 528.863546][ T7735] EXT4-fs (loop0): invalid journal inode [ 528.920367][ T7735] EXT4-fs (loop0): can't get journal size [ 529.140058][ T7735] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,abort,nombcache,,errors=continue. Quota mode: writeback. [ 531.678386][ T7750] loop5: detected capacity change from 0 to 1764 [ 533.003994][ T7761] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1108'. [ 533.623630][ T7760] loop8: detected capacity change from 0 to 1024 [ 536.102997][ T7776] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1114'. [ 536.165343][ T7776] netlink: 'syz.2.1114': attribute type 12 has an invalid length. [ 536.165376][ T7776] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1114'. [ 538.176862][ T7787] loop2: detected capacity change from 0 to 1024 [ 538.593266][ T7790] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004 [ 543.675179][ T7820] ip_tables: iptables: counters copy to user failed while replacing table [ 543.808929][ T7817] loop8: detected capacity change from 0 to 1024 [ 544.043036][ T7817] EXT4-fs (loop8): Ignoring removed bh option [ 544.218102][ T7817] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none. [ 544.240772][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.600076][ T7843] loop5: detected capacity change from 0 to 1024 [ 546.899032][ T7843] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,nobarrier,barrier,block_validity,nodioread_nolock,nodelalloc,nolazytime,init_itable=0x0000000000000006,,errors=continue. Quota mode: none. [ 546.942620][ T7843] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.326688][ T25] audit: type=1800 audit(1792429957.770:31): pid=7843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1134" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 547.489561][ T7843] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: comm syz.5.1134: lblock 0 mapped to illegal pblock 0 (length 1) [ 547.523962][ T7850] vcan0: tx address claim with broadcast sa [ 547.682910][ T7843] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.1134: lblock 0 mapped to illegal pblock 0 (length 1) [ 547.854319][ T7843] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.1134: lblock 0 mapped to illegal pblock 0 (length 1) [ 551.727599][ T7879] FAULT_INJECTION: forcing a failure. [ 551.727599][ T7879] name failslab, interval 1, probability 0, space 0, times 1 [ 551.812615][ T7879] CPU: 1 PID: 7879 Comm: syz.5.1144 Not tainted syzkaller #0 [ 551.820090][ T7879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 551.830239][ T7879] Call Trace: [ 551.833642][ T7879] [ 551.836730][ T7879] dump_stack_lvl+0x188/0x250 [ 551.841556][ T7879] ? show_regs_print_info+0x20/0x20 [ 551.846857][ T7879] ? load_image+0x410/0x410 [ 551.851581][ T7879] ? __might_sleep+0xf0/0xf0 [ 551.856460][ T7879] ? __lock_acquire+0x7d40/0x7d40 [ 551.861649][ T7879] should_fail+0x383/0x4b0 [ 551.866305][ T7879] should_failslab+0x5/0x20 [ 551.871002][ T7879] slab_pre_alloc_hook+0x51/0xc0 [ 551.876159][ T7879] ? xfrm4_net_init+0x7d/0x160 [ 551.881041][ T7879] __kmalloc_track_caller+0x69/0x330 [ 551.886406][ T7879] ? xfrm4_net_init+0x7d/0x160 [ 551.891445][ T7879] kmemdup+0x22/0x50 [ 551.895603][ T7879] xfrm4_net_init+0x7d/0x160 [ 551.900296][ T7879] ops_init+0x360/0x5f0 [ 551.904805][ T7879] setup_net+0x39e/0xa10 [ 551.909306][ T7879] ? copy_net_ns+0x5b0/0x5b0 [ 551.914010][ T7879] ? copy_net_ns+0x324/0x5b0 [ 551.918717][ T7879] ? down_read_killable+0x1ce/0x340 [ 551.924189][ T7879] copy_net_ns+0x33e/0x5b0 [ 551.928799][ T7879] create_new_namespaces+0x3ce/0x700 [ 551.934584][ T7879] unshare_nsproxy_namespaces+0x116/0x160 [ 551.940525][ T7879] ksys_unshare+0x4f6/0x8e0 [ 551.945142][ T7879] ? __lock_acquire+0x7d40/0x7d40 [ 551.950427][ T7879] ? sighand_ctor+0x40/0x40 [ 551.955130][ T7879] ? lock_chain_count+0x20/0x20 [ 551.960163][ T7879] ? syscall_enter_from_user_mode+0x21/0x70 [ 551.966263][ T7879] __x64_sys_unshare+0x34/0x40 [ 551.971168][ T7879] do_syscall_64+0x4c/0xa0 [ 551.975739][ T7879] ? clear_bhb_loop+0x30/0x80 [ 551.980500][ T7879] ? clear_bhb_loop+0x30/0x80 [ 551.985279][ T7879] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 551.991267][ T7879] RIP: 0033:0x7f2eb8228559 [ 551.995827][ T7879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.015572][ T7879] RSP: 002b:00007f2eb6480028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 552.024137][ T7879] RAX: ffffffffffffffda RBX: 00007f2eb84affa0 RCX: 00007f2eb8228559 [ 552.032165][ T7879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 552.040213][ T7879] RBP: 00007f2eb82bfad8 R08: 0000000000000000 R09: 0000000000000000 [ 552.048291][ T7879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.056383][ T7879] R13: 00007f2eb84b0038 R14: 00007f2eb84affa0 R15: 00007fff6c3efc88 [ 552.064728][ T7879] [ 553.134077][ T7884] sctp: [Deprecated]: syz.0.1146 (pid 7884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 553.134077][ T7884] Use struct sctp_sack_info instead [ 554.663921][ T7893] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1149'. [ 554.730799][ T7893] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1149'. [ 554.843597][ T7893] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1149'. [ 554.986854][ T7893] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1149'. [ 560.462416][ T21] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 560.742819][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 560.912839][ T21] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.973493][ T21] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 561.022104][ T21] usb 6-1: config 0 interface 0 has no altsetting 0 [ 561.028811][ T21] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 561.111598][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.615388][ T4289] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 562.673728][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.680254][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.902211][ T4289] usb 3-1: Using ep0 maxpacket: 8 [ 563.022544][ T4289] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 563.051933][ T4289] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 563.112029][ T4289] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 563.164738][ T4289] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 563.219148][ T4289] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 563.281649][ T4289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.897724][ T7935] loop0: detected capacity change from 0 to 1024 [ 563.963053][ T4258] usb 6-1: USB disconnect, device number 8 [ 564.150696][ T9] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.719300][ T9] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.985463][ T7937] rxe_eth0 speed is unknown, defaulting to 1000 [ 565.654616][ T9] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.666057][ T4258] usb 3-1: USB disconnect, device number 8 [ 566.014292][ T9] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.182765][ T4276] Bluetooth: hci0: command 0x0409 tx timeout [ 566.443321][ T4258] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 566.711982][ T4258] usb 6-1: Using ep0 maxpacket: 8 [ 566.833460][ T4258] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 566.912580][ T4258] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 566.976034][ T4258] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 567.072000][ T4258] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 567.151849][ T4258] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 567.215179][ T4258] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.619329][ T9] tipc: Disabling bearer [ 567.629159][ T9] tipc: Left network mode [ 568.262074][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 569.613126][ T4276] usb 6-1: USB disconnect, device number 9 [ 570.343585][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 570.370040][ T7605] tipc: Subscription rejected, illegal request [ 571.767911][ T7976] loop2: detected capacity change from 0 to 1024 [ 571.950555][ T7976] EXT4-fs (loop2): Ignoring removed bh option [ 572.153226][ T7976] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none. [ 572.421860][ T4258] Bluetooth: hci0: command 0x0419 tx timeout [ 573.667464][ T7990] loop5: detected capacity change from 0 to 256 [ 573.920794][ T7990] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 573.993036][ T7990] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 574.148934][ T7990] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xda9016d0, utbl_chksum : 0xe619d30d) [ 575.491160][ T7937] chnl_net:caif_netlink_parms(): no params data found [ 577.489895][ T7937] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.561665][ T7937] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.620512][ T7937] device bridge_slave_0 entered promiscuous mode [ 577.766071][ T7937] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.796023][ T7937] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.858671][ T7937] device bridge_slave_1 entered promiscuous mode [ 578.147474][ T9] device hsr_slave_0 left promiscuous mode [ 578.169837][ T9] device hsr_slave_1 left promiscuous mode [ 578.207049][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.247569][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.279004][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.302021][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.350247][ T9] device bridge_slave_1 left promiscuous mode [ 578.373032][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.450688][ T9] device bridge_slave_0 left promiscuous mode [ 578.470282][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.682060][ T9] device veth1_macvtap left promiscuous mode [ 578.710642][ T9] device veth0_macvtap left promiscuous mode [ 578.733678][ T9] device veth1_vlan left promiscuous mode [ 578.739863][ T9] device veth0_vlan left promiscuous mode [ 579.289985][ T8015] loop5: detected capacity change from 0 to 4096 [ 579.689912][ T8015] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 579.968814][ T25] audit: type=1800 audit(1792429990.410:32): pid=8015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1184" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 583.806436][ T9] team0 (unregistering): Port device team_slave_1 removed [ 584.151640][ T9] team0 (unregistering): Port device team_slave_0 removed [ 584.353586][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.583496][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.760552][ T8042] loop0: detected capacity change from 0 to 2048 [ 586.032231][ T8042] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 586.380852][ T9] bond0 (unregistering): Released all slaves [ 586.808001][ T8045] loop2: detected capacity change from 0 to 1024 [ 587.440920][ T8045] hfsplus: b-tree write err: -5, ino 17 [ 587.908421][ T7937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.030636][ T7937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.536674][ T7609] hfsplus: b-tree write err: -5, ino 25 [ 588.562387][ T7609] hfsplus: b-tree write err: -5, ino 4 [ 588.582147][ T7609] hfsplus: b-tree write err: -5, ino 17 [ 588.642723][ T7937] team0: Port device team_slave_0 added [ 588.794061][ T7937] team0: Port device team_slave_1 added [ 589.480899][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.521604][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.655275][ T7937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.095648][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.150854][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.289481][ T7937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.585993][ T8059] loop5: detected capacity change from 0 to 1024 [ 591.159889][ T25] audit: type=1800 audit(1792430001.600:33): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1201" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=0 res=0 errno=0 [ 591.389697][ T8059] hfsplus: request for non-existent node 262144 in B*Tree [ 591.482474][ T8059] hfsplus: request for non-existent node 262144 in B*Tree [ 591.535236][ T8064] hfsplus: request for non-existent node 262144 in B*Tree [ 591.639269][ T8064] hfsplus: request for non-existent node 262144 in B*Tree [ 591.708587][ T7937] device hsr_slave_0 entered promiscuous mode [ 591.763811][ T7937] device hsr_slave_1 entered promiscuous mode [ 593.720837][ T8071] loop7: detected capacity change from 0 to 256 [ 593.729444][ T8072] loop5: detected capacity change from 0 to 128 [ 593.876614][ T8072] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 594.915082][ T25] audit: type=1800 audit(1792430005.360:34): pid=8071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1206" name="file1" dev="loop7" ino=1048724 res=0 errno=0 [ 595.807159][ T7937] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 595.989349][ T7937] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 596.625700][ T7937] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 596.746831][ T7937] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 597.692717][ T8084] loop0: detected capacity change from 0 to 1024 [ 598.331582][ T8084] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 598.338790][ T8084] hfsplus: xattr searching failed [ 598.649192][ T8087] loop2: detected capacity change from 0 to 512 [ 598.699160][ T7937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.720870][ T8090] loop5: detected capacity change from 0 to 512 [ 598.835768][ T8087] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 599.138646][ T8084] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 599.198054][ T8087] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.1213: invalid indirect mapped block 32768 (level 2) [ 599.246092][ T8084] hfsplus: xattr search failed [ 599.307628][ T8090] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 599.320216][ T8087] EXT4-fs (loop2): 1 orphan inode deleted [ 599.348533][ T8087] EXT4-fs (loop2): 1 truncate cleaned up [ 599.359745][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 599.383475][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 599.402372][ T8090] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.411969][ T8087] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 599.545361][ T7937] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.729321][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 599.804545][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 599.903622][ T7602] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.910888][ T7602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.022702][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 600.172912][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 600.198517][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 600.263556][ T7602] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.271065][ T7602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.425060][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 600.600441][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 600.610318][ T7625] hfsplus: b-tree write err: -5, ino 25 [ 600.648901][ T7625] hfsplus: b-tree write err: -5, ino 4 [ 600.686689][ T7625] hfsplus: b-tree write err: -5, ino 2 [ 600.698967][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 600.722155][ T7625] hfsplus: b-tree write err: -5, ino 28 [ 600.828930][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 600.968692][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 601.002443][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 601.056979][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 601.153483][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 601.217392][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 601.328134][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 601.374911][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 601.543569][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 604.890797][ T8115] loop2: detected capacity change from 0 to 512 [ 605.682496][ T8119] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 605.927380][ T8115] FAT-fs (loop2): error, invalid access to FAT (entry 0x00020000) [ 606.002850][ T8123] device tunl0 entered promiscuous mode [ 606.049339][ T8115] FAT-fs (loop2): Filesystem has been set read-only [ 606.089485][ T8123] netlink: 'syz.0.1225': attribute type 4 has an invalid length. [ 606.135116][ T8115] FAT-fs (loop2): error, invalid access to FAT (entry 0x00020000) [ 606.194787][ T8123] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1225'. [ 607.218338][ T8129] loop7: detected capacity change from 0 to 16 [ 607.384347][ T8129] erofs: (device loop7): mounted with root inode @ nid 36. [ 607.705944][ T8129] attempt to access beyond end of device [ 607.705944][ T8129] loop7: rw=524288, want=32, limit=16 [ 607.746150][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 607.765002][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 607.884182][ T8129] erofs: (device loop7): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 607.984016][ T7937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.069450][ T25] audit: type=1800 audit(1792430018.500:35): pid=8129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1226" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 609.483318][ T8136] program syz.2.1229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 610.237531][ T8142] loop0: detected capacity change from 0 to 1024 [ 613.202124][ T8160] loop5: detected capacity change from 0 to 64 [ 613.743365][ T7609] hfsplus: b-tree write err: -5, ino 25 [ 613.750279][ T7609] hfsplus: b-tree write err: -5, ino 4 [ 613.783400][ T7609] hfsplus: b-tree write err: -5, ino 2 [ 613.872453][ T7609] hfsplus: b-tree write err: -5, ino 17 [ 613.963756][ T8163] loop2: detected capacity change from 0 to 256 [ 616.504090][ T8177] loop5: detected capacity change from 0 to 1024 [ 616.787283][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 616.893848][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 617.261903][ T8177] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 617.370196][ T8177] hfsplus: xattr searching failed [ 617.437588][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 617.484073][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 617.560736][ T7937] device veth0_vlan entered promiscuous mode [ 617.629532][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 617.665978][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 617.774519][ T8177] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 617.822246][ T8177] hfsplus: xattr search failed [ 617.886022][ T7937] device veth1_vlan entered promiscuous mode [ 618.517058][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 618.584680][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 618.664934][ T7937] device veth0_macvtap entered promiscuous mode [ 618.833805][ T7937] device veth1_macvtap entered promiscuous mode [ 618.884792][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 618.910713][ T7625] hfsplus: b-tree write err: -5, ino 25 [ 618.919095][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 618.930569][ T7625] hfsplus: b-tree write err: -5, ino 4 [ 618.972125][ T7625] hfsplus: b-tree write err: -5, ino 2 [ 618.978084][ T7625] hfsplus: b-tree write err: -5, ino 28 [ 619.289979][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.401951][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.470057][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.531630][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.622121][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.681878][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.751779][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.832057][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.909129][ T7937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.993268][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 620.035846][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 620.963972][ T8201] FAULT_INJECTION: forcing a failure. [ 620.963972][ T8201] name failslab, interval 1, probability 0, space 0, times 0 [ 620.986897][ T25] audit: type=1800 audit(1792430031.430:36): pid=8199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1246" name="local" dev="configfs" ino=47214 res=0 errno=0 [ 621.074099][ T8201] CPU: 0 PID: 8201 Comm: syz.2.1245 Not tainted syzkaller #0 [ 621.081615][ T8201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 621.091823][ T8201] Call Trace: [ 621.095174][ T8201] [ 621.098164][ T8201] dump_stack_lvl+0x188/0x250 [ 621.103014][ T8201] ? show_regs_print_info+0x20/0x20 [ 621.108394][ T8201] ? load_image+0x410/0x410 [ 621.113110][ T8201] ? __might_sleep+0xf0/0xf0 [ 621.117794][ T8201] ? __lock_acquire+0x7d40/0x7d40 [ 621.123069][ T8201] should_fail+0x383/0x4b0 [ 621.127788][ T8201] should_failslab+0x5/0x20 [ 621.132335][ T8201] slab_pre_alloc_hook+0x51/0xc0 [ 621.137368][ T8201] ? prepare_creds+0x3c/0x610 [ 621.142177][ T8201] kmem_cache_alloc+0x3d/0x280 [ 621.147269][ T8201] prepare_creds+0x3c/0x610 [ 621.151881][ T8201] __sys_setregid+0xf6/0x650 [ 621.156643][ T8201] ? lockdep_hardirqs_on+0x94/0x140 [ 621.162067][ T8201] do_syscall_64+0x4c/0xa0 [ 621.166622][ T8201] ? clear_bhb_loop+0x30/0x80 [ 621.171412][ T8201] ? clear_bhb_loop+0x30/0x80 [ 621.176173][ T8201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 621.182163][ T8201] RIP: 0033:0x7f7fd8042559 [ 621.186734][ T8201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.206478][ T8201] RSP: 002b:00007f7fd629a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 621.215075][ T8201] RAX: ffffffffffffffda RBX: 00007f7fd82c9fa0 RCX: 00007f7fd8042559 [ 621.223093][ T8201] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 621.231135][ T8201] RBP: 00007f7fd80d9ad8 R08: 0000000000000000 R09: 0000000000000000 [ 621.239196][ T8201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.247291][ T8201] R13: 00007f7fd82ca038 R14: 00007f7fd82c9fa0 R15: 00007ffcc559ebe8 [ 621.255650][ T8201] [ 624.108218][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.124385][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.021728][ T8223] netlink: 'syz.0.1255': attribute type 39 has an invalid length. [ 627.309335][ T8226] rxe_eth0 speed is unknown, defaulting to 1000 [ 628.345840][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 628.969660][ T8242] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 630.422590][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 631.418232][ T8247] loop2: detected capacity change from 0 to 4096 [ 631.601950][ T8247] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 632.502553][ T4253] Bluetooth: hci0: command 0x040f tx timeout [ 633.038670][ T8255] loop0: detected capacity change from 0 to 1024 [ 633.918641][ T8255] hfsplus: b-tree write err: -5, ino 17 [ 634.898348][ T8226] chnl_net:caif_netlink_parms(): no params data found [ 635.123615][ T4253] Bluetooth: hci0: command 0x0419 tx timeout [ 635.265229][ T7615] hfsplus: b-tree write err: -5, ino 25 [ 635.274679][ T7615] hfsplus: b-tree write err: -5, ino 4 [ 635.280729][ T7615] hfsplus: b-tree write err: -5, ino 17 [ 635.328387][ T8268] loop2: detected capacity change from 0 to 128 [ 635.725147][ T8268] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 635.812458][ T8268] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.467668][ T25] audit: type=1800 audit(1792430046.910:37): pid=8268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1269" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 637.404332][ T8226] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.492329][ T8226] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.582467][ T8226] device bridge_slave_0 entered promiscuous mode [ 637.648937][ T8226] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.742038][ T8226] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.835601][ T8226] device bridge_slave_1 entered promiscuous mode [ 638.609502][ T8226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.784960][ T8226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.786795][ T8288] loop2: detected capacity change from 0 to 136 [ 639.625029][ T8226] team0: Port device team_slave_0 added [ 639.739090][ T8226] team0: Port device team_slave_1 added [ 640.405810][ T8296] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 640.470494][ T8226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.512333][ T8226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.641943][ T8226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.825601][ T8226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.892153][ T8226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.062443][ T8226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.316927][ T8309] loop0: detected capacity change from 0 to 1024 [ 642.477217][ T8226] device hsr_slave_0 entered promiscuous mode [ 642.533305][ T8309] EXT4-fs (loop0): Test dummy encryption mode enabled [ 642.622966][ T8226] device hsr_slave_1 entered promiscuous mode [ 642.716340][ T8309] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 642.762701][ T8226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 642.831751][ T8226] Cannot create hsr debugfs directory [ 642.832017][ T8309] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 642.881949][ T4289] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 642.921099][ T8309] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,quota,,errors=continue. Quota mode: writeback. [ 643.122322][ T4289] usb 6-1: Using ep0 maxpacket: 8 [ 643.242347][ T4289] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 643.295278][ T4289] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 643.391665][ T4289] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 643.471609][ T4289] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 643.558715][ T4289] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 643.611316][ T4289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.550068][ T8309] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 645.489933][ T8326] loop2: detected capacity change from 0 to 256 [ 646.328603][ T1112] usb 6-1: USB disconnect, device number 10 syzkaller syzkaller login: [ 650.868556][ T8226] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 651.007056][ T8226] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 651.155865][ T8226] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 651.304560][ T8226] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 651.390924][ T8350] loop2: detected capacity change from 0 to 4096 [ 651.837492][ T8350] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 653.368155][ T8226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.630807][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 653.684463][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 653.798765][ T8226] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.948129][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 654.045864][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 654.095369][ T7625] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.102945][ T7625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.233045][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 654.412881][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 654.428110][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 654.480393][ T7625] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.487859][ T7625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.643472][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 654.883363][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 655.022671][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 655.152302][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 655.262458][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 655.293527][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 655.360650][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 655.529357][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 655.576918][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 655.764002][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 655.797805][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 655.935659][ T8226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 658.273289][ T8389] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 659.623078][ T8396] batman_adv: batadv0: Adding interface: macsec1 [ 659.672994][ T8396] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.812846][ T8396] batman_adv: batadv0: Interface activated: macsec1 [ 661.446658][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 661.502376][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 661.651619][ T8226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.587788][ T8414] loop7: detected capacity change from 0 to 1024 [ 662.857097][ T8408] loop0: detected capacity change from 0 to 4096 [ 663.042142][ T8414] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #3: block 2: comm syz.7.1312: lblock 2 mapped to illegal pblock 2 (length 1) [ 663.127335][ T8414] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 663.205041][ T8414] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #3: block 48: comm syz.7.1312: lblock 0 mapped to illegal pblock 48 (length 1) [ 663.333779][ T8414] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 663.416951][ T8414] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.1312: Failed to acquire dquot type 0 [ 663.525069][ T8408] NILFS (loop0): invalid segment: Checksum error in segment payload [ 663.534476][ T8414] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 663.598846][ T8408] NILFS (loop0): trying rollback from an earlier position [ 663.613511][ T8414] EXT4-fs error (device loop7): ext4_evict_inode:284: inode #11: comm syz.7.1312: mark_inode_dirty error [ 663.670549][ T8421] loop5: detected capacity change from 0 to 512 [ 663.709897][ T8414] EXT4-fs warning (device loop7): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 663.780256][ T8414] EXT4-fs (loop7): 1 orphan inode deleted [ 663.823289][ T8414] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 663.948383][ T7625] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 664.005189][ T8421] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 664.027700][ T7625] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 664.135389][ T7625] EXT4-fs error (device loop7): ext4_release_dquot:6272: comm kworker/u4:30: Failed to release dquot type 0 [ 664.295179][ T8421] EXT4-fs (loop5): 1 truncate cleaned up [ 664.300959][ T8421] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 664.411042][ T8408] NILFS (loop0): recovery complete [ 664.473442][ T8408] NILFS (loop0): error -4 creating segctord thread [ 665.764137][ T4965] EXT4-fs error (device loop7): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 665.880303][ T4965] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 665.953853][ T4965] EXT4-fs error (device loop7): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 667.041172][ T8438] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 669.024836][ T8446] loop0: detected capacity change from 0 to 1024 [ 669.169622][ T8446] EXT4-fs (loop0): Ignoring removed nobh option [ 669.222391][ T8446] EXT4-fs (loop0): Ignoring removed bh option [ 669.297697][ T8450] loop2: detected capacity change from 0 to 256 [ 669.309828][ T8446] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 669.335408][ T8446] System zones: 0-1, 3-12 [ 669.421008][ T8446] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,sysvgroups,errors=remount-ro,stripe=0x0000000000000011,bh,debug,. Quota mode: none. [ 669.604861][ T8450] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 671.646710][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 671.681205][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 672.198140][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 672.254965][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 672.354312][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 672.425077][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 672.524891][ T8226] device veth0_vlan entered promiscuous mode [ 672.833026][ T8226] device veth1_vlan entered promiscuous mode [ 673.496700][ T8470] WARNING! power/level is deprecated; use power/control instead [ 673.515696][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 673.556611][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 673.627873][ T8226] device veth0_macvtap entered promiscuous mode [ 673.697065][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 673.804021][ T8226] device veth1_macvtap entered promiscuous mode [ 674.116583][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.183074][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.220872][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.282910][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.322991][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.378098][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.405739][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.449298][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.519899][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.574740][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.670928][ T8226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.729431][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 674.763493][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 674.878901][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.972952][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.025071][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.081552][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.128446][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.181727][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.231826][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.281941][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.329641][ T8226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.407482][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 675.424596][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 675.575128][ T8226] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.662982][ T8226] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.701973][ T8226] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.754785][ T8226] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.535805][ T7602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.568927][ T7602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.651356][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 678.149158][ T8498] loop0: detected capacity change from 0 to 256 [ 678.392047][ T8498] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 678.481778][ T8498] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 678.743331][ T8500] loop2: detected capacity change from 0 to 24 [ 678.771955][ T8498] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 678.832210][ T7602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.840158][ T7602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.029335][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 681.020395][ T8508] loop7: detected capacity change from 0 to 512 [ 681.219647][ T8508] EXT4-fs (loop7): Ignoring removed nobh option [ 681.430873][ T8508] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 681.517952][ T8508] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #13: comm syz.7.1339: attempt to clear invalid blocks 1 len 1 [ 681.594309][ T8508] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 681.688175][ T8508] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1339: invalid indirect mapped block 1819239214 (level 0) [ 681.804942][ T8508] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1339: invalid indirect mapped block 1819239214 (level 1) [ 681.962851][ T8508] EXT4-fs (loop7): 1 truncate cleaned up [ 681.968594][ T8508] EXT4-fs (loop7): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 685.420664][ T8524] rxe_eth0 speed is unknown, defaulting to 1000 [ 685.549072][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.558928][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.689864][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1349'. [ 687.963076][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1349'. [ 689.317451][ T8540] rxe_eth0 speed is unknown, defaulting to 1000 [ 689.861911][ T1112] Bluetooth: hci0: command 0x0409 tx timeout [ 691.975707][ T4301] Bluetooth: hci0: command 0x041b tx timeout [ 694.132140][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 696.241704][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 696.380006][ T8596] loop5: detected capacity change from 0 to 512 [ 696.532358][ T8596] EXT4-fs (loop5): inline encryption not supported [ 696.539100][ T8596] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 696.539100][ T8596] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 696.539100][ T8596] [ 696.682081][ T8596] EXT4-fs (loop5): Test dummy encryption mode enabled [ 696.688929][ T8596] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 696.867650][ T8540] chnl_net:caif_netlink_parms(): no params data found [ 696.919398][ T8596] EXT4-fs error (device loop5): ext4_orphan_get:1436: comm syz.5.1364: bad orphan inode 131083 [ 697.031838][ T8596] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,lazytime,inlinecrypt,usrquota,discard,journal_ioprio=0x0000000000000003,noacl,test_dummy_encryption=v1,usrquota,,errors=continue. Quota mode: writeback. [ 697.318627][ T8602] netlink: 'syz.0.1367': attribute type 49 has an invalid length. [ 697.764596][ T8602] device ip6gretap0 entered promiscuous mode [ 699.869260][ T8540] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.932579][ T8540] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.007439][ T8540] device bridge_slave_0 entered promiscuous mode [ 700.124305][ T8540] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.163632][ T8627] 9pnet: p9_errstr2errno: server reported unknown error [ 700.204659][ T8540] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.312440][ T8540] device bridge_slave_1 entered promiscuous mode [ 701.029608][ T8540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.221101][ T8540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.998177][ T8540] team0: Port device team_slave_0 added [ 702.087034][ T8540] team0: Port device team_slave_1 added [ 702.728041][ T8540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.751917][ T8540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.891630][ T8540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.076678][ T8646] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1, id = 0 [ 703.088434][ T8540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.131666][ T8540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.259376][ T8648] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 703.280639][ T8540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.818240][ T9] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.937872][ T8660] loop5: detected capacity change from 0 to 256 [ 705.062275][ T8660] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 705.132207][ T8660] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 705.396624][ T8540] device hsr_slave_0 entered promiscuous mode [ 705.427793][ T8660] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 705.515354][ T8540] device hsr_slave_1 entered promiscuous mode [ 705.582299][ T8540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 705.601566][ T8540] Cannot create hsr debugfs directory [ 705.820535][ T9] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.304692][ T8667] loop7: detected capacity change from 0 to 128 [ 706.434612][ T8667] EXT4-fs (loop7): Ignoring removed bh option [ 706.624440][ T8667] EXT4-fs (loop7): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 706.682521][ T8667] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 706.960695][ T9] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.614090][ T9] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.892750][ T8684] netlink: 'syz.7.1386': attribute type 1 has an invalid length. [ 711.957191][ T8700] loop7: detected capacity change from 0 to 1024 [ 713.039465][ T7625] hfsplus: b-tree write err: -5, ino 25 [ 713.091186][ T7625] hfsplus: b-tree write err: -5, ino 4 [ 713.144103][ T7625] hfsplus: b-tree write err: -5, ino 2 [ 713.168379][ T7625] hfsplus: b-tree write err: -5, ino 26 [ 715.077807][ T8717] loop5: detected capacity change from 0 to 4096 [ 715.242330][ T8540] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 715.267274][ T8721] loop7: detected capacity change from 0 to 1024 [ 715.398100][ T8721] EXT4-fs (loop7): Ignoring removed bh option [ 715.442553][ T8721] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 715.808545][ T8721] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none. [ 715.884758][ T8540] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 716.744907][ T8540] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 717.007221][ T8540] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 721.009743][ T8752] loop7: detected capacity change from 0 to 512 [ 721.332650][ T8752] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 721.422737][ T8752] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 721.578085][ T8540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.419280][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 722.455407][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 722.592347][ T8540] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.088164][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 723.141766][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 723.243763][ T7615] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.250928][ T7615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.344187][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 723.426318][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 723.500213][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 723.583568][ T7615] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.590725][ T7615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.728269][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 723.848193][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 723.905281][ T8770] loop5: detected capacity change from 0 to 1024 [ 724.033227][ T8770] EXT4-fs (loop5): Ignoring removed bh option [ 724.039466][ T8770] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 724.234854][ T8770] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none. [ 724.598218][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 724.653401][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 724.855932][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 724.986386][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 725.028374][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 725.774022][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 725.817526][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 726.055104][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 726.117556][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 726.132593][ T8786] netlink: 'syz.2.1417': attribute type 29 has an invalid length. [ 726.199046][ T8540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 726.338729][ T8786] netlink: 'syz.2.1417': attribute type 29 has an invalid length. [ 726.562071][ T8788] netlink: 'syz.2.1417': attribute type 29 has an invalid length. [ 726.621929][ T8789] netlink: 'syz.2.1417': attribute type 29 has an invalid length. [ 728.163876][ T8796] netlink: 'syz.2.1417': attribute type 29 has an invalid length. [ 730.287590][ T8813] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1424'. [ 730.813217][ T8817] loop0: detected capacity change from 0 to 256 [ 731.835371][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 731.865003][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 732.032981][ T8540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.143239][ T9] device hsr_slave_0 left promiscuous mode [ 733.214006][ T9] device hsr_slave_1 left promiscuous mode [ 733.254595][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.312333][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.375513][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.416525][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.495236][ T9] device bridge_slave_1 left promiscuous mode [ 733.532259][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.641327][ T9] device bridge_slave_0 left promiscuous mode [ 733.675537][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.823524][ T9] device hsr_slave_0 left promiscuous mode [ 733.885338][ T9] device hsr_slave_1 left promiscuous mode [ 733.917173][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.938363][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.012123][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.045616][ T9] device bridge_slave_1 left promiscuous mode [ 734.076236][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.438587][ T9] device bridge_slave_0 left promiscuous mode [ 734.452073][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.711262][ T9] device veth1_macvtap left promiscuous mode [ 734.729245][ T9] device veth0_macvtap left promiscuous mode [ 734.761772][ T9] device veth1_vlan left promiscuous mode [ 734.782351][ T9] device veth0_vlan left promiscuous mode [ 734.836880][ T9] device veth1_macvtap left promiscuous mode [ 734.867936][ T9] device veth0_macvtap left promiscuous mode [ 734.893081][ T9] device veth1_vlan left promiscuous mode [ 734.920691][ T9] device veth0_vlan left promiscuous mode [ 740.006404][ T9] team0 (unregistering): Port device team_slave_1 removed [ 740.143509][ T9] team0 (unregistering): Port device team_slave_0 removed [ 740.314032][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.442892][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.448558][ T9] bond0 (unregistering): Released all slaves [ 743.798057][ T9] team0 (unregistering): Port device team_slave_1 removed [ 743.944952][ T9] team0 (unregistering): Port device team_slave_0 removed [ 744.123331][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.284125][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.420145][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 744.543152][ T21] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 744.994004][ T8855] loop0: detected capacity change from 0 to 2048 [ 745.184120][ T8855] UDF-fs: error (device loop0): udf_read_tagged: block 97: CRC length 511 exceeds block size [ 745.251953][ T8855] UDF-fs: warning (device loop0): udf_fill_super: No partition found (2) [ 745.882853][ T8860] fido_id[8860]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 745.981172][ T9] bond0 (unregistering): Released all slaves [ 746.988031][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.996543][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.031586][ T4267] Bluetooth: hci5: command 0x0409 tx timeout [ 747.582508][ T8857] rxe_eth0 speed is unknown, defaulting to 1000 [ 748.481502][ T8872] X.509: Couldn't decode AuthKeyIdentifier [ 749.908329][ T4258] Bluetooth: hci5: command 0x041b tx timeout [ 752.029659][ T1112] Bluetooth: hci5: command 0x040f tx timeout [ 752.536132][ T25] audit: type=1800 audit(1792430162.980:38): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1447" name="idProduct" dev="configfs" ino=50479 res=0 errno=0 [ 754.505719][ T4289] Bluetooth: hci5: command 0x0419 tx timeout [ 754.533369][ T8901] rxe_eth0 speed is unknown, defaulting to 1000 [ 754.623250][ T8905] 9pnet: p9_errstr2errno: server reported unknown error �š¦#ò [ 754.623250][ T8905] \,æÃƒ7ÆÍˆ»Î^Õ [ 756.052264][ T4253] Bluetooth: hci0: command 0x0409 tx timeout [ 756.907334][ T8857] chnl_net:caif_netlink_parms(): no params data found [ 757.279299][ T8921] loop7: detected capacity change from 0 to 512 [ 757.462177][ T8921] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 757.576741][ T8921] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 757.592832][ T8921] System zones: 1-12 [ 757.648029][ T8921] EXT4-fs error (device loop7): ext4_orphan_get:1436: comm syz.7.1456: bad orphan inode 131072 [ 757.674227][ T8921] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue. Quota mode: none. [ 758.102931][ T1112] Bluetooth: hci0: command 0x041b tx timeout [ 758.167984][ T8921] overlayfs: upper fs needs to support d_type. [ 759.906761][ T4965] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /203/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 759.939310][ T8857] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.981949][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.033240][ T8857] device bridge_slave_0 entered promiscuous mode [ 760.087075][ T8857] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.141555][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.181809][ T8467] Bluetooth: hci0: command 0x040f tx timeout [ 760.193674][ T8857] device bridge_slave_1 entered promiscuous mode [ 760.752149][ T8857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.871307][ T8857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 762.218539][ T8857] team0: Port device team_slave_0 added [ 762.372546][ T8857] team0: Port device team_slave_1 added [ 762.671339][ T4253] Bluetooth: hci0: command 0x0419 tx timeout [ 763.332361][ T8857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.398623][ T8857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.521587][ T8857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.652417][ T8857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.710897][ T8857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.851759][ T8857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.670980][ T8901] chnl_net:caif_netlink_parms(): no params data found [ 764.896093][ T8857] device hsr_slave_0 entered promiscuous mode [ 764.994159][ T8857] device hsr_slave_1 entered promiscuous mode [ 767.128438][ T8901] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.191638][ T8901] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.206877][ T8901] device bridge_slave_0 entered promiscuous mode [ 767.388020][ T8901] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.422770][ T8901] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.479205][ T8901] device bridge_slave_1 entered promiscuous mode [ 768.831824][ T8901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.005143][ T8901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.925474][ T8901] team0: Port device team_slave_0 added [ 770.190055][ T8901] team0: Port device team_slave_1 added [ 770.908152][ T8901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.072439][ T8901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.176518][ T8990] loop0: detected capacity change from 0 to 512 [ 771.271671][ T8901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.317452][ T8990] EXT4-fs (loop0): Ignoring removed oldalloc option [ 771.449110][ T8990] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 772.046603][ T8901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.072145][ T8901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.098158][ C0] vkms_vblank_simulate: vblank timer overrun [ 772.208034][ T8901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.056718][ T8988] rxe_eth0 speed is unknown, defaulting to 1000 [ 773.228121][ T4262] Bluetooth: hci3: command 0x0409 tx timeout [ 773.347838][ T8901] device hsr_slave_0 entered promiscuous mode [ 773.448626][ T8901] device hsr_slave_1 entered promiscuous mode [ 773.552872][ T8901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 773.560665][ T8901] Cannot create hsr debugfs directory [ 774.767441][ T8857] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 774.998745][ T8857] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 775.240382][ T8857] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 775.301849][ T1112] Bluetooth: hci3: command 0x041b tx timeout [ 775.414163][ T8857] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 777.402326][ T1112] Bluetooth: hci3: command 0x040f tx timeout [ 779.461736][ T4253] Bluetooth: hci3: command 0x0419 tx timeout [ 782.067261][ T8857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.276872][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 782.294578][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 782.416865][ T8857] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.552525][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 782.600466][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 782.650469][ T7615] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.658034][ T7615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.816970][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 782.846159][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 782.924109][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 782.954863][ T7615] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.962314][ T7615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.160470][ T8988] chnl_net:caif_netlink_parms(): no params data found [ 783.388562][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 783.728276][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 784.196008][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 784.335633][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 784.406372][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 784.904961][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 784.945124][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 785.290329][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 785.374397][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 785.492693][ T9055] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 785.706787][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 785.733910][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 785.845106][ T8901] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 785.934886][ T8988] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.956786][ T8988] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.020978][ T8988] device bridge_slave_0 entered promiscuous mode [ 786.096181][ T8857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 786.170349][ T8901] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 786.577625][ T8988] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.622395][ T8988] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.675903][ T8988] device bridge_slave_1 entered promiscuous mode [ 786.981583][ T8901] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 787.266863][ T8901] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 787.394822][ T8988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.527018][ T8988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.106223][ T8988] team0: Port device team_slave_0 added [ 788.226691][ T8988] team0: Port device team_slave_1 added [ 788.808311][ T8988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.832017][ T8988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.940002][ T8988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.104453][ T8988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 789.147476][ T8988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.281613][ T8988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.253448][ T8988] device hsr_slave_0 entered promiscuous mode [ 790.337637][ T8988] device hsr_slave_1 entered promiscuous mode [ 790.392228][ T8988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 790.425818][ T8988] Cannot create hsr debugfs directory [ 790.442515][ T9074] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 790.450683][ T9074] IPv6: NLM_F_CREATE should be set when creating new route [ 790.510358][ T9076] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 791.394285][ T8901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.020115][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 792.063000][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 792.508695][ T8901] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.043245][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 793.084796][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 793.153292][ T7615] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.160551][ T7615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.245684][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 793.276191][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 793.577430][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 793.892934][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 793.948042][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 793.987702][ T7615] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.995143][ T7615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.166803][ T8857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.137071][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 795.315114][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 796.350372][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 796.431772][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 796.495417][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 796.626368][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 796.664786][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 797.412580][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 797.444506][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 797.572170][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 797.595502][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 797.806924][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 799.887253][ T8988] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 800.045901][ T8988] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 800.164569][ T8988] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 800.298680][ T8988] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 802.267800][ T9150] loop2: detected capacity change from 0 to 128 [ 802.612162][ T8988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.713619][ T9150] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 802.768157][ T9150] ext4 filesystem being mounted at /335/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 802.916938][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 802.954847][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 803.096499][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 803.124275][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 803.261893][ T8988] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.367950][ T9150] fscrypt (loop2, inode 12): Unsupported encryption flags (0x10) [ 803.388678][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 803.420273][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 803.513871][ T7607] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.521109][ T7607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.602130][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 803.762487][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 803.803082][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 803.883315][ T7617] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.890529][ T7617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.083710][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 804.114940][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 804.159753][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 804.287820][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 804.504064][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 804.548518][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 804.655373][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 804.770351][ T8901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.953625][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 804.987447][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 805.163646][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 805.214028][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 805.401038][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 805.446515][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 805.553719][ T8988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 805.702823][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 805.773998][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 806.246253][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 806.279120][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 806.338227][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 806.413043][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 806.478352][ T8901] device veth0_vlan entered promiscuous mode [ 806.881846][ T8901] device veth1_vlan entered promiscuous mode [ 807.242786][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 807.283104][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 807.410940][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 807.472879][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 807.570112][ T8901] device veth0_macvtap entered promiscuous mode [ 808.273587][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 808.320863][ T8901] device veth1_macvtap entered promiscuous mode [ 808.434724][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.441297][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.433148][ T25] audit: type=1326 audit(1792430220.880:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9173 comm="syz.0.1513" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34dd071559 code=0x0 [ 810.774152][ T9171] rxe_eth0 speed is unknown, defaulting to 1000 [ 812.126805][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 812.188654][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 812.363759][ T4258] Bluetooth: hci4: command 0x0409 tx timeout [ 812.453832][ T8988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.320821][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 813.374477][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 813.738853][ T9184] Illegal XDP return value 4294967274, expect packet loss! [ 813.782417][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 813.797651][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 813.903658][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 813.946353][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 813.985070][ T8988] device veth0_vlan entered promiscuous mode [ 814.184921][ T8988] device veth1_vlan entered promiscuous mode [ 814.422103][ T1112] Bluetooth: hci4: command 0x041b tx timeout [ 815.098007][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 815.245614][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 815.502263][ T8988] device veth0_macvtap entered promiscuous mode [ 815.715162][ T8988] device veth1_macvtap entered promiscuous mode [ 816.180058][ T8988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.229539][ T8988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.271831][ T8988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.332253][ T8988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.364369][ T8988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.419170][ T8988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.471644][ T8988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.511554][ T8988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.558199][ T8988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.594427][ T9187] rxe_eth0 speed is unknown, defaulting to 1000 [ 816.610009][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 816.644637][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 816.748329][ T8988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.769889][ T1112] Bluetooth: hci4: command 0x040f tx timeout [ 816.796239][ T8988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.831780][ T8988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.861985][ T8988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.897771][ T8988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.930033][ T8988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.997348][ T8988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.046375][ T8988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.111109][ T8988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.238696][ T5126] Bluetooth: hci0: command 0x0409 tx timeout [ 817.362359][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 817.394431][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 817.499335][ T9197] loop0: detected capacity change from 0 to 256 [ 817.825405][ T8988] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.845538][ T8988] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.902213][ T8988] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.911002][ T8988] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.878296][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 819.439858][ T4262] Bluetooth: hci0: command 0x041b tx timeout [ 819.836484][ T9202] ip_tables: iptables: counters copy to user failed while replacing table [ 819.892624][ T7625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.927306][ T7625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.048125][ T25] audit: type=1326 audit(1792430230.490:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.0.1522" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34dd071559 code=0x0 [ 820.109195][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 820.134315][ T9171] chnl_net:caif_netlink_parms(): no params data found [ 821.431831][ T7619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.439705][ T7619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.548702][ T8705] Bluetooth: hci0: command 0x040f tx timeout [ 821.651956][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 822.482284][ T9171] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.563356][ T9171] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.617418][ T9171] device bridge_slave_0 entered promiscuous mode [ 822.750067][ T9171] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.782070][ T9171] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.829753][ T9171] device bridge_slave_1 entered promiscuous mode [ 823.649121][ T9171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.656023][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 823.875532][ T9171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.144785][ T9171] team0: Port device team_slave_0 added [ 825.337720][ T9171] team0: Port device team_slave_1 added [ 825.774880][ T9224] device-mapper: ioctl: Unable to interpret geometry settings. [ 825.968654][ T9171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.029733][ T9171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 826.161563][ T9171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.307949][ T9171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.381779][ T9171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 826.501535][ T9171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.367869][ T9187] chnl_net:caif_netlink_parms(): no params data found [ 827.686717][ T9171] device hsr_slave_0 entered promiscuous mode [ 827.776365][ T9171] device hsr_slave_1 entered promiscuous mode [ 827.826040][ T9171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 827.865726][ T9171] Cannot create hsr debugfs directory [ 828.988439][ T25] audit: type=1800 audit(1792430239.430:41): pid=9243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1535" name="max_speed" dev="configfs" ino=51765 res=0 errno=0 [ 830.186481][ T9187] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.197473][ T9187] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.272559][ T9187] device bridge_slave_0 entered promiscuous mode [ 830.368068][ T9248] loop0: detected capacity change from 0 to 512 [ 830.425890][ T9187] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.441586][ T9187] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.652702][ T9248] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.1537: inode has both inline data and extents flags [ 830.670645][ T9187] device bridge_slave_1 entered promiscuous mode [ 830.773362][ T9248] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.1537: couldn't read orphan inode 15 (err -117) [ 830.841994][ T9248] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 831.715012][ T9187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.965883][ T9187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.969988][ T9187] team0: Port device team_slave_0 added [ 833.294890][ T5126] kernel read not supported for file /sequencer (pid: 5126 comm: kworker/1:8) [ 833.496034][ T9266] printk: console [ttyS0] disabled Stopping sshd: stopped /usr/sbin/sshd (pid 3947) OK Stopping crond: stopped /usr/sbin/crond (pid 3926) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3851) serialport: VM disconnected.