last executing test programs: 8m20.38527396s ago: executing program 2 (id=232): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca", 0xe1}, {&(0x7f0000000cc0)="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", 0x128}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d7368b992a889f51854c7b63c180", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 8m18.265095132s ago: executing program 2 (id=235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) 8m17.343869215s ago: executing program 2 (id=236): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0x4000) r3 = syz_open_procfs(r1, &(0x7f0000000480)='task\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) fchdir(r3) wait4(r1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 8m15.976668708s ago: executing program 2 (id=240): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file7\x00', 0x0, &(0x7f0000000200), 0x1, 0x507, &(0x7f0000000c00)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xfad}}, {@noblock_validity}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nouid32}, {@nomblk_io_submit}, {@dioread_lock}, {@mb_optimize_scan}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x29, 0xfffffffc, 0x14c0348, 0xc0be, 0x2, 0xf296, 0x2e64, 0x0, 0x0, 0x10, 0x3}}, 0x50) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x206420, 0x0, 0x7, 0x0, &(0x7f0000006380)) 8m15.214846436s ago: executing program 2 (id=243): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './mnt\x00'}) 8m13.538121577s ago: executing program 2 (id=248): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}], [], 0x6b}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0x2000000000010002, 0x0) 7m58.491464055s ago: executing program 32 (id=248): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}], [], 0x6b}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0x2000000000010002, 0x0) 7m45.306251646s ago: executing program 1 (id=315): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x884) 7m41.279419354s ago: executing program 1 (id=320): sendmsg$unix(0xffffffffffffffff, 0x0, 0x4040010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) request_key(&(0x7f00000005c0)='rxrpc_s\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f0000001fee)='R\x10r\x95\xc6\x80\xc4_\xad\xa4\xcb\x12\x00\x89u', 0x0) syz_usb_connect(0x0, 0x164, 0x0, 0x0) 7m38.050220223s ago: executing program 1 (id=323): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(r8, r7, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0x3, 0x255}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0xffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf912, 0x0, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x0, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) 7m36.836684113s ago: executing program 1 (id=324): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200, 0xfffffff7) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0x7fffffff, 0x19401804, 0x2, 0xfffe, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x40, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x373, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x7, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 7m35.395359378s ago: executing program 1 (id=327): r0 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r3, &(0x7f00000005c0)=""/4096, 0x1000) wait4(r0, 0x0, 0x40000000, 0x0) r4 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x86) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8880, 0x85) lseek(r6, 0x101, 0x1) getdents(r6, &(0x7f00000002c0)=""/201, 0xc9) 7m33.507005314s ago: executing program 1 (id=330): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000040"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xffff, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) recvfrom$unix(r1, 0x0, 0x0, 0x40000144, 0x0, 0x0) 7m32.180930497s ago: executing program 33 (id=330): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000040"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xffff, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) recvfrom$unix(r1, 0x0, 0x0, 0x40000144, 0x0, 0x0) 10.803237427s ago: executing program 5 (id=1123): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(r8, r7, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0x3, 0x255}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0xffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf912, 0x0, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x0, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) 9.261051415s ago: executing program 5 (id=1129): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x18, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0xfffffffe, 0xffffffff, 0x100000, 0x2, 0x8000000, 0x4}) 6.518253892s ago: executing program 5 (id=1138): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003800)={0x14, 0x12, 0x400, 0x0, 0x0, {0x7}}, 0xffffffffffffffba}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffd40}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) io_uring_enter(r0, 0x3ab, 0x6933, 0x17, 0x0, 0x0) 5.984122784s ago: executing program 5 (id=1141): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 4.93024254s ago: executing program 5 (id=1144): fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_init1(0x0) 3.954512724s ago: executing program 0 (id=1151): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x1405, 0x8, 0x70bd28, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x24000000}, 0x40c4) 3.648869502s ago: executing program 4 (id=1153): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x20) 3.647507922s ago: executing program 0 (id=1154): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x6, 0x5}) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000002780)={0x203, 0x1c, 0x0, 0x5}) 3.339166769s ago: executing program 3 (id=1156): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 3.338981559s ago: executing program 4 (id=1157): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1210080, &(0x7f0000000300)={[{@uid={'uid', 0x3d, 0xee01}}, {@codepage={'codepage', 0x3d, 'cp437'}}, {@gid}, {@dir_umask={'dir_umask', 0x3d, 0x3}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@gid}, {@creator={'creator', 0x3d, "3a957146"}}]}, 0x1, 0x32e, &(0x7f0000000b00)="$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") write$UHID_INPUT(r0, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x14927e, 0x20) 2.821373142s ago: executing program 0 (id=1158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000015c000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f0000000080)="9090", 0x2}], 0x1, 0x29, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000002bc0)=@vmx={0x0, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff, {}, 0x0, 0x5}}) 2.772328353s ago: executing program 3 (id=1159): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000200)=ANY=[@ANYBLOB="63726561746f723dde6256b12c636f6465706167653d6d6163677265656b2c696f636861727365743d63703836362c756d61736b3d30303030303030303030303030303030303030303030352c00e4cf2d3a91a80628ea6b1bc6025a3322673c9a6ca7e1bfc0fbffeba166ebdb"], 0x4, 0x2ea, &(0x7f0000000900)="$eJzs3btuE0scx/HfrO3EuZycPUmOjnQaUCASNBEBCkRjhNwheioExI4UYQWRBAloCIgS8QBQ8wo8BA2IF4CKigdIt2hmL17b67UNsTeG70eyNZ6dy380u96ZRcQC8Me6Xv/y7tI3+zJSSSVJVyVPUlUqS/pX/1Uf7R7sHLSajbyGSq6GfRmFNU1Pma3dZlZVW8/ViPj2U1mL6TyMRxAE174WHQSKM5ukSlmHPVui3D5enVhg43UonSo6hklLT7A50pEea6nAcAAAJ4AJbw9edJtYdFlGnietR7f93+r+f1R0AMfrcqsnK8itkLr/u9VdYOz8/u0Otfd7bgtnj3vxLnGYYCpdn2cUnlkdC0wzaFfpYvHmtnfK2th6roanF6pFUifiqntvhKdubEC0a3o7zDgGt1bRzflwNG5F2S0OaXun1XTr7FT8sZXRevx15oP5ZG4bX2/USNZ/5cDYaXIz5XfNlFex8V/o3+KCq2VLKdr212o1r6PIP66T/6MeIgNGWc3ekaTbjB8QHCYRdMU5l/7g+l5W52OFcHSb/btxtVayavnJpz61VjtqlaIzYWPrQSv3Ucp4xEM0r80ts6bveq96av3v2fjWlboy877qjSsZnRnheGayS5ZdSb/nztG+XE4nEURmRx4bpBGflr3SPV3R0v6Tp/dLrVZzzybuZiQeLu6ZKKfyUsosM/5ESTlldNjOCaxnQTBsy8E4gz9/rA3a748kx14+WYXtVZbkeJOeppETOhlhpBMzQ5Spf1TeCTk9iSBQvykY2/cUTpB9E096lDFXcECYNLvuMuH+z63ko1Wd2/vZNz9nnZ6/yVRHi5vJDq5zKbjs3udH2sEtZPzrYm+PF7v2jDG35zpzTjqbyjTK7dGP4pwON/4aUMDU9Vl3eP4PAAAAAAAAAAAAAAAAAAAwbSbxPw2KHiMAAAAAAAAAAAAAAAAAAAAAANPup37/N+tvxLvf//X5/V9givwIAAD//59yePg=") r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d000003605021100000108021100000050505050505000000f"], 0x54}}, 0x0) 2.659176396s ago: executing program 4 (id=1160): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x10}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041810}, 0x0) 2.373766663s ago: executing program 0 (id=1161): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYBLOB="0000000000000000001600000000000000000000b2ef7a041eff013c562e6744ca971643f3d79232762fcbc9fd77f9ef7f7ac5d4050f29075be438b3b97d30d04223b5b470027acdb80b9db45556c01b02889c6f8573f044e666cb9d9b82c412f414d2386b56d710af162997eb0203acc908497f18ce0e69d65ebd326c94e833f79a355c6ac579a668d8c43bfdac611b6b7c96899c1f81b2a7ee018e3babd1df4c6c90fbce238580992576dc78c38ab3694260f1cb973e82862482e9a96950c4df84945a862062d83e74db3c3479b9bfcc2f67366e3e55f9669087589bf032aced85af673527e6f34fd577f7406f4f19ad7ce20786720eeb36e6a6bdec5d0ac839", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x10) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r2, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x34020000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x2}}, 0x20) semctl$GETZCNT(r2, 0x2, 0xf, 0x0) 2.301554875s ago: executing program 3 (id=1162): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x2000000, &(0x7f0000000900)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}, 0x0, 0x0, 0x0) 2.07638253s ago: executing program 3 (id=1163): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) close(r0) 1.68306083s ago: executing program 3 (id=1164): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0x1, 0x4) recvmmsg(r0, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/36, 0x24}, 0x1ff}], 0x1, 0x40000023, 0x0) 1.607353572s ago: executing program 4 (id=1165): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000005c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 1.341321598s ago: executing program 0 (id=1166): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close(0x3) 1.23914179s ago: executing program 4 (id=1167): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=ANY=[], 0x10c}, 0x1, 0x0, 0x0, 0x40001}, 0x814) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/153, 0x99}], 0x1}, 0x20010000) 1.074309545s ago: executing program 4 (id=1168): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000380), 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@bridge_newvlan={0x30, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x1}}]}, 0x30}}, 0x0) 654.589295ms ago: executing program 0 (id=1169): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x80000001}], 0x18}], 0x1, 0x48802) 622.798896ms ago: executing program 3 (id=1170): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0", 0x87}], 0x3, 0x0, 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 602.264666ms ago: executing program 5 (id=1171): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 0s ago: executing program 34 (id=1171): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) kernel console output (not intermixed with test programs): batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.875058][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.888357][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.970802][ T5771] hsr_slave_0: entered promiscuous mode [ 79.978282][ T5771] hsr_slave_1: entered promiscuous mode [ 80.027111][ T5775] team0: Port device team_slave_0 added [ 80.040274][ T5772] hsr_slave_0: entered promiscuous mode [ 80.047582][ T5772] hsr_slave_1: entered promiscuous mode [ 80.054443][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.062279][ T5772] Cannot create hsr debugfs directory [ 80.073449][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.080752][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.088244][ T5773] bridge_slave_0: entered allmulticast mode [ 80.095242][ T5773] bridge_slave_0: entered promiscuous mode [ 80.114130][ T5775] team0: Port device team_slave_1 added [ 80.137477][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.144878][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.152017][ T5773] bridge_slave_1: entered allmulticast mode [ 80.159183][ T5773] bridge_slave_1: entered promiscuous mode [ 80.212887][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.220284][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.246782][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.286663][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.296484][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.323913][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.353620][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.367362][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.454444][ T51] Bluetooth: hci1: command tx timeout [ 80.462291][ T5773] team0: Port device team_slave_0 added [ 80.499700][ T5773] team0: Port device team_slave_1 added [ 80.527028][ T5775] hsr_slave_0: entered promiscuous mode [ 80.533490][ T5775] hsr_slave_1: entered promiscuous mode [ 80.534377][ T5785] Bluetooth: hci0: command tx timeout [ 80.540085][ T51] Bluetooth: hci2: command tx timeout [ 80.545309][ T5084] Bluetooth: hci3: command tx timeout [ 80.551059][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.563614][ T5775] Cannot create hsr debugfs directory [ 80.618949][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.631038][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.660275][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.693618][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.700987][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.727008][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.861762][ T5773] hsr_slave_0: entered promiscuous mode [ 80.868658][ T5773] hsr_slave_1: entered promiscuous mode [ 80.874994][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.882577][ T5773] Cannot create hsr debugfs directory [ 80.975471][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.999785][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.009821][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.038372][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.148885][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.161911][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.172520][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.198224][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.288112][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.300336][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.310902][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.323433][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.416701][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.430328][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.441303][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.454800][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.529294][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.548380][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.589632][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.627899][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.639153][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.646551][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.682761][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.689962][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.712266][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.719497][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.737452][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.744672][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.849263][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.883595][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.922319][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.980842][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.007084][ T4834] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.014340][ T4834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.046475][ T4834] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.053844][ T4834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.097518][ T4834] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.104771][ T4834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.127282][ T4834] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.134498][ T4834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.363517][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.463609][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.544245][ T5084] Bluetooth: hci1: command tx timeout [ 82.562718][ T5771] veth0_vlan: entered promiscuous mode [ 82.612949][ T5772] veth0_vlan: entered promiscuous mode [ 82.623556][ T5084] Bluetooth: hci3: command tx timeout [ 82.629866][ T5785] Bluetooth: hci0: command tx timeout [ 82.635644][ T51] Bluetooth: hci2: command tx timeout [ 82.680709][ T5771] veth1_vlan: entered promiscuous mode [ 82.705271][ T5772] veth1_vlan: entered promiscuous mode [ 82.767645][ T5772] veth0_macvtap: entered promiscuous mode [ 82.779890][ T5772] veth1_macvtap: entered promiscuous mode [ 82.808468][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.822326][ T5771] veth0_macvtap: entered promiscuous mode [ 82.834665][ T5771] veth1_macvtap: entered promiscuous mode [ 82.844047][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.872707][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.902489][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.913969][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.927693][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.940311][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.952288][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.961799][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.971242][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.980057][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.998192][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.008915][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.022382][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.052776][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.067985][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.077707][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.088407][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.121463][ T5773] veth0_vlan: entered promiscuous mode [ 83.157723][ T5773] veth1_vlan: entered promiscuous mode [ 83.256960][ T5775] veth0_vlan: entered promiscuous mode [ 83.296909][ T5775] veth1_vlan: entered promiscuous mode [ 83.329882][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.331672][ T5773] veth0_macvtap: entered promiscuous mode [ 83.344426][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.367670][ T5773] veth1_macvtap: entered promiscuous mode [ 83.416887][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.425811][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.464852][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.475899][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.486450][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.497262][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.510197][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.541799][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.553190][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.563950][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.574890][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.586278][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.607924][ T5775] veth0_macvtap: entered promiscuous mode [ 83.620020][ T4834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.634200][ T4834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.644282][ T5775] veth1_macvtap: entered promiscuous mode [ 83.654455][ T3451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.662340][ T3451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.662724][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.686174][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.696690][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.707724][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.718089][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.729452][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.741254][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.754879][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.763601][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.772493][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.781893][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.831877][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.848448][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.859176][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.870242][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.880844][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.891447][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.904283][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.929742][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.943592][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.960012][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.971401][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.192357][ T5840] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.268685][ T5844] syz.3.4[5844]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 84.292108][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.309539][ T4834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.323921][ T4834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.332794][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.339714][ T5844] loop3: detected capacity change from 0 to 1024 [ 84.378313][ T5844] EXT4-fs: Ignoring removed bh option [ 84.431352][ T5844] EXT4-fs: test_dummy_encryption requires encrypt feature [ 84.493523][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.540554][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.605375][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.624063][ T5785] Bluetooth: hci1: command tx timeout [ 84.640010][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.694082][ T5785] Bluetooth: hci0: command tx timeout [ 84.699571][ T5785] Bluetooth: hci3: command tx timeout [ 84.707440][ T5785] Bluetooth: hci2: command tx timeout [ 86.175133][ T5868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10'. [ 86.459499][ T5877] loop3: detected capacity change from 0 to 512 [ 86.507145][ T5877] EXT4-fs: Ignoring removed orlov option [ 86.512892][ T5877] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.588821][ T5877] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.13: corrupted in-inode xattr: e_value size too large [ 86.626797][ T5886] loop0: detected capacity change from 0 to 128 [ 86.644603][ T5886] ======================================================= [ 86.644603][ T5886] WARNING: The mand mount option has been deprecated and [ 86.644603][ T5886] and is ignored by this kernel. Remove the mand [ 86.644603][ T5886] option from the mount to silence this warning. [ 86.644603][ T5886] ======================================================= [ 86.663818][ T5877] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.13: couldn't read orphan inode 15 (err -117) [ 86.708358][ T5785] Bluetooth: hci1: command tx timeout [ 86.720898][ T5886] FAT-fs (loop0): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 86.758271][ T5877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.773888][ T5084] Bluetooth: hci0: command tx timeout [ 86.779429][ T5785] Bluetooth: hci3: command tx timeout [ 86.785031][ T5785] Bluetooth: hci2: command tx timeout [ 87.215856][ T5877] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.13: Logical block already allocated [ 87.743399][ T5785] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 87.840688][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.554755][ T5918] loop1: detected capacity change from 0 to 512 [ 88.581525][ T5918] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.623791][ T5918] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 88.678010][ T5918] EXT4-fs (loop1): 1 truncate cleaned up [ 88.715404][ T5918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.924447][ T5918] EXT4-fs error (device loop1): ext4_discard_preallocations:5632: comm syz.1.27: Error -117 loading buddy information for 4294967295 [ 88.942616][ T5918] EXT4-fs (loop1): Remounting filesystem read-only [ 89.041961][ T5923] tipc: Started in network mode [ 89.071501][ T5923] tipc: Node identity 4ab84e573bc9, cluster identity 4711 [ 89.115479][ T5923] tipc: Enabled bearer , priority 0 [ 89.175476][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.304630][ T5928] syzkaller0: entered promiscuous mode [ 89.321064][ T5928] syzkaller0: entered allmulticast mode [ 89.339855][ T5928] tipc: Resetting bearer [ 89.479662][ T5922] tipc: Resetting bearer [ 90.027749][ T791] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 90.236416][ T5777] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.274350][ T791] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.284974][ T791] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 90.296033][ T791] usb 2-1: config 1 has no interface number 0 [ 90.302260][ T791] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.331049][ T791] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.340501][ T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.348661][ T791] usb 2-1: Product: syz [ 90.354197][ T791] usb 2-1: Manufacturer: syz [ 90.358858][ T791] usb 2-1: SerialNumber: syz [ 90.428244][ T5777] usb 3-1: Using ep0 maxpacket: 16 [ 90.446574][ T5777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 90.485707][ T791] cdc_ncm 2-1:1.1: skipping garbage [ 90.491666][ T791] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 90.499495][ T791] cdc_ncm 2-1:1.1: bind() failure [ 90.517645][ T5777] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 90.533237][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.551820][ T5777] usb 3-1: Product: syz [ 90.558184][ T5777] usb 3-1: Manufacturer: syz [ 90.562855][ T5777] usb 3-1: SerialNumber: syz [ 90.585041][ T5777] usb 3-1: config 0 descriptor?? [ 90.611917][ T5777] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 90.621980][ T5777] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 90.737550][ T5935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.751068][ T5935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.984261][ T5816] usb 2-1: USB disconnect, device number 2 [ 91.225834][ T5777] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 91.761845][ T5777] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 91.788409][ T5777] em28xx 3-1:0.0: board has no eeprom [ 91.805600][ T5922] tipc: Disabling bearer [ 91.844914][ T5932] netlink: 'syz.3.31': attribute type 1 has an invalid length. [ 91.873631][ T5782] tipc: Node number set to 1903251031 [ 91.916917][ T5946] syzkaller0: entered promiscuous mode [ 91.922728][ T5946] syzkaller0: entered allmulticast mode [ 92.105489][ T5777] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 92.134102][ T5777] em28xx 3-1:0.0: dvb set to bulk mode. [ 92.158463][ T5782] em28xx 3-1:0.0: Binding DVB extension [ 92.178291][ T5777] usb 3-1: USB disconnect, device number 2 [ 92.192564][ T5777] em28xx 3-1:0.0: Disconnecting em28xx [ 92.304572][ T5953] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 92.319529][ T23] cfg80211: failed to load regulatory.db [ 92.359047][ T5782] em28xx 3-1:0.0: Registering input extension [ 92.390460][ T5777] em28xx 3-1:0.0: Closing input extension [ 92.483020][ T5777] em28xx 3-1:0.0: Freeing device [ 94.280612][ T5963] loop2: detected capacity change from 0 to 32768 [ 94.438981][ T5963] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 94.644229][ T5963] XFS (loop2): Ending clean mount [ 95.048208][ T5775] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 95.236021][ T6001] loop1: detected capacity change from 0 to 1024 [ 95.263329][ T6001] EXT4-fs: Ignoring removed bh option [ 95.310352][ T6001] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 95.404228][ T6001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.521006][ T6001] EXT4-fs error (device loop1): __ext4_remount:6756: comm syz.1.53: Abort forced by user [ 95.542704][ T6001] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 95.719068][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.011628][ T6017] netlink: 52 bytes leftover after parsing attributes in process `syz.3.59'. [ 96.403614][ T6029] syz.1.62 (6029): attempted to duplicate a private mapping with mremap. This is not supported. [ 96.538171][ T6035] loop2: detected capacity change from 0 to 8 [ 96.595499][ T6035] unable to read inode lookup table [ 96.639874][ T6039] capability: warning: `syz.0.67' uses 32-bit capabilities (legacy support in use) [ 96.867110][ T5816] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 97.059745][ T5816] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 97.090888][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.137034][ T5816] usb 2-1: Product: syz [ 97.141435][ T5816] usb 2-1: Manufacturer: syz [ 97.151999][ T5816] usb 2-1: SerialNumber: syz [ 97.184143][ T5816] usb 2-1: config 0 descriptor?? [ 97.389508][ T6053] Illegal XDP return value 1609325876 on prog (id 10) dev syz_tun, expect packet loss! [ 97.427601][ T5816] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 97.764283][ T6055] kvm: pic: single mode not supported [ 97.769959][ T6055] kvm: pic: level sensitive irq not supported [ 97.794284][ T6055] kvm: pic: level sensitive irq not supported [ 97.822254][ T6055] kvm: pic: single mode not supported [ 97.857901][ T6055] kvm: pic: single mode not supported [ 97.882001][ T6055] kvm: pic: level sensitive irq not supported [ 97.888227][ T6055] kvm: pic: non byte read [ 98.330478][ T6061] loop0: detected capacity change from 0 to 256 [ 98.344116][ T6061] exfat: Deprecated parameter 'utf8' [ 98.349544][ T6061] exfat: Deprecated parameter 'utf8' [ 98.378981][ T6061] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 98.441672][ T6061] exFAT-fs (loop0): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 99.065596][ T5816] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 99.099391][ T6069] binder: 6068:6069 ioctl c0306201 200000000080 returned -14 [ 99.102084][ T5816] usb 2-1: USB disconnect, device number 3 [ 99.138146][ T6069] binder: 6068:6069 ioctl c0306201 2000000003c0 returned -14 [ 99.302176][ T6073] process 'syz.0.80' launched './file2' with NULL argv: empty string added [ 99.378281][ T6076] loop3: detected capacity change from 0 to 128 [ 99.910941][ T6090] kvm: requested 113981 ns i8254 timer period limited to 200000 ns [ 99.921518][ T6090] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 99.929972][ T6090] kvm: requested 126552 ns i8254 timer period limited to 200000 ns [ 99.949006][ T6090] kvm: requested 90514 ns i8254 timer period limited to 200000 ns [ 99.985380][ T6090] kvm: requested 103085 ns i8254 timer period limited to 200000 ns [ 99.999479][ T6090] kvm: requested 150019 ns i8254 timer period limited to 200000 ns [ 100.011596][ T6090] kvm: requested 93866 ns i8254 timer period limited to 200000 ns [ 100.090420][ T6101] tipc: Enabling of bearer rejected, failed to enable media [ 100.477471][ T6109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.485793][ T6109] batadv_slave_1: entered promiscuous mode [ 101.688751][ T6114] Bluetooth: MGMT ver 1.22 [ 101.792816][ T6121] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.822407][ T6114] Zero length message leads to an empty skb [ 101.873810][ T6121] syz.3.94 (6121) used greatest stack depth: 19368 bytes left [ 102.304998][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.723056][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 102.873775][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 102.877755][ T6136] IPv6: sit1: Disabled Multicast RS [ 102.931357][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.054453][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 103.058760][ T6139] tipc: Failed to remove unknown binding: 66,0,0/0:3898335868/3898335870 [ 103.063561][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.063588][ T9] usb 1-1: Product: syz [ 103.063602][ T9] usb 1-1: Manufacturer: syz [ 103.063617][ T9] usb 1-1: SerialNumber: syz [ 103.115194][ T9] usb 1-1: config 0 descriptor?? [ 103.130577][ T9] adutux 1-1:0.0: interrupt endpoints not found [ 103.133692][ T6139] tipc: Failed to remove unknown binding: 66,0,0/0:3898335868/3898335869 [ 103.158097][ T6139] tipc: Failed to remove unknown binding: 66,0,0/0:3898335868/3898335870 [ 103.183927][ T6139] tipc: Failed to remove unknown binding: 66,0,0/0:3898335868/3898335869 [ 103.344836][ T6146] netlink: 'syz.3.100': attribute type 1 has an invalid length. [ 103.398042][ T9] usb 1-1: USB disconnect, device number 2 [ 103.526648][ T6146] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.584394][ T6153] bond1: (slave geneve2): making interface the new active one [ 103.596293][ T6153] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 104.856597][ T6168] bridge0: port 3(syz_tun) entered blocking state [ 104.910939][ T6168] bridge0: port 3(syz_tun) entered disabled state [ 105.448448][ T6168] syz_tun: entered allmulticast mode [ 105.765606][ T6168] syz_tun: entered promiscuous mode [ 105.771750][ T6168] bridge0: port 3(syz_tun) entered blocking state [ 105.778845][ T6168] bridge0: port 3(syz_tun) entered forwarding state [ 107.312637][ T6190] loop1: detected capacity change from 0 to 128 [ 107.366044][ T6190] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.415988][ T6190] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.497079][ T6190] syz.1.114 (pid 6190) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 108.930826][ T6203] loop0: detected capacity change from 0 to 1024 [ 108.977671][ T6203] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 108.987666][ T6203] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 108.998976][ T6203] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.117: Failed to acquire dquot type 0 [ 109.018219][ T6203] EXT4-fs error (device loop0): mb_free_blocks:1970: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 109.077221][ T6203] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.117: corrupted inode contents [ 109.147980][ T6203] EXT4-fs error (device loop0): ext4_dirty_inode:6144: inode #13: comm syz.0.117: mark_inode_dirty error [ 109.189665][ T6203] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.117: corrupted inode contents [ 109.191827][ T6190] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 109.215236][ T6203] EXT4-fs error (device loop0): __ext4_ext_dirty:208: inode #13: comm syz.0.117: mark_inode_dirty error [ 109.229020][ T6203] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.117: corrupted inode contents [ 109.256987][ T6203] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 109.270011][ T6203] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.117: corrupted inode contents [ 109.301169][ T6190] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 109.302971][ T6203] EXT4-fs error (device loop0): ext4_truncate:4302: inode #13: comm syz.0.117: mark_inode_dirty error [ 109.360621][ T6203] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 109.393984][ T6203] EXT4-fs (loop0): 1 truncate cleaned up [ 109.402248][ T6203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.442953][ T5772] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.695723][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.891624][ T6220] tipc: Enabling of bearer rejected, failed to enable media [ 110.234488][ T6223] fuse: root generation should be zero [ 110.444539][ T6224] loop2: detected capacity change from 0 to 8192 [ 110.498133][ T6224] loop2: p1 < > p2 p4 < p5 > [ 110.514691][ T6224] loop2: partition table partially beyond EOD, truncated [ 110.522425][ T6224] loop2: p1 start 134217728 is beyond EOD, truncated [ 110.553779][ T6224] loop2: p2 size 591360 extends beyond EOD, truncated [ 110.594251][ T6224] loop2: p5 size 591360 extends beyond EOD, truncated [ 110.787476][ T6219] loop0: detected capacity change from 0 to 32768 [ 110.947537][ T6219] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 112.142625][ T5776] udevd[5776]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 112.151007][ T5774] udevd[5774]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 112.164536][ T6219] XFS (loop0): Ending clean mount [ 112.181821][ T5789] udevd[5789]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 112.368228][ T6255] syzkaller0: entered promiscuous mode [ 112.383036][ T6255] syzkaller0: entered allmulticast mode [ 112.622607][ T5773] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 113.142481][ T6268] syzkaller0: entered promiscuous mode [ 113.163830][ T6268] syzkaller0: entered allmulticast mode [ 114.882099][ T6286] warning: `syz.0.142' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.582019][ T6289] fuse: Bad value for 'fd' [ 115.771043][ T6294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.146'. [ 116.404165][ T6309] all: renamed from lo (while UP) [ 116.842880][ T6320] Cannot find add_set index 0 as target [ 118.140955][ T6336] loop0: detected capacity change from 0 to 512 [ 118.178361][ T6336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 118.232309][ T6336] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.157: Unimplemented hash flags: 0x0001 [ 118.253131][ T6336] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.157: Corrupt directory, running e2fsck is recommended [ 118.278030][ T6336] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.157: Unimplemented hash flags: 0x0001 [ 118.291458][ T6336] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.157: Corrupt directory, running e2fsck is recommended [ 118.333280][ T6336] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.157: Unimplemented hash flags: 0x0001 [ 118.362272][ T6336] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.157: Corrupt directory, running e2fsck is recommended [ 118.422282][ T6338] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.157: Unimplemented hash flags: 0x0001 [ 118.456686][ T6338] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.157: Corrupt directory, running e2fsck is recommended [ 118.507117][ T6336] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.157: Unimplemented hash flags: 0x0001 [ 118.535567][ T6336] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.157: Corrupt directory, running e2fsck is recommended [ 118.597488][ T6336] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.157: path /35/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 118.878816][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.824796][ T6357] loop1: detected capacity change from 0 to 1024 [ 121.961615][ T6361] loop0: detected capacity change from 0 to 1024 [ 123.108453][ T147] hfsplus: b-tree write err: -5, ino 25 [ 123.179293][ T147] hfsplus: b-tree write err: -5, ino 4 [ 123.195856][ T147] hfsplus: b-tree write err: -5, ino 2 [ 124.638857][ T6390] loop2: detected capacity change from 0 to 512 [ 124.687106][ T6390] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.825482][ T6390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.862014][ T6390] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.001586][ T6403] smc: net device lo applied user defined pnetid SYZ0 [ 125.055008][ T6404] tipc: Started in network mode [ 125.069794][ T6404] tipc: Node identity 2007ff, cluster identity 4711 [ 125.077473][ T6404] tipc: Node number set to 2099199 [ 125.367406][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.298888][ T6440] loop2: detected capacity change from 0 to 128 [ 128.383537][ T6438] ip6erspan0: entered allmulticast mode [ 128.477275][ T6444] netlink: 'syz.3.187': attribute type 1 has an invalid length. [ 128.477320][ T6445] syz.2.184: attempt to access beyond end of device [ 128.477320][ T6445] loop2: rw=2049, sector=145, nr_sectors = 528 limit=128 [ 128.541410][ T6444] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.756968][ T6440] syz.2.184: attempt to access beyond end of device [ 128.756968][ T6440] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 128.819222][ T6445] syz.2.184: attempt to access beyond end of device [ 128.819222][ T6445] loop2: rw=0, sector=150, nr_sectors = 1 limit=128 [ 128.840068][ T6444] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.856681][ T6444] bond2: (slave ip6gre0): The slave device specified does not support setting the MAC address [ 128.870459][ T6444] bond2: (slave ip6gre0): Error -95 calling set_mac_address [ 128.883807][ T6447] bond2: entered promiscuous mode [ 128.893972][ T6447] bond2: entered allmulticast mode [ 128.901178][ T6440] syz.2.184: attempt to access beyond end of device [ 128.901178][ T6440] loop2: rw=0, sector=145, nr_sectors = 1 limit=128 [ 128.930952][ T6440] Buffer I/O error on dev loop2, logical block 145, async page read [ 128.973875][ T6440] syz.2.184: attempt to access beyond end of device [ 128.973875][ T6440] loop2: rw=0, sector=146, nr_sectors = 1 limit=128 [ 129.003861][ T6440] Buffer I/O error on dev loop2, logical block 146, async page read [ 129.022326][ T6440] syz.2.184: attempt to access beyond end of device [ 129.022326][ T6440] loop2: rw=0, sector=147, nr_sectors = 1 limit=128 [ 129.054078][ T6440] Buffer I/O error on dev loop2, logical block 147, async page read [ 129.094996][ T6440] syz.2.184: attempt to access beyond end of device [ 129.094996][ T6440] loop2: rw=0, sector=148, nr_sectors = 1 limit=128 [ 129.144385][ T6440] Buffer I/O error on dev loop2, logical block 148, async page read [ 129.152515][ T6440] syz.2.184: attempt to access beyond end of device [ 129.152515][ T6440] loop2: rw=0, sector=149, nr_sectors = 1 limit=128 [ 129.235971][ T6440] Buffer I/O error on dev loop2, logical block 149, async page read [ 129.272517][ T6440] syz.2.184: attempt to access beyond end of device [ 129.272517][ T6440] loop2: rw=0, sector=150, nr_sectors = 1 limit=128 [ 129.330197][ T6440] Buffer I/O error on dev loop2, logical block 150, async page read [ 129.353893][ T6440] syz.2.184: attempt to access beyond end of device [ 129.353893][ T6440] loop2: rw=0, sector=151, nr_sectors = 1 limit=128 [ 129.379273][ T6442] UHID_CREATE from different security context by process 137 (syz.1.186), this is not allowed. [ 129.391005][ T6440] Buffer I/O error on dev loop2, logical block 151, async page read [ 129.410328][ T6440] Buffer I/O error on dev loop2, logical block 152, async page read [ 130.347725][ T6454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.355567][ T6454] IPv6: NLM_F_CREATE should be set when creating new route [ 130.975757][ T6455] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.984774][ T6455] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.629023][ T6455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.679350][ T6455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.221300][ T6455] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.234364][ T6455] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.258764][ T6455] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.268130][ T6455] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.953986][ T6505] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 133.007644][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.015488][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.162315][ T6505] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 133.177398][ T6505] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.187041][ T6505] usb 2-1: Product: syz [ 133.191331][ T6505] usb 2-1: Manufacturer: syz [ 133.201692][ T6505] usb 2-1: SerialNumber: syz [ 133.259493][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.266738][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.445551][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.446328][ T6505] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 133.471589][ T6505] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 133.567608][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.216973][ T6495] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.227422][ T6495] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.236410][ T6495] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.245365][ T6495] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.451941][ T6534] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 135.440070][ T6505] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 135.461802][ T6505] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 135.478379][ T6505] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 135.490505][ T6505] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 135.502848][ T6505] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 135.517470][ T6505] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 135.555998][ T6505] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 135.595539][ T6542] netlink: 'syz.1.211': attribute type 1 has an invalid length. [ 135.596391][ T6505] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 135.645128][ T6505] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 135.664019][ T6547] loop0: detected capacity change from 0 to 8 [ 135.682609][ T6505] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 135.723991][ T6547] SQUASHFS error: lzo decompression failed, data probably corrupt [ 135.728603][ T6552] overlayfs: failed to clone upperpath [ 135.731888][ T6547] SQUASHFS error: Failed to read block 0x91: -5 [ 135.752170][ T6547] SQUASHFS error: Unable to read metadata cache entry [8f] [ 135.766084][ T6505] lan78xx: probe of 2-1:1.0 failed with error -71 [ 135.802076][ T6505] usb 2-1: USB disconnect, device number 4 [ 135.853782][ T6547] SQUASHFS error: Unable to read inode 0x11f [ 136.861924][ T27] audit: type=1326 audit(1785309249.027:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bcb9de99 code=0x7ffc0000 [ 136.935884][ T6542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.991642][ T27] audit: type=1326 audit(1785309249.067:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bcb9de99 code=0x7ffc0000 [ 137.015760][ T27] audit: type=1326 audit(1785309249.067:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bcb9de99 code=0x7ffc0000 [ 137.040699][ T27] audit: type=1326 audit(1785309249.077:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f77bcb9de99 code=0x7ffc0000 [ 137.075566][ T27] audit: type=1326 audit(1785309249.077:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bcb9de99 code=0x7ffc0000 [ 137.099307][ T6542] bridge1: entered promiscuous mode [ 137.105904][ T6542] bond1: (slave bridge1): making interface the new active one [ 137.131263][ T6542] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 137.145911][ T27] audit: type=1326 audit(1785309249.077:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bcb9de99 code=0x7ffc0000 [ 137.216238][ T27] audit: type=1326 audit(1785309249.077:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bcb9de99 code=0x7ffc0000 [ 137.283733][ T27] audit: type=1326 audit(1785309249.077:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f77bcb9de99 code=0x7ffc0000 [ 137.309360][ T27] audit: type=1326 audit(1785309249.077:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bcb9de99 code=0x7ffc0000 [ 137.347544][ T27] audit: type=1326 audit(1785309249.077:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bcb9de99 code=0x7ffc0000 [ 139.508533][ T6595] xt_TCPMSS: Only works on TCP SYN packets [ 146.804170][ T6612] Bluetooth: MGMT ver 1.22 [ 146.835089][ T6631] loop2: detected capacity change from 0 to 512 [ 146.942735][ T6631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.973951][ T6631] ext4 filesystem being mounted at /50/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.430880][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.471021][ T5775] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 147.499052][ T5775] EXT4-fs error (device loop2): ext4_quota_off:7237: inode #4: comm syz-executor: mark_inode_dirty error [ 147.511737][ T5775] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 147.535415][ T5775] EXT4-fs error (device loop2): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 147.772567][ T6645] loop2: detected capacity change from 0 to 128 [ 147.839916][ T6645] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.941688][ T6645] ext4 filesystem being mounted at /51/file1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.115125][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.332157][ T6660] netlink: 16 bytes leftover after parsing attributes in process `syz.3.249'. [ 149.595202][ T6662] loop1: detected capacity change from 0 to 8192 [ 149.675014][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 149.675031][ T27] audit: type=1800 audit(1785309261.837:19): pid=6662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.250" name="file1" dev="loop1" ino=1048596 res=0 errno=0 [ 151.927819][ T6685] loop1: detected capacity change from 0 to 128 [ 151.962541][ T6685] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 153.343640][ C0] sched: RT throttling activated [ 153.608841][ T6685] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.674155][ T6685] ext2 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.416790][ T5772] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.757443][ T6710] loop1: detected capacity change from 0 to 4096 [ 154.790342][ T6710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.208177][ T6714] xt_CONNSECMARK: invalid mode: 66 [ 156.109347][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.377565][ T6722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.267'. [ 158.584479][ T6740] team0: Port device bridge0 added [ 158.625205][ T6740] bond2: left promiscuous mode [ 159.097513][ T6751] veth0_vlan: entered allmulticast mode [ 159.110244][ T6751] xt_hashlimit: max too large, truncated to 1048576 [ 159.139853][ T6751] : renamed from vlan0 [ 160.590922][ T6776] syz.0.291 uses obsolete (PF_INET,SOCK_PACKET) [ 160.994658][ T6788] syzkaller0: entered promiscuous mode [ 161.000231][ T6788] syzkaller0: entered allmulticast mode [ 162.141182][ T6805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.290'. [ 162.150291][ T6805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.290'. [ 162.159249][ T6805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.290'. [ 162.168185][ T6805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.290'. [ 162.177555][ T6805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.290'. [ 162.186635][ T6805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.290'. [ 162.195567][ T6805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.290'. [ 162.204512][ T6805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.290'. [ 162.214042][ T6805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.290'. [ 167.220995][ T5084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.231434][ T5084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.241852][ T5084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.250358][ T5084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.259199][ T5084] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 167.267027][ T5084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.371131][ T5775] bridge0: port 3(syz_tun) entered disabled state [ 167.452941][ T5775] syz_tun (unregistering): left allmulticast mode [ 167.472654][ T5775] syz_tun (unregistering): left promiscuous mode [ 168.326508][ T6852] xt_connbytes: Forcing CT accounting to be enabled [ 168.340064][ T6852] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 168.352065][ T6852] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 168.921425][ T5775] bridge0: port 3(syz_tun) entered disabled state [ 169.102131][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.343305][ T5785] Bluetooth: hci4: command tx timeout [ 169.611753][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.043001][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.636687][ T5785] Bluetooth: hci4: command tx timeout [ 171.705691][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.909571][ T6839] chnl_net:caif_netlink_parms(): no params data found [ 172.654375][ T6871] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 173.653743][ T5785] Bluetooth: hci4: command tx timeout [ 173.683480][ T12] tipc: Left network mode [ 174.004023][ T6839] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.011248][ T6839] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.054084][ T6839] bridge_slave_0: entered allmulticast mode [ 174.061643][ T6839] bridge_slave_0: entered promiscuous mode [ 174.096621][ T6839] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.123249][ T6839] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.159973][ T6839] bridge_slave_1: entered allmulticast mode [ 174.187008][ T6839] bridge_slave_1: entered promiscuous mode [ 174.666777][ T6839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.664482][ T6839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.734031][ T5785] Bluetooth: hci4: command tx timeout [ 175.830915][ T6839] team0: Port device team_slave_0 added [ 175.972231][ T6839] team0: Port device team_slave_1 added [ 176.136046][ T6839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.143092][ T6839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.177265][ T6839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.228615][ T6917] fuse: Bad value for 'fd' [ 176.260021][ T6839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.286155][ T6839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.351914][ T6839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.161845][ T6839] hsr_slave_0: entered promiscuous mode [ 179.183409][ T6839] hsr_slave_1: entered promiscuous mode [ 179.190119][ T6839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.213185][ T6839] Cannot create hsr debugfs directory [ 179.522233][ T6929] netlink: 'syz.1.315': attribute type 1 has an invalid length. [ 179.910772][ T6929] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.014375][ T6931] veth3: entered allmulticast mode [ 180.052213][ T6931] bond3: (slave veth3): Enslaving as an active interface with a down link [ 180.263463][ T6933] bond3: entered promiscuous mode [ 180.281180][ T6933] bond3: entered allmulticast mode [ 181.051236][ T6930] macvlan2: entered promiscuous mode [ 181.100665][ T6930] macvlan2: entered allmulticast mode [ 181.115586][ T6930] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 181.572886][ T12] hsr_slave_0: left promiscuous mode [ 181.611847][ T12] hsr_slave_1: left promiscuous mode [ 181.640340][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.667472][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.689981][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.698272][ T12] bridge_slave_1: left allmulticast mode [ 181.704107][ T12] bridge_slave_1: left promiscuous mode [ 181.711745][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.727444][ T12] bridge_slave_0: left allmulticast mode [ 181.733262][ T12] bridge_slave_0: left promiscuous mode [ 181.740220][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.261953][ T12] veth1_macvtap: left promiscuous mode [ 182.412500][ T12] veth0_macvtap: left promiscuous mode [ 182.495223][ T12] veth1_vlan: left promiscuous mode [ 182.552798][ T12] veth0_vlan: left promiscuous mode [ 184.953432][ T12] team0 (unregistering): Port device team_slave_1 removed [ 185.768477][ T12] team0 (unregistering): Port device team_slave_0 removed [ 185.887873][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.966840][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.352061][ T12] bond0 (unregistering): Released all slaves [ 189.950610][ T7002] __nla_validate_parse: 141 callbacks suppressed [ 189.950630][ T7002] netlink: 64 bytes leftover after parsing attributes in process `syz.3.328'. [ 189.992540][ T6839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 190.136805][ T6839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 190.252846][ T6839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 190.317331][ T6839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 190.603981][ T6839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.668397][ T6839] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.478092][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.604984][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.613155][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.721024][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.728296][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.827560][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.918580][ T7029] syzkaller0: entered promiscuous mode [ 191.940019][ T7029] syzkaller0: entered allmulticast mode [ 192.015851][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.028507][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.037911][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.047406][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.055880][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 192.064075][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.085272][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.322667][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.276968][ T5084] Bluetooth: hci0: command tx timeout [ 196.312730][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.319682][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.753010][ T6839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.304011][ T5785] Bluetooth: hci0: command tx timeout [ 198.727648][ T7036] chnl_net:caif_netlink_parms(): no params data found [ 199.216150][ T7086] netlink: 'syz.0.344': attribute type 1 has an invalid length. [ 199.341305][ T7097] o2cb: This node has not been configured. [ 199.347678][ T7097] o2cb: Cluster check failed. Fix errors before retrying. [ 199.355203][ T7097] (syz.3.343,7097,1):user_dlm_register:674 ERROR: status = -22 [ 199.362854][ T7097] (syz.3.343,7097,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 199.895362][ T7090] veth3: entered allmulticast mode [ 199.917567][ T7090] bond1: (slave veth3): Enslaving as an active interface with a down link [ 199.988753][ T7095] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 200.195086][ T7081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.344'. [ 200.218207][ T7081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.371755][ T7036] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.383811][ T5787] Bluetooth: hci0: command tx timeout [ 200.398648][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.409709][ T7036] bridge_slave_0: entered allmulticast mode [ 200.441969][ T7036] bridge_slave_0: entered promiscuous mode [ 200.561578][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.589890][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.613904][ T7036] bridge_slave_1: entered allmulticast mode [ 200.632329][ T7036] bridge_slave_1: entered promiscuous mode [ 200.924790][ T7036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.028248][ T7036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.303586][ T7036] team0: Port device team_slave_0 added [ 202.304427][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 202.304447][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 202.325526][ T7036] team0: Port device team_slave_1 added [ 203.300367][ T5084] Bluetooth: hci0: command tx timeout [ 203.356216][ T6839] veth0_vlan: entered promiscuous mode [ 203.484693][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.491729][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.569617][ T7036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.603965][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.623087][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.661973][ T7036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.721452][ T6839] veth1_vlan: entered promiscuous mode [ 203.860901][ T7141] syzkaller0: entered promiscuous mode [ 203.873757][ T7141] syzkaller0: entered allmulticast mode [ 205.715241][ T7169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.412368][ T7036] hsr_slave_0: entered promiscuous mode [ 208.424743][ T7036] hsr_slave_1: entered promiscuous mode [ 208.443731][ T7036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.451389][ T7036] Cannot create hsr debugfs directory [ 208.546185][ T12] hsr_slave_0: left promiscuous mode [ 208.552583][ T12] hsr_slave_1: left promiscuous mode [ 208.571519][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.695525][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.706805][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.715038][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.723011][ T12] bridge_slave_1: left allmulticast mode [ 208.733705][ T12] bridge_slave_1: left promiscuous mode [ 209.229816][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.292326][ T12] bridge_slave_0: left allmulticast mode [ 209.303413][ T12] bridge_slave_0: left promiscuous mode [ 209.309961][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.580875][ T12] veth1_macvtap: left promiscuous mode [ 209.586837][ T12] veth0_macvtap: left promiscuous mode [ 209.592550][ T12] veth1_vlan: left promiscuous mode [ 209.598869][ T12] veth0_vlan: left promiscuous mode [ 209.826548][ T12] bond3 (unregistering): (slave veth3): Releasing active interface [ 210.607405][ T7193] overlayfs: failed to clone upperpath [ 213.565282][ T12] bond3 (unregistering): Released all slaves [ 214.493382][ T12] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 214.576989][ T12] bond2 (unregistering): Released all slaves [ 214.989644][ T12] bond1 (unregistering): Released all slaves [ 215.907522][ T12] team0 (unregistering): Port device team_slave_1 removed [ 215.975916][ T12] team0 (unregistering): Port device team_slave_0 removed [ 216.036768][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.101230][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.670209][ T12] bond0 (unregistering): Released all slaves [ 218.147063][ T6839] veth0_macvtap: entered promiscuous mode [ 218.161839][ T6839] veth1_macvtap: entered promiscuous mode [ 218.858883][ T6839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.902697][ T6839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.955619][ T6839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.980324][ T6839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.997879][ T6839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.011813][ T6839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.361604][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.379498][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.460070][ T7036] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 219.487356][ T7036] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 219.542144][ T7240] syzkaller0: entered promiscuous mode [ 219.558286][ T7240] syzkaller0: entered allmulticast mode [ 219.577647][ T7036] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 219.596811][ T7036] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 219.618790][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.647951][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.302410][ T7036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.445700][ T7036] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.461061][ T4834] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.468339][ T4834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.129443][ T4834] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.136733][ T4834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.423799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 223.782972][ T7036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.289242][ T7301] syzkaller0: entered promiscuous mode [ 224.325028][ T7301] syzkaller0: entered allmulticast mode [ 224.752651][ T7036] veth0_vlan: entered promiscuous mode [ 224.814981][ T7036] veth1_vlan: entered promiscuous mode [ 225.032711][ T7036] veth0_macvtap: entered promiscuous mode [ 225.155792][ T7036] veth1_macvtap: entered promiscuous mode [ 225.309632][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.366622][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.422443][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.520782][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.218901][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.238153][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.251990][ T7036] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.261583][ T7036] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.273118][ T7036] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.282480][ T7036] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.493816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 227.711363][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.917619][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.271803][ T4834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.323914][ T4834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.380305][ T7338] loop0: detected capacity change from 0 to 2048 [ 228.491583][ T7338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.777144][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.473127][ T6503] IPVS: starting estimator thread 0... [ 231.576574][ T7361] IPVS: using max 15 ests per chain, 36000 per kthread [ 232.073638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 235.072394][ T7377] loop0: detected capacity change from 0 to 1024 [ 235.313743][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 235.321653][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 235.387386][ T7387] hfsplus: request for non-existent node 33423360 in B*Tree [ 235.436513][ T7387] hfsplus: request for non-existent node 33423360 in B*Tree [ 235.491336][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 235.506540][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 235.537141][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 235.556965][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 235.576777][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 235.603865][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 235.696814][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 235.709876][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 235.727798][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 235.740068][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 235.794060][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 235.826471][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 235.956588][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 235.983792][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 236.015047][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 236.031754][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 236.128548][ T7387] hfsplus: request for non-existent node 33423360 in B*Tree [ 236.167347][ T7387] hfsplus: request for non-existent node 33423360 in B*Tree [ 236.250052][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 236.258982][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 236.295111][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 236.303144][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 236.346206][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 236.368440][ T7377] hfsplus: request for non-existent node 33423360 in B*Tree [ 239.414104][ T7424] loop4: detected capacity change from 0 to 128 [ 239.499376][ T7424] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.572088][ T7424] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 240.620953][ T6839] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 244.816922][ T7478] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 244.816922][ T7478] The task syz.4.411 (7478) triggered the difference, watch for misbehavior. [ 254.704108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 255.821959][ T7558] overlayfs: invalid redirect (./bus) [ 256.180602][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.189556][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.483961][ T7594] loop0: detected capacity change from 0 to 128 [ 260.816773][ T7604] loop5: detected capacity change from 0 to 512 [ 261.008592][ T7604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.277962][ T7604] ext4 filesystem being mounted at /13/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.430337][ T7036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.302484][ T7641] ubi16: attaching mtd0 [ 265.314102][ T7641] ubi16: scanning is finished [ 265.318868][ T7641] ubi16: empty MTD device detected [ 265.338257][ T7642] loop4: detected capacity change from 0 to 2048 [ 265.367377][ T7641] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 265.375298][ T7641] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 265.382793][ T7641] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 265.390007][ T7641] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 265.397919][ T7641] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 265.405168][ T7641] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 265.413829][ T7641] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 903729679 [ 265.424105][ T7641] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 265.429914][ T7642] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.436225][ T7644] ubi16: background thread "ubi_bgt16d" started, PID 7644 [ 265.766220][ T7640] syz_tun: entered allmulticast mode [ 265.861542][ T7640] syz.0.440(7640): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 268.734796][ T7672] tipc: Started in network mode [ 268.753279][ T7672] tipc: Node identity 76ac5de36464, cluster identity 4711 [ 268.791494][ T7672] tipc: Enabled bearer , priority 0 [ 268.852676][ T7675] syzkaller0: entered promiscuous mode [ 268.880363][ T7675] syzkaller0: entered allmulticast mode [ 268.889206][ T7678] loop0: detected capacity change from 0 to 512 [ 269.014057][ T7678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.034792][ T7672] tipc: Resetting bearer [ 269.041864][ T7678] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 270.574640][ T6490] tipc: Node number set to 315121123 [ 270.651299][ T7665] tipc: Resetting bearer [ 270.762667][ T7665] tipc: Disabling bearer [ 270.783210][ T27] audit: type=1800 audit(1785309382.937:20): pid=7691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.448" name="bus" dev="loop0" ino=19 res=0 errno=0 [ 270.845051][ T7696] tipc: Enabling of bearer rejected, failed to enable media [ 270.947743][ T7678] loop0: detected capacity change from 512 to 0 [ 271.092950][ T7678] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.127323][ T7678] bio_check_eod: 1 callbacks suppressed [ 271.127341][ T7678] syz.0.448: attempt to access beyond end of device [ 271.127341][ T7678] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 271.188668][ T7678] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 271.207073][ T7678] EXT4-fs (loop0): I/O error while writing superblock [ 271.283708][ T7680] kmmpd-loop0: attempt to access beyond end of device [ 271.283708][ T7680] loop0: rw=14337, sector=48, nr_sectors = 4 limit=0 [ 271.325102][ T7680] Buffer I/O error on dev loop0, logical block 12, lost sync page write [ 272.759181][ T7712] se_device not configured yet, cannot port link [ 274.120847][ T5433] veth0_vlan: left promiscuous mode [ 274.161847][ T5433] veth0_vlan: entered promiscuous mode [ 275.947488][ T7732] loop5: detected capacity change from 0 to 512 [ 275.955010][ T7732] EXT4-fs: Ignoring removed nobh option [ 275.994472][ T7732] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 276.002915][ T7732] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 276.012890][ T7732] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #13: comm syz.5.451: inode has both inline data and extents flags [ 276.026664][ T7732] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.451: couldn't read orphan inode 13 (err -117) [ 276.039757][ T7732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.627469][ T7036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.811732][ T7749] ieee802154 phy0 wpan0: encryption failed: -22 [ 277.942652][ T7750] loop5: detected capacity change from 0 to 1024 [ 284.213836][ T27] audit: type=1326 audit(1785309396.047:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.5.468" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607af9de99 code=0x7ffc0000 [ 285.178274][ T27] audit: type=1326 audit(1785309396.047:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.5.468" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607af9de99 code=0x7ffc0000 [ 285.215697][ T7806] xt_CONNSECMARK: invalid mode: 254 [ 285.302926][ T27] audit: type=1326 audit(1785309396.047:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.5.468" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607af9de99 code=0x7ffc0000 [ 285.315894][ T7813] loop5: detected capacity change from 0 to 512 [ 285.375963][ T7813] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 285.400402][ T27] audit: type=1326 audit(1785309396.047:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.5.468" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607af9de99 code=0x7ffc0000 [ 285.436105][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 285.479194][ T7813] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.471: iget: bad i_size value: 38620345925642 [ 285.512215][ T27] audit: type=1326 audit(1785309396.047:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.5.468" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f607af9de99 code=0x7ffc0000 [ 285.537247][ T7813] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.471: couldn't read orphan inode 15 (err -117) [ 285.587394][ T27] audit: type=1326 audit(1785309396.047:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.5.468" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607af9de99 code=0x7ffc0000 [ 285.590762][ T7813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.656016][ T27] audit: type=1326 audit(1785309396.047:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.5.468" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607af9de99 code=0x7ffc0000 [ 285.751689][ T27] audit: type=1326 audit(1785309396.047:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.5.468" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607af9de99 code=0x7ffc0000 [ 285.807262][ T27] audit: type=1326 audit(1785309396.047:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.5.468" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607af9de99 code=0x7ffc0000 [ 285.932040][ T7823] syzkaller0: entered promiscuous mode [ 285.944847][ T7823] syzkaller0: entered allmulticast mode [ 286.005033][ T27] audit: type=1326 audit(1785309396.047:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.5.468" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f607af9de99 code=0x7ffc0000 [ 287.851630][ T4834] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm kworker/u4:9: bg 0: block 5: invalid block bitmap [ 288.599869][ T4834] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 65 with error 28 [ 288.617618][ T4834] EXT4-fs (loop5): This should not happen!! Data will be lost [ 288.617618][ T4834] [ 288.655251][ T4834] EXT4-fs (loop5): Total free blocks count 0 [ 288.661332][ T4834] EXT4-fs (loop5): Free/Dirty block details [ 288.669311][ T4834] EXT4-fs (loop5): free_blocks=0 [ 288.674817][ T4834] EXT4-fs (loop5): dirty_blocks=65 [ 288.680119][ T4834] EXT4-fs (loop5): Block reservation details [ 288.686851][ T4834] EXT4-fs (loop5): i_reserved_data_blocks=65 [ 288.707814][ T7036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.286416][ T5785] Bluetooth: hci4: command 0x0406 tx timeout [ 295.856751][ T7954] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 296.954916][ T7958] netlink: 'syz.3.485': attribute type 3 has an invalid length. [ 297.081512][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.485'. [ 304.046244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 309.793182][ T8083] netlink: 'syz.5.498': attribute type 1 has an invalid length. [ 309.993364][ T8083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 310.098090][ T8084] 8021q: adding VLAN 0 to HW filter on device bond1 [ 310.209530][ T8091] ntfs3: loop4: try to read out of volume at offset 0x0 [ 310.440905][ T8084] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 310.792418][ T8084] bond1: (slave gre1): Error -95 calling set_mac_address [ 310.972988][ T8083] gretap1: entered promiscuous mode [ 311.050701][ T8083] bond1: (slave gretap1): making interface the new active one [ 311.173429][ T8083] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 311.271728][ T8094] syzkaller0: entered promiscuous mode [ 311.384224][ T8094] syzkaller0: entered allmulticast mode [ 314.173657][ T42] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 314.403881][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 314.414676][ T42] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.454468][ T42] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 314.463537][ T42] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 314.524008][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.544475][ T42] usb 5-1: config 0 descriptor?? [ 314.617302][ T5084] Bluetooth: hci0: command 0x0406 tx timeout [ 317.466368][ T6490] usb 5-1: USB disconnect, device number 2 [ 317.580783][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.589232][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.959152][ T8143] syz.5.521 (8143): drop_caches: 2 [ 320.693660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 324.833950][ T6505] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 325.123870][ T6505] usb 6-1: Using ep0 maxpacket: 32 [ 325.178544][ T6505] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.278072][ T6505] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 325.357957][ T6505] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 325.513957][ T6505] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.576340][ T6505] usb 6-1: config 0 descriptor?? [ 328.176177][ T6481] usb 6-1: USB disconnect, device number 2 [ 329.782437][ T5835] libceph: connect (1)[c::]:6789 error -101 [ 329.889509][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 329.989466][ T8247] ceph: No mds server is up or the cluster is laggy [ 335.964011][ T8300] netlink: 'syz.4.548': attribute type 1 has an invalid length. [ 336.118480][ T8300] 8021q: adding VLAN 0 to HW filter on device bond1 [ 337.114311][ T8301] veth3: entered allmulticast mode [ 337.145597][ T8301] bond1: (slave veth3): Enslaving as an active interface with a down link [ 337.402024][ T8304] bond1: entered promiscuous mode [ 337.432209][ T8304] bond1: entered allmulticast mode [ 337.525007][ T8300] macvlan2: entered promiscuous mode [ 337.530396][ T8300] macvlan2: entered allmulticast mode [ 337.625303][ T8300] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 338.089558][ T8317] loop5: detected capacity change from 0 to 2048 [ 338.100933][ T8317] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 338.149663][ T8317] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 338.243510][ T8322] syzkaller0: entered promiscuous mode [ 338.249621][ T8322] syzkaller0: entered allmulticast mode [ 338.299135][ T8322] tipc: Enabled bearer , priority 0 [ 338.413070][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.550'. [ 338.489160][ T8322] tipc: Resetting bearer [ 339.002889][ T8321] tipc: Resetting bearer [ 339.251213][ T8321] tipc: Disabling bearer [ 350.745306][ T6483] libceph: connect (1)[c::]:6789 error -101 [ 350.751827][ T6483] libceph: mon0 (1)[c::]:6789 connect error [ 350.980878][ T5785] Bluetooth: hci1: Malformed LE Event: 0x1b [ 351.016408][ T6483] libceph: connect (1)[c::]:6789 error -101 [ 351.025165][ T6483] libceph: mon0 (1)[c::]:6789 connect error [ 351.546887][ T8427] ceph: No mds server is up or the cluster is laggy [ 351.556527][ T6483] libceph: connect (1)[c::]:6789 error -101 [ 351.562626][ T6483] libceph: mon0 (1)[c::]:6789 connect error [ 354.564910][ T8474] o2cb: This node has not been configured. [ 354.570841][ T8474] o2cb: Cluster check failed. Fix errors before retrying. [ 354.578229][ T8474] (syz.5.572,8474,1):user_dlm_register:674 ERROR: status = -22 [ 354.585854][ T8474] (syz.5.572,8474,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 360.172298][ T6481] libceph: connect (1)[c::]:6789 error -101 [ 360.196305][ T6481] libceph: mon0 (1)[c::]:6789 connect error [ 360.872979][ T5835] libceph: connect (1)[c::]:6789 error -101 [ 360.879500][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 361.020427][ T8510] ceph: No mds server is up or the cluster is laggy [ 361.074476][ T8524] syzkaller0: entered promiscuous mode [ 361.080305][ T8524] syzkaller0: entered allmulticast mode [ 361.186538][ T5785] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 361.514459][ T27] kauditd_printk_skb: 35 callbacks suppressed [ 361.514479][ T27] audit: type=1107 audit(1785309473.677:66): pid=8534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 361.514479][ T27] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 361.514479][ T27] Вh0VZ2' [ 361.848282][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.601'. [ 362.023845][ T6481] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 362.331449][ T6481] usb 5-1: Using ep0 maxpacket: 32 [ 363.207776][ T6481] usb 5-1: unable to get BOS descriptor or descriptor too short [ 363.219227][ T6481] usb 5-1: too many endpoints for config 1 interface 2 altsetting 1: 128, using maximum allowed: 30 [ 363.230356][ T6481] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 363.241848][ T6481] usb 5-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 363.315679][ T6481] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 363.332274][ T6481] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.340978][ T6481] usb 5-1: Product: syz [ 363.345345][ T6481] usb 5-1: Manufacturer: 庢៕ꍳ뽢㜩ૢå둦뤧찻閜㿆豙⃒Ì [ 363.355203][ T6481] usb 5-1: SerialNumber: syz [ 366.203587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 367.294373][ T6481] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 367.343902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 369.176887][ T8602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.604'. [ 369.480713][ T6481] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 369.578971][ T6481] usb 5-1: USB disconnect, device number 3 [ 369.582664][ T8479] udevd[8479]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.828035][ T8609] syzkaller0: entered promiscuous mode [ 370.037996][ T8609] syzkaller0: entered allmulticast mode [ 370.566673][ T8615] tipc: Started in network mode [ 370.584424][ T8615] tipc: Node identity 1ae1027b217c, cluster identity 4711 [ 370.975881][ T8615] tipc: Enabled bearer , priority 0 [ 371.585407][ T8607] tipc: Resetting bearer [ 372.502725][ T8607] tipc: Disabling bearer [ 372.636627][ T42] tipc: Node number set to 1000145531 [ 372.782405][ T5785] Bluetooth: hci4: Malformed LE Event: 0x1b [ 376.484436][ T8665] fuse: Bad value for 'fd' [ 377.453052][ T8668] trusted_key: syz.0.620 sent an empty control message without MSG_MORE. [ 379.150563][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.157132][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.617521][ T8708] overlayfs: failed to clone upperpath [ 384.030350][ T8720] loop4: detected capacity change from 0 to 2048 [ 384.106354][ T8720] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 384.192314][ T27] audit: type=1800 audit(1785309496.357:67): pid=8720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.628" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 385.386964][ T8734] overlayfs: missing 'lowerdir' [ 387.863310][ T8775] netlink: 52 bytes leftover after parsing attributes in process `syz.4.637'. [ 389.442259][ T8775] Trying to write to read-only block-device nullb0 [ 389.944056][ T8786] syzkaller0: entered promiscuous mode [ 389.961908][ T8786] syzkaller0: entered allmulticast mode [ 391.492039][ T8808] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 392.860639][ T8823] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 392.882006][ T8823] VFS: Can't find a romfs filesystem on dev nullb0. [ 392.882006][ T8823] [ 393.143920][ T27] audit: type=1107 audit(1785309505.257:68): pid=8826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 393.143920][ T27] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 393.143920][ T27] Вh0VZ2' [ 393.964016][ T8848] UDC core: g1: couldn't find an available UDC or it's busy [ 397.450755][ T27] audit: type=1107 audit(1785309509.617:69): pid=8864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ti1[Po [ 397.450755][ T27] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 397.450755][ T27] Вh0VZ2' [ 398.992592][ T6483] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 399.223920][ T6483] usb 6-1: Using ep0 maxpacket: 32 [ 401.173571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 401.271203][ T6483] usb 6-1: device descriptor read/all, error -71 [ 402.296359][ T8907] overlayfs: failed to clone upperpath [ 406.531357][ T8944] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 408.494498][ T27] audit: type=1326 audit(1785309520.577:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.3.675" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd18f9de99 code=0x7ffc0000 [ 409.470620][ T27] audit: type=1326 audit(1785309520.577:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.3.675" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd18f9de99 code=0x7ffc0000 [ 410.365170][ T8968] syz.0.677 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 411.364119][ T27] audit: type=1326 audit(1785309520.687:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.3.675" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7efd18f9de99 code=0x7ffc0000 [ 411.418322][ T27] audit: type=1326 audit(1785309520.687:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.3.675" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd18f9de99 code=0x7ffc0000 [ 411.451852][ T27] audit: type=1326 audit(1785309520.687:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.3.675" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd18f9de99 code=0x7ffc0000 [ 411.559430][ T27] audit: type=1326 audit(1785309520.687:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.3.675" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd18f9de99 code=0x7ffc0000 [ 411.593978][ T27] audit: type=1326 audit(1785309520.687:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.3.675" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd18f9de99 code=0x7ffc0000 [ 411.669246][ T27] audit: type=1326 audit(1785309520.687:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.3.675" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd18f9de99 code=0x7ffc0000 [ 411.699267][ T27] audit: type=1326 audit(1785309520.697:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.3.675" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efd18f9de99 code=0x7ffc0000 [ 411.729254][ T27] audit: type=1326 audit(1785309520.697:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.3.675" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd18f9de99 code=0x7ffc0000 [ 411.957052][ T8986] syz_tun: entered allmulticast mode [ 422.854658][ T6483] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 424.000404][ T6483] usb 5-1: device descriptor read/all, error -71 [ 424.039800][ T9092] loop5: detected capacity change from 0 to 512 [ 424.074816][ T9092] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 424.109113][ T9092] EXT4-fs (loop5): DAX unsupported by block device. [ 433.422242][ T9172] loop4: detected capacity change from 0 to 256 [ 433.640966][ T9177] xt_CONNSECMARK: invalid mode: 254 [ 433.895766][ T9181] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 436.873629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 437.539506][ T9216] loop5: detected capacity change from 0 to 1024 [ 439.646307][ T9231] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 439.672561][ T9231] CIFS mount error: No usable UNC path provided in device string! [ 439.672561][ T9231] [ 439.682933][ T9231] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 439.742751][ T9229] syzkaller1: entered promiscuous mode [ 439.754800][ T9229] syzkaller1: entered allmulticast mode [ 439.783773][ T9229] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 439.828151][ T9229] xt_CONNSECMARK: invalid mode: 254 [ 440.618929][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.625780][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.543715][ T9269] netlink: 32 bytes leftover after parsing attributes in process `syz.5.730'. [ 450.267594][ T9305] syzkaller1: entered promiscuous mode [ 450.293890][ T9305] syzkaller1: entered allmulticast mode [ 450.439918][ T9305] xt_CONNSECMARK: invalid mode: 254 [ 450.713267][ T9320] IPVS: Error connecting to the multicast addr [ 451.738199][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.742'. [ 452.006108][ T9327] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.013822][ T9327] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.642995][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.743'. [ 455.992493][ T9348] loop5: detected capacity change from 0 to 16 [ 456.178876][ T9348] erofs: (device loop5): mounted with root inode @ nid 36. [ 456.298224][ T6505] IPVS: starting estimator thread 0... [ 457.255178][ T9354] netlink: 'syz.3.749': attribute type 16 has an invalid length. [ 457.284096][ T9331] syz.5.744: attempt to access beyond end of device [ 457.284096][ T9331] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 457.303393][ T9354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.749'. [ 457.323715][ T9353] IPVS: using max 17 ests per chain, 40800 per kthread [ 457.519058][ T9331] syz.5.744: attempt to access beyond end of device [ 457.519058][ T9331] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 457.729563][ T9331] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 457.804865][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 457.804884][ T27] audit: type=1800 audit(1785309569.967:93): pid=9331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.744" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 458.175173][ T9331] syz.5.744 (9331) used greatest stack depth: 18512 bytes left [ 460.535241][ T9372] loop4: detected capacity change from 0 to 1024 [ 462.502878][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.756'. [ 462.604366][ T5785] Bluetooth: hci4: unexpected event 0x03 length: 12 > 11 [ 464.341689][ T9402] loop4: detected capacity change from 0 to 512 [ 464.414227][ T9402] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 464.487236][ T9402] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 464.576675][ T9402] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.761: Corrupt directory, running e2fsck is recommended [ 464.633320][ T9402] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 464.646965][ T9402] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.761: corrupted in-inode xattr: e_name out of bounds [ 464.663422][ T9402] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.761: couldn't read orphan inode 15 (err -117) [ 464.683025][ T9402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.429332][ T9408] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 467.424593][ T6839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.902568][ T9427] loop4: detected capacity change from 0 to 4096 [ 467.926831][ T9427] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 468.354584][ T9427] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 468.433865][ T9427] ntfs3: loop4: failed to convert "c46c" to cp936 [ 470.433878][ T9440] netlink: 28 bytes leftover after parsing attributes in process `syz.4.770'. [ 474.434373][ T6497] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 474.665506][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 474.724074][ T5785] Bluetooth: hci2: unexpected event 0x03 length: 12 > 11 [ 475.493925][ T6497] usb 5-1: device descriptor read/all, error -71 [ 478.770938][ T9496] IPVS: Unknown mcast interface: vcan0 [ 479.469133][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.783'. [ 479.573292][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.783'. [ 479.661433][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.783'. [ 479.750419][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.783'. [ 479.868813][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.783'. [ 481.233390][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.785'. [ 481.254854][ T9516] autofs4:pid:9516:autofs_fill_super: called with bogus options [ 481.284858][ T5785] Bluetooth: hci1: unexpected event 0x03 length: 12 > 11 [ 484.124082][ T9544] fuse: Unknown parameter '0xffffffffffffffff' [ 486.693652][ T9562] capability: warning: `syz.5.797' uses deprecated v2 capabilities in a way that may be insecure [ 489.497490][ T9590] netlink: 1 bytes leftover after parsing attributes in process `syz.3.805'. [ 494.826184][ T9618] loop4: detected capacity change from 0 to 128 [ 499.545467][ T9657] loop9: detected capacity change from 0 to 7 [ 499.577814][ T9657] Dev loop9: unable to read RDB block 7 [ 499.603365][ T9657] loop9: unable to read partition table [ 499.629754][ T9657] loop9: partition table beyond EOD, truncated [ 499.655576][ T9657] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 501.530637][ T9676] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 501.554736][ T9676] overlayfs: missing 'lowerdir' [ 502.144235][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.150630][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.629401][ T9682] overlay: ./file0 is not a directory [ 510.080545][ T9733] syz.5.844: attempt to access beyond end of device [ 510.080545][ T9733] loop5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 510.094667][ T9733] syz.5.844: attempt to access beyond end of device [ 510.094667][ T9733] loop5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 510.108006][ T9733] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 510.118662][ T9733] syz.5.844: attempt to access beyond end of device [ 510.118662][ T9733] loop5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 510.131893][ T9733] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 510.141637][ T9733] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 510.149396][ T9733] UDF-fs: Scanning with blocksize 512 failed [ 510.157740][ T9733] syz.5.844: attempt to access beyond end of device [ 510.157740][ T9733] loop5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 510.171008][ T9733] syz.5.844: attempt to access beyond end of device [ 510.171008][ T9733] loop5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 510.184648][ T9733] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 510.195427][ T9733] syz.5.844: attempt to access beyond end of device [ 510.195427][ T9733] loop5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 510.208523][ T9733] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 510.218360][ T9733] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 510.226193][ T9733] UDF-fs: Scanning with blocksize 1024 failed [ 510.233043][ T9733] syz.5.844: attempt to access beyond end of device [ 510.233043][ T9733] loop5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 510.247346][ T9733] syz.5.844: attempt to access beyond end of device [ 510.247346][ T9733] loop5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 510.260701][ T9733] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 510.270582][ T9733] syz.5.844: attempt to access beyond end of device [ 510.270582][ T9733] loop5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 510.283668][ T9733] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 510.293247][ T9733] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 510.301956][ T9733] UDF-fs: Scanning with blocksize 2048 failed [ 510.308814][ T9733] syz.5.844: attempt to access beyond end of device [ 510.308814][ T9733] loop5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 510.321874][ T9733] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 510.331691][ T9733] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 510.341375][ T9733] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 510.349183][ T9733] UDF-fs: Scanning with blocksize 4096 failed [ 510.355344][ T9733] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 514.356933][ T5835] IPVS: starting estimator thread 0... [ 514.456645][ T9752] IPVS: using max 17 ests per chain, 40800 per kthread [ 522.884771][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.859'. [ 522.894666][ T9807] bridge_slave_1: left allmulticast mode [ 522.900312][ T9807] bridge_slave_1: left promiscuous mode [ 522.906235][ T9807] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.936889][ T9807] bridge_slave_0: left allmulticast mode [ 522.942641][ T9807] bridge_slave_0: left promiscuous mode [ 522.948499][ T9807] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.390603][ T9807] team0: Port device bridge0 removed [ 536.675212][ T9889] netlink: 'syz.5.878': attribute type 1 has an invalid length. [ 538.466736][ T9903] gretap2: entered allmulticast mode [ 542.010528][ T5785] Bluetooth: hci0: unexpected event for opcode 0x200b [ 543.805456][ T9942] loop4: detected capacity change from 0 to 4096 [ 544.330939][ T9948] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 546.135183][ T9963] Device name cannot be null; rc = [-22] [ 546.282351][ T9959] 9pnet_fd: Insufficient options for proto=fd [ 547.874582][ T9984] binder: 9980:9984 ioctl c0306201 0 returned -14 [ 548.938475][ T9968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.898'. [ 552.047664][T10014] loop5: detected capacity change from 0 to 512 [ 552.118365][T10016] loop4: detected capacity change from 0 to 4096 [ 552.276281][ T9934] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 553.754608][T10014] EXT4-fs (loop5): Test dummy encryption mode enabled [ 553.761472][T10014] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 553.859857][T10014] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.908: bad orphan inode 131083 [ 553.900088][T10014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.245150][T10014] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.212080][T10044] netlink: 20 bytes leftover after parsing attributes in process `syz.4.913'. [ 557.256957][T10044] team0 (unregistering): Port device team_slave_0 removed [ 557.459375][T10044] team0 (unregistering): Port device team_slave_1 removed [ 560.208644][T10082] /dev/nullb0: Can't lookup blockdev [ 561.738581][T10089] tmpfs: Unknown parameter 'fscontext' [ 562.752845][T10094] loop5: detected capacity change from 0 to 256 [ 562.838204][T10094] FAT-fs (loop5): Directory bread(block 64) failed [ 562.862638][T10094] FAT-fs (loop5): Directory bread(block 65) failed [ 562.893420][T10094] FAT-fs (loop5): Directory bread(block 66) failed [ 562.902578][T10094] FAT-fs (loop5): Directory bread(block 67) failed [ 562.952176][T10094] FAT-fs (loop5): Directory bread(block 68) failed [ 563.003683][T10094] FAT-fs (loop5): Directory bread(block 69) failed [ 563.078083][T10094] FAT-fs (loop5): Directory bread(block 70) failed [ 563.103784][T10094] FAT-fs (loop5): Directory bread(block 71) failed [ 563.944516][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.950913][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.010925][T10094] FAT-fs (loop5): Directory bread(block 72) failed [ 564.034203][T10094] FAT-fs (loop5): Directory bread(block 73) failed [ 564.580725][T10111] netlink: 148 bytes leftover after parsing attributes in process `syz.5.925'. [ 564.589918][T10111] netlink: 116 bytes leftover after parsing attributes in process `syz.5.925'. [ 564.599684][T10111] netlink: 32 bytes leftover after parsing attributes in process `syz.5.925'. [ 568.209468][ T24] device offline error, dev sda, sector 803126 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 568.221620][ T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2036 starting block 100390) [ 568.235317][ T24] Buffer I/O error on device sda1, logical block 100352 [ 568.245764][ T24] device offline error, dev sda, sector 811310 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 568.256471][ T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2036 starting block 101413) [ 568.268246][ T24] Buffer I/O error on device sda1, logical block 101375 [ 568.275699][ T24] device offline error, dev sda, sector 815262 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 568.286702][ T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2036 starting block 101907) [ 568.298650][ T24] Buffer I/O error on device sda1, logical block 101869 [ 568.305749][ T24] Buffer I/O error on device sda1, logical block 101870 [ 568.312827][ T24] Buffer I/O error on device sda1, logical block 101871 [ 568.320098][ T24] Buffer I/O error on device sda1, logical block 101872 [ 568.328187][ T24] Buffer I/O error on device sda1, logical block 101873 [ 568.335389][ T24] Buffer I/O error on device sda1, logical block 101874 [ 568.343514][ T24] Buffer I/O error on device sda1, logical block 101875 [ 568.351036][ T24] Buffer I/O error on device sda1, logical block 101876 [ 568.360273][ T24] device offline error, dev sda, sector 704870 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 568.371043][ T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88108) [ 568.382799][ T24] device offline error, dev sda, sector 704942 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 568.393728][ T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88117) [ 568.405414][ T24] device offline error, dev sda, sector 704966 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 568.415908][ T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88120) [ 568.427574][ T24] device offline error, dev sda, sector 704998 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 568.438065][ T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88124) [ 568.449989][ T24] device offline error, dev sda, sector 705014 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 568.460585][ T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88126) [ 568.472341][ T24] device offline error, dev sda, sector 705046 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 568.482871][ T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88130) [ 568.494578][ T24] device offline error, dev sda, sector 705246 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 568.505138][ T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88155) [ 568.685945][ T7163] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2027, error -5) [ 568.744892][ T5100] Aborting journal on device sda1-8. [ 568.760557][T10128] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.0.935: Detected aborted journal [ 568.765460][ T24] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 568.781786][T10120] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.5.933: Detected aborted journal [ 568.792946][ T5100] JBD2: I/O error when updating journal superblock for sda1-8. [ 568.825773][ T96] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 568.836683][T10120] EXT4-fs (sda1): previous I/O error to superblock detected [ 568.857896][ T24] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 568.866445][T10128] EXT4-fs (sda1): I/O error while writing superblock [ 568.873180][T10128] EXT4-fs (sda1): Remounting filesystem read-only [ 568.879939][T10120] EXT4-fs (sda1): Remounting filesystem read-only [ 569.139517][T10131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.935'. [ 570.452421][T10126] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 571.698659][T10132] vfio-pci: probe of 0000:00:03.0 failed with error -22 [ 571.737760][T10156] loop4: detected capacity change from 0 to 256 [ 572.577811][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.947'. [ 573.624597][T10175] Device name cannot be null; rc = [-22] [ 573.786164][T10173] loop4: detected capacity change from 0 to 64 [ 573.978976][ T6502] IPVS: starting estimator thread 0... [ 574.771997][ T5785] Bluetooth: hci2: unexpected event for opcode 0x200b [ 574.788126][T10177] IPVS: using max 18 ests per chain, 43200 per kthread [ 576.219710][T10194] Bluetooth: MGMT ver 1.22 [ 578.441684][T10209] loop4: detected capacity change from 0 to 128 [ 586.351881][T10248] loop4: detected capacity change from 0 to 128 [ 588.201655][T10259] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 590.806874][T10277] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 590.816095][T10277] overlayfs: missing 'lowerdir' [ 590.878227][T10277] mmap: syz.5.967 (10277) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 591.232786][T10282] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 591.725916][T10280] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 595.298850][T10302] loop5: detected capacity change from 0 to 40427 [ 595.465524][T10302] F2FS-fs (loop5): invalid crc value [ 595.532564][T10302] F2FS-fs (loop5): Found nat_bits in checkpoint [ 596.242336][T10302] F2FS-fs (loop5): Start checkpoint disabled! [ 599.001268][T10319] hub 8-0:1.0: USB hub found [ 599.020159][T10319] hub 8-0:1.0: 1 port detected [ 599.370902][T10323] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 601.830713][ T5084] Bluetooth: hci4: unexpected event for opcode 0x2002 [ 603.263678][ T27] audit: type=1326 audit(1785309715.428:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10362 comm="syz.5.994" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607af9de99 code=0x7ffc0000 [ 603.377538][ T27] audit: type=1326 audit(1785309715.468:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10362 comm="syz.5.994" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607af9de99 code=0x7ffc0000 [ 603.553084][ T27] audit: type=1326 audit(1785309715.468:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10362 comm="syz.5.994" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607af9de99 code=0x7ffc0000 [ 603.642679][ T27] audit: type=1326 audit(1785309715.468:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10362 comm="syz.5.994" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f607af9de99 code=0x7ffc0000 [ 603.773723][ T27] audit: type=1326 audit(1785309715.468:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10362 comm="syz.5.994" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607af9de99 code=0x7ffc0000 [ 603.996802][ T27] audit: type=1326 audit(1785309715.468:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10362 comm="syz.5.994" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607af9de99 code=0x7ffc0000 [ 604.073917][ T27] audit: type=1326 audit(1785309715.468:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10362 comm="syz.5.994" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f607af9de99 code=0x7ffc0000 [ 604.100569][ T27] audit: type=1326 audit(1785309715.468:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10362 comm="syz.5.994" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f607af9de99 code=0x7ffc0000 [ 604.176778][T10371] loop4: detected capacity change from 0 to 512 [ 604.732398][T10371] EXT4-fs (loop4): Test dummy encryption mode enabled [ 604.774237][T10371] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 604.869480][T10371] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.995: bad orphan inode 131083 [ 604.952148][T10371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 605.136694][T10371] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 607.247966][ T6839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.174074][ T5084] Bluetooth: hci0: unexpected event for opcode 0x204e [ 610.600554][T10455] loop5: detected capacity change from 0 to 64 [ 611.359705][T10459] loop5: detected capacity change from 0 to 764 [ 611.560116][T10459] rock: directory entry would overflow storage [ 611.599894][T10459] rock: sig=0x4654, size=5, remaining=4 [ 613.102407][T10473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1035'. [ 613.951951][T10484] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1041'. [ 614.336067][T10490] bridge0: port 3(bond0) entered blocking state [ 614.365037][T10490] bridge0: port 3(bond0) entered disabled state [ 614.413907][T10490] bond0: entered allmulticast mode [ 614.421396][T10490] bond_slave_0: entered allmulticast mode [ 614.448295][T10490] bond_slave_1: entered allmulticast mode [ 614.483654][T10490] bond0: entered promiscuous mode [ 614.509732][T10490] bond_slave_0: entered promiscuous mode [ 614.530250][T10490] bond_slave_1: entered promiscuous mode [ 614.576606][T10490] bridge0: port 3(bond0) entered blocking state [ 614.583133][T10490] bridge0: port 3(bond0) entered forwarding state [ 615.778229][ T5084] Bluetooth: hci0: Malformed LE Event: 0x0b [ 616.931942][ T6505] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 617.206421][ T6505] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 617.270773][ T6505] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 617.318163][ T6505] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 617.377771][ T6505] usb 6-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 617.419289][ T6505] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.542038][ T6505] usb 6-1: config 0 descriptor?? [ 617.597270][T10529] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 617.620946][T10537] tipc: Enabled bearer , priority 10 [ 618.128879][ T6505] cypress 0003:04B4:0001.0001: unexpected long global item [ 618.175399][ T6505] cypress 0003:04B4:0001.0001: parse failed [ 618.201920][ T6505] cypress: probe of 0003:04B4:0001.0001 failed with error -22 [ 618.330244][ T6505] usb 6-1: USB disconnect, device number 5 [ 622.517234][T10570] loop5: detected capacity change from 0 to 40427 [ 622.584903][T10570] F2FS-fs (loop5): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 623.923602][T10570] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 623.975230][T10570] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x6 [ 624.030897][T10570] F2FS-fs (loop5): invalid crc value [ 624.074820][T10570] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-4) [ 624.847999][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.933987][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.937099][T10615] : renamed from vlan0 (while UP) [ 628.233684][ T5084] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 628.902660][T10645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1103'. [ 628.922065][T10646] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1104'. [ 628.932531][T10645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1103'. [ 628.970690][T10645] macvlan0: entered allmulticast mode [ 628.997268][T10645] veth1_vlan: entered allmulticast mode [ 629.524211][ T6481] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 629.713813][ T6481] usb 6-1: Using ep0 maxpacket: 16 [ 629.746508][ T6481] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 629.769750][ T6481] usb 6-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 629.780207][ T6481] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.832498][ T6481] usb 6-1: config 0 descriptor?? [ 630.352533][ T6481] wacom 0003:056A:00B4.0002: unknown main item tag 0x7 [ 630.403732][ T6481] wacom 0003:056A:00B4.0002: unknown main item tag 0x0 [ 630.432751][ T6481] wacom 0003:056A:00B4.0002: unknown main item tag 0x1 [ 630.473978][ T6481] wacom 0003:056A:00B4.0002: unknown main item tag 0xd [ 630.515850][ T6481] wacom 0003:056A:00B4.0002: Unknown device_type for 'HID 056a:00b4'. Assuming pen. [ 630.688190][ T6481] wacom 0003:056A:00B4.0002: hidraw0: USB HID v0.77 Device [HID 056a:00b4] on usb-dummy_hcd.5-1/input0 [ 630.734994][T10676] udevd[10676]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 630.797423][ T6481] input: Wacom Intuos3 12x19 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00B4.0002/input/input6 [ 631.097604][ T6481] usb 6-1: USB disconnect, device number 6 [ 631.246058][T10683] loop4: detected capacity change from 0 to 4096 [ 631.287409][T10683] EXT4-fs: Ignoring removed bh option [ 631.424812][T10683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.608382][T10683] EXT4-fs error (device loop4): ext4_get_first_dir_block:3604: inode #12: block 80: comm syz.4.1117: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 631.727607][T10683] EXT4-fs (loop4): Remounting filesystem read-only [ 632.055288][ T6839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.270310][ T5084] Bluetooth: hci4: ISO packet too small [ 633.895991][ T6481] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 634.123617][ T6481] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.172986][ T6481] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.240989][ T6481] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 634.278663][ T6481] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.316200][ T6481] usb 6-1: config 0 descriptor?? [ 634.850676][ T6481] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 634.929603][ T6481] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 634.990910][ T6481] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 635.049376][ T6481] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 635.104156][ T6481] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 635.159775][ T6481] cm6533_jd 0003:0D8C:0022.0003: No inputs registered, leaving [ 635.329950][ T6481] cm6533_jd 0003:0D8C:0022.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 635.437201][T10737] udevd[10737]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 635.465317][ T6481] usb 6-1: USB disconnect, device number 7 [ 636.991179][T10756] loop5: detected capacity change from 0 to 1024 [ 636.998587][ T27] audit: type=1326 audit(1785309749.178:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10753 comm="syz.0.1140" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f045d79de99 code=0x0 [ 637.145614][T10756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.569681][T10772] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1143'. [ 637.638660][T10772] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1143'. [ 637.728573][T10773] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1143'. [ 637.817218][ T7036] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 637.962262][ T7036] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 638.035542][ T5084] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 638.071618][ T7036] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 638.101598][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1146'. [ 638.107567][ T7036] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 638.165216][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1147'. [ 638.186674][ T7036] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 638.300503][ T7036] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 638.348079][ T7036] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 638.400706][ T7036] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 638.464502][ T7036] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 638.574019][ T7036] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 639.486550][T10804] loop4: detected capacity change from 0 to 64 [ 640.142769][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'. [ 641.748877][T10838] bridge0: port 4(dummy0) entered blocking state [ 641.771024][T10838] bridge0: port 4(dummy0) entered disabled state [ 641.791297][T10838] dummy0: entered allmulticast mode [ 641.820294][T10838] dummy0: entered promiscuous mode [ 641.843022][T10838] bridge0: port 4(dummy0) entered blocking state [ 641.849683][T10838] bridge0: port 4(dummy0) entered forwarding state [ 641.870699][ T7036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.067117][ T5084] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 642.078081][ T5084] Bluetooth: hci2: Injecting HCI hardware error event [ 642.090660][ T5084] Bluetooth: hci2: hardware error 0x00 SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 644.669316][ T7868] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.934110][ T5084] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 645.238299][ T7996] syz_tun (unregistering): left allmulticast mode [ 645.349539][ T7868] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.523736][ T8476] syz_tun (unregistering): left allmulticast mode [ 645.893352][ T7868] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.106051][ T7868] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.556351][ T7868] tipc: Left network mode [ 647.629608][ T7868] bond1: (slave gretap1): Releasing active interface [ 648.321370][ T7868] hsr_slave_0: left promiscuous mode [ 648.345037][ T7868] hsr_slave_1: left promiscuous mode [ 648.363804][ T7868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.371286][ T7868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.387375][ T7868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.398109][ T7868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.410305][ T7868] bridge_slave_1: left allmulticast mode [ 648.423718][ T7868] bridge_slave_1: left promiscuous mode [ 648.429722][ T7868] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.454474][ T7868] bridge_slave_0: left allmulticast mode [ 648.460226][ T7868] bridge_slave_0: left promiscuous mode [ 648.474379][ T7868] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.541127][ T7868] veth1_macvtap: left promiscuous mode [ 648.551839][ T7868] veth0_macvtap: left promiscuous mode [ 648.561651][ T7868] veth1_vlan: left promiscuous mode [ 648.572344][ T7868] veth0_vlan: left promiscuous mode [ 649.330513][ T7868] bond1 (unregistering): Released all slaves [ 650.741307][ T7868] team0 (unregistering): Port device team_slave_1 removed [ 650.887231][ T7868] team0 (unregistering): Port device team_slave_0 removed [ 651.031930][ T7868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.155495][ T7868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.192184][ T7868] bond0 (unregistering): Released all slaves