last executing test programs: 4m21.239914126s ago: executing program 2 (id=1001): unshare(0x22020600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r0, 0x2f, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r3, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r0, r2, 0x2f, 0x2008, 0x4, @value=r4}, 0x20) 4m20.980537809s ago: executing program 2 (id=1004): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000280)}], 0x1}, 0x0) 4m20.868067559s ago: executing program 2 (id=1005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "7df0"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m20.612405822s ago: executing program 2 (id=1011): open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$eJzs3M1vFOUfAPDvTOkLUGjhR37Ki1JFYyPa0oLKwYMaTbhoTPSAx1oqQQoYWhMhRIoxeDT+BerRxMSTF71ooka9qPGqd2NCDBdQE7Nmdmfa3XZ3u91CK+znk0z7PDPPvHyfmWd2Zp/ZCaBjDWV/koj+iPglIgYq2doCQ5V/169emPzz6oXJJEqlF/5IyuWuXb0wWRQt5tucZ4bTiPTtJHbXWe/MufMnJ6anp87m+dHZU6+Nzpw7//CJUxPHp45PnR4/fPjQwbHHHh1/pKU4Li4zPYvr2q43z+zZeeSl956dLMXL332cbW9/Pr06jorBltbbzFAMRSm3MLan/Pf+VS/9v2VLRPTm6WTDOm8MLeuKiGx3dZfb/0B0xcLOG4hn3prPfLVOGwjcNNln07YlY7vy/+n85xdwO0q0cehQxSd+dv9bDGt5/bHerjyZ/Z0qx389H354rlI3aXYvO1i5Y+9qMP//64zrW0iWBpZZf39EHJ376/1siLrfQzSRtFwSAGDeF9n1z0P1rv/SmmubrXkfymBE7I+I7RHxv4jYEel8mTsi4s4Vrn9oUX7p9c9PG1e4yBXJrv8ez/u2iqEypYgrmc9tKcffnbxyYnrqQF4nw9Hdm+XHmqzjy6d/frfRtKGq679syNZfXAvm2/H7ht7aeY5NzE6sIuQaVy5FEhvqxZ/M9wRkNbAzIna1sfyszk48+NGeLL1189Lpy8ffxA3oZyp9GPFAZf/PxaL4C0llTY36J0f7YnrqwGhxVCz1/Y+Xn6/Od1ela+Lvay2mvnaDrePKpYhNdY//PP6iGRT9tTN5/uv+ltdx+dd3Gt7TLN3/SRydqy6RH/8bF6otO/57khfL6Z583BsTs7NnxyI+z0fUjB9fWFqRL8pn8Q/vq42/cl+cZue4fz7I59sdEdlBfFdE3B0Re/Ntvyci7o2IfU3i//ap+15tXkNtHv83QBb/sWb7P2Iwqe6vbyPRdfKbzxqtv7Xz36FyajgfU33+62mw3FY3cLX1BwAAALeCtNwHnaQjVc9vF3bEpnT6zMzs/qF4/fSxSl/1YHSnxTddA1Xfh47l3w0X+fFF+YMRsa38pNHGcn5k8sz0lnWKGajYXNX+K+eCNB0ZqUz7rdFDL8DtY0X9aNUPnX3y6Y3fGGBN+b0mdC7tHzqX9g+dS/uHzlWv/V+MuL4OmwKssXY//xc/MADccko176cEOor7f+hc2j90pKU/ic9ft5KdE9r/yf/09iOreWPAzU+UBtqfPRpPmlv5ArtaK1y8/aLlJbdWOIkowkmbxFUnEenCmL/zt0mWx3RXyvS0vqlrn0iXLfPEcrXRvaJ3YvTVqY29eaI3IlpdzsU1q9XiDJF4yyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBL+zcAAP//Flvq9A==") mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 4m20.424935209s ago: executing program 2 (id=1014): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1000008, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x22) setpgid(r0, r0) setpgid(0x0, r0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x810, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743d63703733372c756d61736b3d3030303030303030303030303030303030303030303000fcffff6d65636173653d312c6e616d65636173653d312c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030362c646973636172642c6b6565705f6c6173745f646f74732c7379735f747a2c646973636172642c65728e6f7273c26a9ffc30d998a6652c00"], 0x1, 0x152d, &(0x7f0000000480)="$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") 4m20.044872153s ago: executing program 2 (id=1018): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="0000000000000053ee00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) 4m4.729568301s ago: executing program 32 (id=1018): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="0000000000000053ee00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) 4m3.799651414s ago: executing program 0 (id=1103): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071120c00000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x7, {{0xa, 0x4e24, 0x2, @mcast1, 0x1}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x45812, &(0x7f0000000040)=ANY=[], 0x0, 0x6ae, &(0x7f0000000780)="$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") 4m2.886527926s ago: executing program 0 (id=1106): r0 = socket$inet6(0xa, 0x5, 0x0) setuid(0xee01) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x1fe, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 4m2.738394909s ago: executing program 0 (id=1108): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xf3a, 0x8) splice(r2, 0x0, r5, 0x0, 0x80, 0x8) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7dc, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) 4m0.947942629s ago: executing program 0 (id=1122): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000007) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpgid(0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000340)='net/stat\x00') setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) cachestat(r2, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0x0) 4m0.755119766s ago: executing program 0 (id=1125): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0xa2) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 3m59.794834112s ago: executing program 0 (id=1124): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x709) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 3m44.064564478s ago: executing program 33 (id=1124): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x709) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 2m8.893191732s ago: executing program 5 (id=2013): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = memfd_secret(0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x8000000) setrlimit(0x4, &(0x7f0000000100)={0x2, 0x5bc}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) capset(0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x200000000000000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000000f14010000008000fedbe0250d0045006f70615f766e697b000000000ad5f95478c7dbfd36f105e5d85ea43b1176cd5e6b560b8f59056c16555839a93da4a6cd9f515c8074c3eb6aa81d2d8093a162a9ab2960e482488eb8f775f316ff881b8ed325338ff873ee8bcbd258b0f97c39a55f2c40c93ab5fdaff72e3078e7b1755cfce5262f80de37c39bea679b61d016742f28090c3a3736d953046e971f3de4e69c0b80fdd95679b3"], 0x20}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) 2m8.637680335s ago: executing program 5 (id=2016): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="400000000000000017010000030000007b"], 0x40}}], 0x1, 0xc000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fc6000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000840)="660f3881420a0f18c2baf80c66b896dc2c8c66efbafc0ced6436660f3a41c312b8f9008ec00fc7aa0a000ff2276766c7442400554ad7e96766c7442402000000006766c744240600000000670f011424640f01be0e0026f4", 0x58}], 0x1, 0x48, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m8.35023826s ago: executing program 5 (id=2021): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c8", 0xb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000feff5366"], 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 2m8.203117174s ago: executing program 5 (id=2024): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000000280)={0x0, 0xaef4, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000300)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) 2m7.192943944s ago: executing program 5 (id=2034): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) setpgid(0x0, r0) open(&(0x7f00000000c0)='./file0\x00', 0xf6, 0x2c) 2m6.995722042s ago: executing program 5 (id=2035): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x1820010, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="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"], 0x0, 0x240, &(0x7f00000009c0)="$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") ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x4, 0xb, 0x0, 0xfffffffc, 0x7e, "2b3b7596160c6981acf880594400017f00"}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x8000) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020) read$usbmon(r2, &(0x7f0000000340)=""/126, 0x7e) 1m51.575903029s ago: executing program 34 (id=2035): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x1820010, &(0x7f0000000740)=ANY=[@ANYBLOB="636865636b5d7374726963742c757466383d312c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677eef7536f8115edae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYBLOB="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"], 0x0, 0x240, &(0x7f00000009c0)="$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") ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x4, 0xb, 0x0, 0xfffffffc, 0x7e, "2b3b7596160c6981acf880594400017f00"}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x8000) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020) read$usbmon(r2, &(0x7f0000000340)=""/126, 0x7e) 1m39.074524577s ago: executing program 4 (id=2214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1m38.902728132s ago: executing program 4 (id=2218): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) shutdown(r2, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m38.798242111s ago: executing program 4 (id=2219): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) close(0x3) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 1m38.693872961s ago: executing program 4 (id=2221): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = socket(0x28, 0x801, 0x0) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 1m37.763215634s ago: executing program 4 (id=2229): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 1m37.571359851s ago: executing program 4 (id=2230): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="200084"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, &(0x7f0000000700)={0x0, 0xf, 0x4, "bc471e7f"}, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x20, 0x3, 0x1, 0x3}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000400)="b9") 1m22.531388915s ago: executing program 35 (id=2230): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="200084"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, &(0x7f0000000700)={0x0, 0xf, 0x4, "bc471e7f"}, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x20, 0x3, 0x1, 0x3}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000400)="b9") 8.159462691s ago: executing program 6 (id=2812): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x8c88}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) 7.819710491s ago: executing program 6 (id=2814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x48) 6.968897758s ago: executing program 1 (id=2815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 6.873383426s ago: executing program 6 (id=2817): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffff4, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe654, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) shutdown(r2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 6.056612129s ago: executing program 6 (id=2819): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r1 = dup(r0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0xe7c) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)={0x8}) 5.92664063s ago: executing program 1 (id=2820): creat(&(0x7f00000000c0)='./bus\x00', 0x182) r0 = inotify_init() io_setup(0x8, &(0x7f0000000540)=0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000002f00)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x400017e) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 5.563943543s ago: executing program 1 (id=2830): timer_create(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000000000008500000007000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_gettime(0x0, &(0x7f00000001c0)) 5.411146717s ago: executing program 6 (id=2824): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x10, @empty}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 5.075730656s ago: executing program 1 (id=2825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x412c2400, 0x0, 0x0, 0x0, 0x0, 0x0) 4.159795739s ago: executing program 3 (id=2826): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x2c}}, 0x0) 3.299475365s ago: executing program 7 (id=2827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r3 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x8000}) r5 = fcntl$dupfd(r4, 0x406, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r5}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3.172774036s ago: executing program 7 (id=2828): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x48, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xffe0}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 3.109973832s ago: executing program 3 (id=2829): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) write(r1, 0x0, 0x0) 2.984972253s ago: executing program 6 (id=2831): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24041004}, 0x8000) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x48801}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xc5}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7f}, @IFLA_IPTUN_LINK={0x8, 0x1, r4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x400}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0xa}]}}}]}, 0x60}}, 0x40000) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) 2.772337672s ago: executing program 36 (id=2831): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24041004}, 0x8000) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x48801}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xc5}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7f}, @IFLA_IPTUN_LINK={0x8, 0x1, r4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x400}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0xa}]}}}]}, 0x60}}, 0x40000) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) 2.766671373s ago: executing program 7 (id=2833): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x3fe, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f0000000080)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)="c465", 0x2, 0x20000080, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e23, 0x400, @loopback, 0x3}}}, 0x84) 2.765838713s ago: executing program 3 (id=2834): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x5, 0x1, "88"}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001880)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)={0x40, 0x5, 0x1, "a3"}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004000)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003fc0)={0x40, 0x5, 0x2, "edc7"}}) 2.190520874s ago: executing program 3 (id=2835): r0 = socket(0x2, 0x80805, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0xe, 0x2, 0x2, 0x6, 0xd, 0xf}, 0x20) 2.053078446s ago: executing program 3 (id=2836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x20) 1.842816865s ago: executing program 7 (id=2837): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x2512, 0x4) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r2, 0x0, 0x0, 0x2000, 0x0, 0x0) 1.770154382s ago: executing program 1 (id=2838): socket$inet6(0x10, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd28, 0x0, &(0x7f0000000200)="b9ff03076804268c989e140088a8", 0x0, 0x4ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.050025686s ago: executing program 7 (id=2839): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x2) 12.150549ms ago: executing program 7 (id=2840): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 12.018409ms ago: executing program 3 (id=2841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc854}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 0s ago: executing program 1 (id=2847): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x2004) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r3], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a0022, r3}) kernel console output (not intermixed with test programs): oring removed nobh option [ 216.839901][ T8843] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.870893][ T8843] ext4 filesystem being mounted at /230/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 216.969023][ T5766] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.777544][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1047'. [ 218.734344][ T27] audit: type=1326 audit(1771356005.336:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da6d9c629 code=0x7ffc0000 [ 218.758071][ T27] audit: type=1326 audit(1771356005.336:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da6d9c629 code=0x7ffc0000 [ 218.780558][ T27] audit: type=1326 audit(1771356005.336:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da6d9c629 code=0x7ffc0000 [ 218.802957][ T27] audit: type=1326 audit(1771356005.336:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2da6d9c629 code=0x7ffc0000 [ 218.825488][ T27] audit: type=1326 audit(1771356005.406:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2da6d5cece code=0x7ffc0000 [ 218.847913][ T27] audit: type=1326 audit(1771356005.416:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da6d9c629 code=0x7ffc0000 [ 218.875744][ T27] audit: type=1326 audit(1771356005.416:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da6d9c629 code=0x7ffc0000 [ 218.913093][ T27] audit: type=1326 audit(1771356005.516:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2da6d9c629 code=0x7ffc0000 [ 218.954442][ T27] audit: type=1326 audit(1771356005.546:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2da6d9c629 code=0x7ffc0000 [ 219.120218][ T8896] netlink: 'syz.0.1058': attribute type 9 has an invalid length. [ 219.130262][ T8896] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1058'. [ 219.181624][ T8898] netlink: 'syz.0.1058': attribute type 9 has an invalid length. [ 220.440894][ T8918] overlayfs: failed to clone upperpath [ 221.176450][ T8928] netlink: 'syz.3.1073': attribute type 9 has an invalid length. [ 221.186932][ T8928] __nla_validate_parse: 1 callbacks suppressed [ 221.186942][ T8928] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1073'. [ 221.249688][ T8928] netlink: 'syz.3.1073': attribute type 9 has an invalid length. [ 221.257980][ T8928] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1073'. [ 221.560625][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'. [ 221.666222][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'. [ 221.699917][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'. [ 221.735046][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'. [ 222.419251][ T8950] loop0: detected capacity change from 0 to 1024 [ 224.329250][ T27] audit: type=1800 audit(1771356010.936:120): pid=8978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1087" name="file2" dev="overlay" ino=1354 res=0 errno=0 [ 224.615211][ T8987] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.769277][ T8987] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.907038][ T8987] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.070876][ T8987] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.218600][ T8987] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.250166][ T8987] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.272827][ T8987] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.312240][ T8987] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.209391][ T9019] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.281168][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 231.293577][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 231.295446][ T9022] netlink: 'syz.0.1102': attribute type 6 has an invalid length. [ 231.307758][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 231.335225][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 231.345955][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 231.355241][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.458880][ T9019] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.596829][ T9019] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.717355][ T9019] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.719668][ T9029] loop0: detected capacity change from 0 to 1024 [ 232.010667][ T9024] chnl_net:caif_netlink_parms(): no params data found [ 232.126942][ T9019] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.189853][ T9019] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.277237][ T9019] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.318669][ T9019] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.341558][ T9024] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.374422][ T9024] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.387972][ T9024] bridge_slave_0: entered allmulticast mode [ 232.395975][ T9024] bridge_slave_0: entered promiscuous mode [ 232.404739][ T9024] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.411878][ T9024] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.423971][ T9024] bridge_slave_1: entered allmulticast mode [ 232.448890][ T9024] bridge_slave_1: entered promiscuous mode [ 232.492391][ T9024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.507519][ T9024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.599655][ T9024] team0: Port device team_slave_0 added [ 232.608894][ T9024] team0: Port device team_slave_1 added [ 232.643128][ T9024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.650867][ T9024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.685733][ T9024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.699626][ T9024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.706953][ T9024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.734100][ T9024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.806584][ T9024] hsr_slave_0: entered promiscuous mode [ 232.813327][ T9024] hsr_slave_1: entered promiscuous mode [ 232.820584][ T9024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.828536][ T9024] Cannot create hsr debugfs directory [ 233.017795][ T9024] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 233.030502][ T9024] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 233.043613][ T9024] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 233.055274][ T9024] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 233.244659][ T9024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.291319][ T9024] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.323823][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.331040][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.388435][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.395666][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.444886][ T51] Bluetooth: hci3: command tx timeout [ 233.491002][ T9024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.665923][ T9024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.857977][ T9024] veth0_vlan: entered promiscuous mode [ 233.870764][ T9024] veth1_vlan: entered promiscuous mode [ 233.900936][ T9024] veth0_macvtap: entered promiscuous mode [ 233.911699][ T9024] veth1_macvtap: entered promiscuous mode [ 233.930548][ T9024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.941606][ T9024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.951730][ T9024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.962351][ T9024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.972384][ T9024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.983362][ T9024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.993236][ T9024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.003781][ T9024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.016252][ T9024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.029918][ T9024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.040804][ T9024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.051358][ T9024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.062647][ T9024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.072593][ T9024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.083470][ T9024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.096125][ T9024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.110835][ T9024] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.120803][ T9024] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.130230][ T9024] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.139243][ T9024] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.225700][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.233555][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.270220][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.278679][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.713371][ T9094] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.524336][ T51] Bluetooth: hci3: command tx timeout [ 237.050952][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1137'. [ 237.069313][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 237.112336][ T9094] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.605665][ T51] Bluetooth: hci3: command tx timeout [ 239.377950][ T9094] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.456845][ T9094] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.549853][ T9094] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.568665][ T9094] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.582386][ T9094] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.596478][ T9094] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.684848][ T51] Bluetooth: hci3: command tx timeout [ 239.696265][ T9146] io-wq is not configured for unbound workers [ 240.611301][ T9168] syz.3.1148: attempt to access beyond end of device [ 240.611301][ T9168] loop7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 240.662653][ T9168] isofs_fill_super: bread failed, dev=loop7, iso_blknum=16, block=32 [ 241.089201][ T9177] VFS: Mount too revealing [ 242.002969][ T9194] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1158'. [ 242.151130][ T9194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.196272][ T9194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.247595][ T9194] bond0 (unregistering): Released all slaves [ 242.280569][ T9199] syz.1.1159: attempt to access beyond end of device [ 242.280569][ T9199] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 242.306711][ T9199] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 242.367045][ T9196] loop4: detected capacity change from 0 to 32768 [ 242.412176][ T9196] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1157 (9196) [ 242.464870][ T9196] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 242.486874][ T9196] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 242.505951][ T9196] BTRFS info (device loop4): using free space tree [ 242.624799][ T9196] BTRFS info (device loop4): enabling ssd optimizations [ 242.631807][ T9196] BTRFS info (device loop4): auto enabling async discard [ 242.740601][ T51] Bluetooth: hci2: unknown advertising packet type: 0x6f [ 242.740667][ T51] Bluetooth: hci2: unknown advertising packet type: 0x28 [ 243.217184][ T9024] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 243.272303][ T9231] tipc: Enabling of bearer rejected, failed to enable media [ 243.600162][ T9237] loop4: detected capacity change from 0 to 128 [ 243.783084][ T9237] syz.4.1163: attempt to access beyond end of device [ 243.783084][ T9237] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 243.902498][ T9237] syz.4.1163: attempt to access beyond end of device [ 243.902498][ T9237] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 246.289678][ T5755] libceph: connect (1)[c::]:6789 error -101 [ 246.296415][ T5755] libceph: mon0 (1)[c::]:6789 connect error [ 246.373301][ T9299] ceph: No mds server is up or the cluster is laggy [ 247.133738][ T9313] loop4: detected capacity change from 0 to 128 [ 247.158536][ T9313] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 251.949217][ T5770] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 251.954198][ T9396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1236'. [ 251.969562][ T5770] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 251.986047][ T5770] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.004693][ T5770] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.014731][ T5770] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 252.022177][ T5770] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.401721][ T9398] chnl_net:caif_netlink_parms(): no params data found [ 252.907520][ T9398] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.915204][ T9398] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.922632][ T9398] bridge_slave_0: entered allmulticast mode [ 252.954223][ T9398] bridge_slave_0: entered promiscuous mode [ 252.972645][ T9398] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.003006][ T9398] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.023651][ T9398] bridge_slave_1: entered allmulticast mode [ 253.045567][ T9398] bridge_slave_1: entered promiscuous mode [ 253.106703][ T9398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.128945][ T9398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.201511][ T9398] team0: Port device team_slave_0 added [ 253.216979][ T9398] team0: Port device team_slave_1 added [ 253.267403][ T9398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.294110][ T9398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.324295][ T28] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 253.372187][ T9398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.399443][ T9398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.425667][ T9398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.474049][ T9398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.572791][ T9398] hsr_slave_0: entered promiscuous mode [ 253.577898][ T28] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 253.587824][ T9398] hsr_slave_1: entered promiscuous mode [ 253.594119][ T28] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.604394][ T9398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.611974][ T9398] Cannot create hsr debugfs directory [ 253.614084][ T28] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 253.644085][ T28] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.685627][ T28] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 253.704090][ T28] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 253.712128][ T28] usb 5-1: Product: syz [ 253.734056][ T28] usb 5-1: Manufacturer: syz [ 253.763571][ T28] cdc_wdm 5-1:1.0: skipping garbage [ 253.769993][ T28] cdc_wdm 5-1:1.0: skipping garbage [ 253.794522][ T28] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 253.800489][ T28] cdc_wdm 5-1:1.0: Unknown control protocol [ 254.012108][ T28] usb 5-1: USB disconnect, device number 2 [ 254.067022][ T9398] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 254.084517][ T9398] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 254.093592][ T51] Bluetooth: hci1: command tx timeout [ 254.096026][ T9398] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 254.112587][ T9398] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 254.272909][ T9398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.305575][ T9398] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.322747][ T2928] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.329996][ T2928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.349598][ T2928] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.356867][ T2928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.574636][ T28] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 254.729137][ T9398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.785954][ T28] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 254.809265][ T28] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.836472][ T28] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 254.850061][ T28] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.867093][ T28] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 254.876709][ T28] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 254.885615][ T28] usb 5-1: Product: syz [ 254.891630][ T28] usb 5-1: Manufacturer: syz [ 254.915486][ T28] cdc_wdm 5-1:1.0: skipping garbage [ 254.920748][ T28] cdc_wdm 5-1:1.0: skipping garbage [ 254.946024][ T28] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 254.960954][ T28] cdc_wdm 5-1:1.0: Unknown control protocol [ 255.068438][ T9452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1240'. [ 255.184221][ T9398] veth0_vlan: entered promiscuous mode [ 255.208739][ T9398] veth1_vlan: entered promiscuous mode [ 255.263081][ T9398] veth0_macvtap: entered promiscuous mode [ 255.278499][ T9398] veth1_macvtap: entered promiscuous mode [ 255.315756][ T9398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.330192][ T9398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.340755][ T9398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.351710][ T9398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.374260][ T9398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.385175][ T9398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.398282][ T9398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.409289][ T9398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.427243][ T9398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.443149][ T9398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.471785][ T9398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.501263][ T9398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.511896][ T9398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.530474][ T9398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.541013][ T9398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.551157][ T9398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.572513][ T9398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.586689][ T9398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.597790][ T9398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.617603][ T9398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.646473][ T9398] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.662624][ T9398] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.688726][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 255.695668][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 255.702246][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 255.708905][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 255.714316][ T9398] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.715382][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 255.730276][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 255.732014][ T9398] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.737473][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 255.751714][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 255.758645][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 255.765305][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 255.771925][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 255.778576][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 255.787103][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 255.793738][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 255.799919][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 255.811169][ T5828] usb 5-1: USB disconnect, device number 3 [ 255.851177][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.857694][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.944664][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.971099][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.027637][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.044728][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.164762][ T51] Bluetooth: hci1: command tx timeout [ 256.192799][ T9474] 9pnet: p9_errstr2errno: server reported unknown error @L 00000000000000000007 [ 256.231674][ T9476] netlink: 'syz.5.1221': attribute type 10 has an invalid length. [ 256.246795][ T9476] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.254304][ T9476] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.278096][ T9476] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.285302][ T9476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.294555][ T9476] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.302461][ T9476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.315733][ T9476] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 256.640229][ T9479] loop5: detected capacity change from 0 to 32768 [ 256.717407][ T9479] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 256.890331][ T2129] libceph: connect (1)[c::]:6789 error -22 [ 256.898880][ T2129] libceph: mon0 (1)[c::]:6789 connect error [ 256.941548][ T9479] XFS (loop5): Ending clean mount [ 256.949469][ T9492] ceph: No mds server is up or the cluster is laggy [ 257.385337][ T9479] loop5: detected capacity change from 32768 to 0 [ 257.428185][ T27] audit: type=1800 audit(1771356044.026:121): pid=9479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1251" name="file1" dev="loop5" ino=9286 res=0 errno=0 [ 257.453167][ T9479] syz.5.1251: attempt to access beyond end of device [ 257.453167][ T9479] loop5: rw=4096, sector=8, nr_sectors = 4 limit=0 [ 257.470519][ T9479] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x8 len 4 error 5 [ 257.612124][ T9398] syz-executor: attempt to access beyond end of device [ 257.612124][ T9398] loop5: rw=432129, sector=768, nr_sectors = 128 limit=0 [ 257.637828][ T5828] kworker/0:6: attempt to access beyond end of device [ 257.637828][ T5828] loop5: rw=4096, sector=4, nr_sectors = 4 limit=0 [ 257.867879][ T24] XFS (loop5): log I/O error -5 [ 257.875608][ T24] XFS (loop5): Filesystem has been shut down due to log error (0x2). [ 257.883791][ T24] XFS (loop5): Please unmount the filesystem and rectify the problem(s). [ 257.940956][ T9398] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 258.244956][ T51] Bluetooth: hci1: command tx timeout [ 258.701568][ T9514] tipc: Started in network mode [ 258.710927][ T9514] tipc: Node identity 0a438554641a, cluster identity 4711 [ 258.720218][ T9514] tipc: Enabled bearer , priority 0 [ 258.766744][ T9521] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 258.830509][ T9514] syzkaller0: entered promiscuous mode [ 258.848060][ T9514] syzkaller0: entered allmulticast mode [ 258.854520][ T9514] tipc: Resetting bearer [ 258.946996][ T9513] tipc: Resetting bearer [ 259.586233][ T9534] overlayfs: failed to clone upperpath [ 260.343643][ T51] Bluetooth: hci1: command tx timeout [ 262.370737][ T9513] tipc: Disabling bearer [ 262.382424][ T5956] tipc: Node number set to 1851360596 [ 262.393085][ T9539] lo: entered promiscuous mode [ 262.400297][ T9539] lo: entered allmulticast mode [ 262.439482][ T9562] syz_tun: entered promiscuous mode [ 262.474427][ T9562] vlan2: entered promiscuous mode [ 265.915090][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1300'. [ 265.947802][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1300'. [ 266.315830][ T9640] netlink: 'syz.4.1306': attribute type 1 has an invalid length. [ 266.395479][ T9648] overlayfs: failed to clone upperpath [ 266.429163][ T9640] bond1: entered promiscuous mode [ 266.466066][ T9640] 8021q: adding VLAN 0 to HW filter on device bond1 [ 266.529222][ T9649] bond1: (slave bridge1): making interface the new active one [ 266.597762][ T9649] bridge1: entered promiscuous mode [ 266.621962][ T9649] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 266.996515][ T9642] loop5: detected capacity change from 0 to 40427 [ 267.015856][ T9642] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 267.054131][ T9642] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 267.138236][ T9642] F2FS-fs (loop5): Found nat_bits in checkpoint [ 267.176355][ T9642] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 267.183422][ T9642] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 267.845473][ T9685] binder: 9684:9685 unknown command 0 [ 267.850906][ T9685] binder: 9684:9685 ioctl c0306201 200000000180 returned -22 [ 268.653873][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1332'. [ 268.695184][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1332'. [ 268.941211][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1334'. [ 269.089039][ T9718] 8021q: adding VLAN 0 to HW filter on device bond4 [ 269.106857][ T9720] macsec1: entered promiscuous mode [ 269.112220][ T9720] bond4: entered promiscuous mode [ 269.134150][ T9720] bond4: left promiscuous mode [ 270.448625][ T9739] overlayfs: failed to clone lowerpath [ 270.499730][ T9741] overlayfs: failed to clone lowerpath [ 271.085921][ T9755] loop4: detected capacity change from 0 to 8 [ 271.134637][ T9755] SQUASHFS error: Unable to read inode 0x11f [ 271.218707][ T9759] netlink: 'syz.3.1349': attribute type 1 has an invalid length. [ 271.300883][ T9759] macvlan2: entered promiscuous mode [ 271.319222][ T9759] macvlan2: entered allmulticast mode [ 271.336467][ T9759] bond0: entered promiscuous mode [ 271.355941][ T9759] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 271.381156][ T9759] bond0: left promiscuous mode [ 275.645996][ T9837] overlayfs: failed to clone upperpath [ 276.099797][ T9853] overlayfs: failed to clone upperpath [ 276.910802][ T9883] netlink: 'syz.5.1399': attribute type 12 has an invalid length. [ 277.261667][ T9899] netlink: 'syz.1.1405': attribute type 13 has an invalid length. [ 277.393522][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1406'. [ 277.569168][ T9904] overlayfs: failed to clone upperpath [ 278.312396][ T9930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1417'. [ 278.362955][ T9930] bond5: entered promiscuous mode [ 278.369681][ T9930] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.409936][ T9930] IPv6: sit1: Disabled Multicast RS [ 278.425563][ T9930] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.432531][ T9930] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 278.444148][ T9930] bond5: (slave sit1): Error -95 calling set_mac_address [ 278.524834][ T5956] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 278.703867][ T9944] tipc: Enabled bearer , priority 0 [ 278.724440][ T5956] usb 6-1: Using ep0 maxpacket: 8 [ 278.732328][ T5956] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 278.741537][ T5956] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 278.753449][ T5956] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 278.759942][ T9944] syzkaller0: entered promiscuous mode [ 278.766416][ T5956] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 278.771501][ T9944] syzkaller0: entered allmulticast mode [ 278.780851][ T5956] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 278.796982][ T9944] tipc: Resetting bearer [ 278.798185][ T5956] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.822242][ T9943] tipc: Resetting bearer [ 278.838448][ T5956] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 278.858034][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.095969][ T5956] usb 6-1: usb_control_msg returned -32 [ 279.101649][ T5956] usbtmc 6-1:16.0: can't read capabilities [ 279.564258][ T9957] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -71 [ 279.645668][ T9957] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 279.664319][ T5956] usb 6-1: USB disconnect, device number 2 [ 282.801935][ T9943] tipc: Disabling bearer [ 283.005550][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1434'. [ 283.078294][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1434'. [ 283.449303][ T9997] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1443'. [ 283.649574][T10002] overlayfs: failed to clone lowerpath [ 283.673080][T10002] overlayfs: failed to clone upperpath [ 283.923520][T10010] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 284.557110][T10033] loop4: detected capacity change from 0 to 1024 [ 284.585269][T10033] EXT4-fs: inline encryption not supported [ 284.594197][T10033] EXT4-fs: Ignoring removed bh option [ 284.627432][T10033] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 284.712280][T10033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.873240][T10033] EXT4-fs error (device loop4): ext4_get_group_desc:279: comm syz.4.1457: block_group >= groups_count - block_group = 59976627, groups_count = 1 [ 284.900053][T10033] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4612: inode #1919252079: comm syz.4.1457: unable to read itable block [ 284.985792][ T9024] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.754812][T10054] netlink: 'syz.1.1464': attribute type 1 has an invalid length. [ 285.851208][T10056] bond6: (slave veth3): Enslaving as an active interface with a down link [ 285.941487][T10054] bond6 (unregistering): (slave veth3): Releasing active interface [ 285.955831][T10054] bond6 (unregistering): Released all slaves [ 286.224394][T10058] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 286.485717][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1469'. [ 286.660660][T10066] team0: Port device team_slave_0 removed [ 287.377738][T10087] bond5: entered allmulticast mode [ 287.397992][T10085] bond5: left allmulticast mode [ 287.709510][T10093] loop4: detected capacity change from 0 to 2048 [ 287.737259][T10093] UDF-fs: bad mount option "gid=ѦCee؄X@06.mkshִH釉$a֖4#VPUhPhoaG {W;1Ee𹾆LNy 3000000000000000000040x0000000000000003" or missing value [ 288.161122][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1481'. [ 288.698209][T10112] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1486'. [ 288.717491][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 289.480423][T10127] VFS: Mount too revealing [ 289.828470][T10138] loop4: detected capacity change from 0 to 256 [ 289.879411][T10138] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 289.912748][T10138] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 289.955960][T10138] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 290.040460][ T27] audit: type=1800 audit(1771356076.606:122): pid=10138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1496" name="file1" dev="loop4" ino=1048607 res=0 errno=0 [ 290.215657][T10143] bond1: entered promiscuous mode [ 290.226649][T10149] vcan1: entered promiscuous mode [ 290.231715][T10149] vcan1: entered allmulticast mode [ 290.295025][T10149] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 290.307320][T10149] bond1: (slave vcan1): Error -95 calling set_mac_address [ 290.405532][T10138] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 290.439929][T10138] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 290.474270][T10138] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 290.499404][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1504'. [ 291.505071][T10178] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1512'. [ 291.791220][T10185] veth1_to_bond: entered allmulticast mode [ 291.822958][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1514'. [ 291.832222][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1514'. [ 291.954821][T10193] netlink: 'syz.5.1519': attribute type 1 has an invalid length. [ 291.997969][T10184] veth1_to_bond: left allmulticast mode [ 292.035681][T10193] macvlan2: entered promiscuous mode [ 292.041211][T10193] macvlan2: entered allmulticast mode [ 292.048287][T10193] bond1: entered promiscuous mode [ 292.054290][T10193] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 292.066849][T10193] bond1: left promiscuous mode [ 293.280938][T10233] netlink: 'syz.4.1536': attribute type 11 has an invalid length. [ 293.364854][T10233] netlink: 'syz.4.1536': attribute type 11 has an invalid length. [ 294.190379][T10244] loop4: detected capacity change from 0 to 32768 [ 294.225563][T10244] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1540 (10244) [ 294.301123][T10244] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 294.331273][T10244] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 294.366151][T10244] BTRFS info (device loop4): using free space tree [ 294.619873][T10244] BTRFS info (device loop4): enabling ssd optimizations [ 294.720717][T10244] BTRFS info (device loop4): auto enabling async discard [ 295.351161][ T9024] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 295.963868][T10320] loop4: detected capacity change from 0 to 47 [ 296.392304][T10333] syz_tun: entered allmulticast mode [ 296.409004][T10332] syz_tun: left allmulticast mode [ 296.549572][ T27] audit: type=1326 audit(1771356083.156:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10327 comm="syz.1.1568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2da6d9c629 code=0x0 [ 296.980957][T10345] netlink: 'syz.3.1573': attribute type 39 has an invalid length. [ 297.512557][T10367] overlayfs: failed to clone upperpath [ 297.848072][T10379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1588'. [ 297.896870][T10379] 8021q: adding VLAN 0 to HW filter on device bond2 [ 297.953949][T10361] loop5: detected capacity change from 0 to 32768 [ 297.966542][T10379] macvlan2: entered promiscuous mode [ 297.971884][T10379] macvlan2: entered allmulticast mode [ 297.986498][T10379] bond2: entered promiscuous mode [ 297.992149][T10379] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 298.006968][T10361] loop5: p1 p2 p3 < p5 > [ 298.015892][T10379] bond2: left promiscuous mode [ 298.023740][T10361] loop5: p1 size 242222080 extends beyond EOD, truncated [ 298.039432][T10385] overlayfs: failed to clone upperpath [ 298.056122][T10361] loop5: p2 start 16777215 is beyond EOD, truncated [ 298.375282][T10393] netlink: 'syz.1.1593': attribute type 39 has an invalid length. [ 298.444763][ T9888] udevd[9888]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 298.451018][ T9958] udevd[9958]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 298.461628][ T9928] udevd[9928]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 299.568665][T10433] warning: `syz.5.1607' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 299.744620][T10438] ref_ctr increment failed for inode: 0x18f offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8880784f1300 [ 300.148652][T10431] raw_sendmsg: syz.3.1608 forgot to set AF_INET. Fix it! [ 300.338074][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.457740][T10457] netlink: 'syz.1.1617': attribute type 1 has an invalid length. [ 300.522571][T10457] geneve2: entered promiscuous mode [ 300.544101][T10457] geneve2: entered allmulticast mode [ 300.565020][T10457] bond6: (slave geneve2): making interface the new active one [ 300.584231][T10457] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 301.186257][T10472] loop4: detected capacity change from 0 to 128 [ 301.271833][T10472] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 50) [ 301.296323][T10472] FAT-fs (loop4): Filesystem has been set read-only [ 301.303749][T10472] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 50) [ 301.935949][T10484] loop5: detected capacity change from 0 to 512 [ 301.962206][T10484] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.5.1627: corrupted xattr block 95: invalid header [ 301.991816][T10484] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.1627: bg 0: block 7: invalid block bitmap [ 302.022992][T10484] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 302.046693][T10484] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2969: inode #11: comm syz.5.1627: corrupted xattr block 95: invalid header [ 302.068841][T10484] EXT4-fs warning (device loop5): ext4_evict_inode:272: xattr delete (err -117) [ 302.078306][T10484] EXT4-fs (loop5): 1 orphan inode deleted [ 302.086110][T10484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.129300][T10477] loop4: detected capacity change from 0 to 32768 [ 302.191782][T10477] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 302.260169][T10477] XFS (loop4): Ending clean mount [ 302.303496][ T9398] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.758997][ T9024] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 302.950869][T10511] overlayfs: failed to clone upperpath [ 303.543552][T10527] loop4: detected capacity change from 0 to 512 [ 303.616912][T10527] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.4.1640: corrupted xattr block 95: invalid header [ 303.677500][T10527] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.1640: bg 0: block 7: invalid block bitmap [ 303.692936][T10527] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 303.704546][T10527] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2969: inode #11: comm syz.4.1640: corrupted xattr block 95: invalid header [ 303.722162][T10527] EXT4-fs warning (device loop4): ext4_evict_inode:272: xattr delete (err -117) [ 303.732556][T10527] EXT4-fs (loop4): 1 orphan inode deleted [ 303.757099][T10527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.978621][ T9024] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.649899][T10562] : renamed from vlan0 (while UP) [ 306.118489][T10585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1664'. [ 306.523420][T10594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1668'. [ 306.555416][T10594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.779037][T10594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.852670][ T9137] IPVS: starting estimator thread 0... [ 308.970602][T10642] IPVS: using max 19 ests per chain, 45600 per kthread [ 309.046834][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1685'. [ 309.720286][T10658] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1689'. [ 309.755856][T10658] 8021q: adding VLAN 0 to HW filter on device bond2 [ 309.845575][T10658] macvlan2: entered promiscuous mode [ 309.850940][T10658] macvlan2: entered allmulticast mode [ 309.886264][T10658] bond2: entered promiscuous mode [ 309.910200][T10658] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 309.938502][T10658] bond2: left promiscuous mode [ 310.169832][ T27] audit: type=1326 audit(1771356096.776:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.5.1692" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd92a79c629 code=0x0 [ 310.385696][T10677] loop4: detected capacity change from 0 to 512 [ 310.428525][T10677] ext4: Unknown parameter 'rootcontext' [ 310.730822][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1698'. [ 311.431424][ T51] Bluetooth: hci0: hcon ffff8880303cc000 sent 1 < count 32780 [ 311.745725][T10715] overlayfs: failed to clone upperpath [ 312.005925][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1713'. [ 316.091664][T10767] loop5: detected capacity change from 0 to 32768 [ 316.131576][T10767] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1729 (10767) [ 316.222458][T10767] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 316.247163][T10767] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 316.273233][T10767] BTRFS info (device loop5): using free space tree [ 316.470628][T10767] BTRFS info (device loop5): enabling ssd optimizations [ 316.481321][T10767] BTRFS info (device loop5): auto enabling async discard [ 316.702103][ T9398] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 317.125915][T10793] overlayfs: failed to clone upperpath [ 317.315437][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.321779][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.795690][T10816] netlink: 'syz.5.1742': attribute type 1 has an invalid length. [ 317.912386][T10816] 8021q: adding VLAN 0 to HW filter on device bond3 [ 317.993569][T10823] bond3: (slave dummy0): making interface the new active one [ 318.013720][T10823] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 318.087135][T10820] bond3: (slave veth3): Enslaving as an active interface with a down link [ 318.116925][T10816] netlink: 'syz.5.1742': attribute type 10 has an invalid length. [ 318.168486][T10816] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1742'. [ 318.204025][T10816] dummy0: entered promiscuous mode [ 318.250777][T10816] bond3: (slave dummy0): Releasing active interface [ 318.291535][T10816] bond3: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 319.200312][T10852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.231410][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1753'. [ 320.801601][T10857] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.810140][T10857] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.875805][T10857] dummy0: left promiscuous mode [ 321.160134][T10857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.199136][T10857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.488081][T10857] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.497414][T10857] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.506411][T10857] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.516684][T10857] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.908769][T10890] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1768'. [ 322.201016][T10902] netlink: 'syz.4.1772': attribute type 4 has an invalid length. [ 323.024523][ T2129] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 323.123280][T10925] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1783'. [ 323.204760][T10925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.222144][T10925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.254097][ T2129] usb 5-1: Using ep0 maxpacket: 8 [ 323.261241][T10925] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 323.261719][ T2129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 323.293669][T10925] bond0 (unregistering): Released all slaves [ 323.294116][ T2129] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 323.329750][ T2129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.371950][ T2129] usb 5-1: config 0 descriptor?? [ 323.611341][ T2129] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 323.737027][T10937] loop5: detected capacity change from 0 to 512 [ 323.753396][T10937] ext4: Unknown parameter 'rootcontext' [ 323.759879][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1789'. [ 323.781062][T10939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1789'. [ 324.072448][T10948] netlink: 'syz.1.1792': attribute type 4 has an invalid length. [ 324.138234][T10948] netlink: 'syz.1.1792': attribute type 4 has an invalid length. [ 324.209750][ T2129] usb 5-1: USB disconnect, device number 4 [ 324.280697][T10951] loop5: detected capacity change from 0 to 1024 [ 324.308124][T10951] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 325.011969][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1802'. [ 326.030627][T11002] tipc: Failed to remove unknown binding: 66,1,1/0:2087049015/2087049017 [ 326.039764][T11002] tipc: Failed to remove unknown binding: 66,1,1/0:2087049015/2087049017 [ 326.402791][T11006] loop5: detected capacity change from 0 to 4096 [ 326.569159][T11010] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 326.598209][T11006] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 326.634993][T11006] Remounting filesystem read-only [ 328.128461][T11055] loop5: detected capacity change from 0 to 2048 [ 328.189795][T11055] UDF-fs: warning (device loop5): udf_fill_super: No fileset found [ 328.577028][T11073] overlayfs: failed to clone upperpath [ 328.848848][T11083] 0x7fffffffffffffff-0x8000000000000006 : "" [ 328.855071][T11083] mtd: partition "" is out of reach -- disabled [ 328.870998][T11083] ftl_cs: FTL header not found. [ 329.044699][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1843'. [ 329.236992][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1847'. [ 329.680975][T11117] overlayfs: failed to clone lowerpath [ 329.764342][ T2129] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 329.816162][T11121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1855'. [ 329.844765][T11121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1855'. [ 329.954070][ T2129] usb 5-1: Using ep0 maxpacket: 16 [ 329.965528][ T2129] usb 5-1: config 0 has no interfaces? [ 329.973073][ T2129] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 329.984671][ T2129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.004377][ T2129] usb 5-1: config 0 descriptor?? [ 330.078305][T11128] netlink: 'syz.1.1858': attribute type 1 has an invalid length. [ 330.117962][T11128] 8021q: adding VLAN 0 to HW filter on device bond7 [ 330.231308][T11128] bond7: (slave veth5): Enslaving as an active interface with a down link [ 330.242135][T11111] ref_ctr_offset mismatch. inode: 0x34a offset: 0x0 ref_ctr_offset(old): 0x2090100 ref_ctr_offset(new): 0x0 [ 330.257848][ T2129] usb 5-1: USB disconnect, device number 5 [ 330.350361][T11128] bond7: (slave dummy0): making interface the new active one [ 330.362840][T11128] dummy0: entered promiscuous mode [ 330.370262][T11128] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 330.382039][T11134] netlink: 'syz.1.1858': attribute type 10 has an invalid length. [ 330.390325][T11134] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1858'. [ 330.415665][T11134] bond7: (slave dummy0): Releasing active interface [ 330.595297][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1863'. [ 330.611140][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1863'. [ 330.626918][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1863'. [ 330.810723][T11151] tipc: Enabling of bearer rejected, failed to enable media [ 330.984735][T11160] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1869'. [ 331.005174][T11160] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (39), value rounded to 2340 ms [ 331.094222][T11160] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1869'. [ 331.103225][T11160] bond8: peer notification delay (2365) is not a multiple of miimon (39), value rounded to 2340 ms [ 331.153060][T11167] netlink: 'syz.4.1872': attribute type 1 has an invalid length. [ 331.215215][T11167] 8021q: adding VLAN 0 to HW filter on device bond3 [ 331.356853][T11172] bond3: (slave veth3): Enslaving as an active interface with a down link [ 331.390896][T11176] bond3: (slave dummy0): making interface the new active one [ 331.415726][T11176] dummy0: entered promiscuous mode [ 331.421216][T11176] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 331.462529][T11167] netlink: 'syz.4.1872': attribute type 10 has an invalid length. [ 331.514908][T11167] bond3: (slave dummy0): Releasing active interface [ 331.714120][T10878] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 331.904226][T10878] usb 6-1: Using ep0 maxpacket: 32 [ 331.924472][T10878] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 331.933106][T10878] usb 6-1: config 0 has no interface number 0 [ 331.945177][T10878] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 331.963622][T10878] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 331.976075][T10878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.989293][T10878] usb 6-1: Product: syz [ 331.993550][T10878] usb 6-1: Manufacturer: syz [ 332.001089][T10878] usb 6-1: SerialNumber: syz [ 332.016022][T10878] usb 6-1: config 0 descriptor?? [ 332.026448][T11181] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 332.254491][T11181] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 333.010149][T11214] overlayfs: failed to clone upperpath [ 333.870273][T10878] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 333.901882][T10878] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 333.927267][T10878] asix: probe of 6-1:0.188 failed with error -71 [ 333.944246][T11245] binder: 11243:11245 ioctl c0306201 2000000003c0 returned -14 [ 333.954710][T10878] usb 6-1: USB disconnect, device number 3 [ 334.083602][ T27] audit: type=1326 audit(1771356120.686:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11249 comm="syz.4.1905" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bae99c629 code=0x0 [ 334.550960][T11267] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 334.815132][T11275] netlink: 'syz.3.1914': attribute type 1 has an invalid length. [ 334.986811][T11275] 8021q: adding VLAN 0 to HW filter on device bond3 [ 335.005830][T11275] bond2: (slave bond3): making interface the new active one [ 335.020413][T11275] bond2: (slave bond3): Enslaving as an active interface with an up link [ 335.029395][T11284] __nla_validate_parse: 4 callbacks suppressed [ 335.029408][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1916'. [ 335.053160][T11285] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1914'. [ 335.064309][T11285] bond2: entered promiscuous mode [ 335.069498][T11285] bond3: entered promiscuous mode [ 335.075039][T11285] bond2: entered allmulticast mode [ 335.080306][T11285] bond3: entered allmulticast mode [ 335.086799][T11285] 8021q: adding VLAN 0 to HW filter on device bond2 [ 335.094395][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1916'. [ 335.106381][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1916'. [ 336.163565][T11305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1926'. [ 336.192153][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1925'. [ 336.246067][T11304] 8021q: adding VLAN 0 to HW filter on device bond9 [ 338.032260][T11357] 9pnet: Found fid 0 not clunked [ 338.293647][ T5770] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 338.311733][ T1137] Bluetooth: hci4: Frame reassembly failed (-84) [ 338.431598][T11373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1951'. [ 338.481234][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1951'. [ 339.988728][T11423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1966'. [ 340.324706][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 340.331492][ T5770] Bluetooth: hci4: command 0x1003 tx timeout [ 340.575271][T11431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1970'. [ 340.726251][ T2129] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 340.874334][T11433] netlink: 'syz.1.1971': attribute type 10 has an invalid length. [ 340.943471][ T2129] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 75, changing to 10 [ 340.963380][ T2129] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25344, setting to 1024 [ 341.003914][ T2129] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 341.069874][ T2129] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 341.094015][ T2129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.116330][ T2129] usb 6-1: config 0 descriptor?? [ 341.408311][T11435] netlink: 'syz.3.1973': attribute type 1 has an invalid length. [ 341.555993][ T2129] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x6 [ 341.576484][ T2129] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 341.591802][T11442] bond4: (slave veth7): Enslaving as an active interface with a down link [ 341.609310][ T2129] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 341.649747][T11435] bond4: entered promiscuous mode [ 341.655067][T11435] bond4: entered allmulticast mode [ 341.660805][T11435] 8021q: adding VLAN 0 to HW filter on device bond4 [ 341.887924][T11449] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 341.953427][T10878] usb 6-1: USB disconnect, device number 4 [ 343.071981][ T27] audit: type=1326 audit(1771356129.676:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68cd9c629 code=0x7ffc0000 [ 343.105462][ T27] audit: type=1326 audit(1771356129.676:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68cd9c629 code=0x7ffc0000 [ 343.144412][ T27] audit: type=1326 audit(1771356129.676:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa68cd9c629 code=0x7ffc0000 [ 343.215646][ T27] audit: type=1326 audit(1771356129.676:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68cd9c629 code=0x7ffc0000 [ 343.266681][ T27] audit: type=1326 audit(1771356129.676:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68cd9c629 code=0x7ffc0000 [ 343.344055][ T27] audit: type=1326 audit(1771356129.676:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa68cd9c629 code=0x7ffc0000 [ 343.382634][T11467] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1983'. [ 343.399976][ T27] audit: type=1326 audit(1771356129.676:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68cd9c629 code=0x7ffc0000 [ 343.410066][T11468] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 343.439066][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'. [ 343.448354][ T27] audit: type=1326 audit(1771356129.676:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa68cd9c629 code=0x7ffc0000 [ 343.472465][ T27] audit: type=1326 audit(1771356129.676:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68cd9c629 code=0x7ffc0000 [ 343.514166][ T27] audit: type=1326 audit(1771356129.706:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68cd9c629 code=0x7ffc0000 [ 343.582430][T11473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1986'. [ 343.619184][T11475] loop5: detected capacity change from 0 to 1024 [ 344.475986][T11501] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1997'. [ 344.487049][T11501] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1997'. [ 344.566972][T11505] overlayfs: failed to clone upperpath [ 344.747671][T11512] syz_tun: entered allmulticast mode [ 344.781822][T11512] pimreg: entered allmulticast mode [ 344.802525][T11509] syz_tun: left allmulticast mode [ 346.333640][T10878] libceph: connect (1)[c::]:6789 error -22 [ 346.339750][T10878] libceph: mon0 (1)[c::]:6789 connect error [ 346.478594][T11538] ceph: No mds server is up or the cluster is laggy [ 346.902161][T11557] bridge0: entered promiscuous mode [ 346.933016][T11561] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2019'. [ 347.036007][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2022'. [ 347.051681][T11567] bridge_slave_1: left allmulticast mode [ 347.057847][T11567] bridge_slave_1: left promiscuous mode [ 347.063792][T11567] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.103802][T11567] bridge_slave_0: left allmulticast mode [ 347.113880][T11567] bridge_slave_0: left promiscuous mode [ 347.133678][T11567] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.150773][T11596] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2033'. [ 348.418646][T11589] cgroup: fork rejected by pids controller in /syz3 [ 350.361597][T11675] mmap: syz.3.2053 (11675): VmData 50044928 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 351.068440][T11699] netlink: 'syz.4.2062': attribute type 10 has an invalid length. [ 351.109305][T11699] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 353.553120][T11743] overlayfs: failed to clone lowerpath [ 353.964000][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 353.964016][ T27] audit: type=1326 audit(1771356140.566:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11729 comm="syz.4.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bae99c629 code=0x7fc00000 [ 354.203455][ T27] audit: type=1804 audit(1771356140.806:145): pid=11754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2084" name="/newroot/204/bus/bus" dev="overlay" ino=1137 res=1 errno=0 [ 354.236859][T11754] Invalid ELF header magic: != ELF [ 354.323279][T11737] sched: RT throttling activated [ 355.019826][T11777] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.073703][T11777] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.151641][T11777] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.209468][ T5770] Bluetooth: hci3: command 0x0406 tx timeout [ 355.230801][T11777] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.341211][T11777] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.360721][T11777] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.389627][T11777] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.410704][T11777] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.368966][T11813] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2104'. [ 359.882239][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 360.530820][T11854] cgroup: fork rejected by pids controller in /syz1 [ 363.941472][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 363.951764][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 363.966151][ T51] Bluetooth: hci3: hardware error 0x00 [ 364.132165][ T8203] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.142797][ T8203] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.151839][ T8203] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.160423][ T8203] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.172081][ T8203] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 364.186374][ T8203] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.829934][T11909] chnl_net:caif_netlink_parms(): no params data found [ 365.142733][T11909] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.176867][T11909] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.211170][T11909] bridge_slave_0: entered allmulticast mode [ 365.239789][T11909] bridge_slave_0: entered promiscuous mode [ 365.276316][T11909] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.312636][T11909] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.341986][T11909] bridge_slave_1: entered allmulticast mode [ 365.347473][T11929] loop4: detected capacity change from 0 to 40427 [ 365.356955][T11909] bridge_slave_1: entered promiscuous mode [ 365.404224][ T9928] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 365.603530][T11909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.671346][T11929] netlink: 'syz.4.2135': attribute type 10 has an invalid length. [ 365.679727][T11929] dummy0: left promiscuous mode [ 365.694160][T11929] team0: Port device dummy0 added [ 365.702535][T11909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.857009][T11909] team0: Port device team_slave_0 added [ 365.885722][T11909] team0: Port device team_slave_1 added [ 365.936951][T11909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.963841][T11909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.036921][T11909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.061834][T11909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.071782][T11909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.104685][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 366.124144][T11909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.155014][T11936] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2138'. [ 366.254257][ T51] Bluetooth: hci4: command tx timeout [ 366.421812][T11909] hsr_slave_0: entered promiscuous mode [ 366.465118][T11909] hsr_slave_1: entered promiscuous mode [ 366.494067][T11909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.522060][T11909] Cannot create hsr debugfs directory [ 367.040982][T11909] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 367.077285][T11909] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 367.110035][T11909] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 367.136824][T11909] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 367.345649][T11909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.388989][T11909] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.412349][ T1075] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.419576][ T1075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.443463][ T1075] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.450686][ T1075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.656572][T11971] sctp: [Deprecated]: syz.3.2145 (pid 11971) Use of struct sctp_assoc_value in delayed_ack socket option. [ 367.656572][T11971] Use struct sctp_sack_info instead [ 368.053533][T11909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.324672][ T51] Bluetooth: hci4: command tx timeout [ 368.912225][T11909] veth0_vlan: entered promiscuous mode [ 368.966434][T11909] veth1_vlan: entered promiscuous mode [ 369.022546][T12001] tipc: Started in network mode [ 369.031153][T12001] tipc: Node identity 4, cluster identity 4711 [ 369.045332][T12001] tipc: Node number set to 4 [ 369.085425][T11909] veth0_macvtap: entered promiscuous mode [ 369.101648][T11909] veth1_macvtap: entered promiscuous mode [ 369.140663][T11909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.151753][T11909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.162220][T11909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.173226][T11909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.188383][T11909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.199127][T11909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.210698][T11909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.221778][T11909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.223745][T12010] UBIFS error (pid: 12010): cannot open "./file0", error -22 [ 369.231987][T11909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.251930][T11909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.263870][T11909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.323742][T11909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.371970][T11909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.390871][T11909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.417185][T11909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.427550][T11909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.441503][T11909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.453426][T11909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.514919][T11909] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.535321][T11909] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.549025][T11909] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.560147][T11909] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.796755][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.832074][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.925922][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.933786][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.287902][T12028] xt_hashlimit: max too large, truncated to 1048576 [ 370.405059][ T51] Bluetooth: hci4: command tx timeout [ 371.060382][T12053] bridge1: entered promiscuous mode [ 371.066587][T12053] bridge1: entered allmulticast mode [ 371.236315][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2176'. [ 372.484652][ T51] Bluetooth: hci4: command tx timeout [ 373.546225][T12166] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2191'. [ 373.564925][T12122] cgroup: fork rejected by pids controller in /syz6 [ 374.384475][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 374.605638][ T8] usb 5-1: config 0 has no interfaces? [ 374.614462][ T8] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 374.624180][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.632209][ T8] usb 5-1: Product: syz [ 374.642777][ T8] usb 5-1: Manufacturer: syz [ 374.648026][ T8] usb 5-1: SerialNumber: syz [ 374.655172][ T8] usb 5-1: config 0 descriptor?? [ 374.819137][T12205] loop6: detected capacity change from 0 to 4096 [ 374.930369][T12205] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512). [ 374.946097][T12205] ntfs3: loop6: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only. [ 375.241653][T12193] veth0_vlan: left promiscuous mode [ 375.259910][T12193] veth0_vlan: entered promiscuous mode [ 375.587216][T10877] usb 5-1: USB disconnect, device number 6 [ 375.758341][T12221] net_ratelimit: 2 callbacks suppressed [ 375.758356][T12221] Set syz0 is full, maxelem 0 reached [ 376.087481][T12230] loop6: detected capacity change from 0 to 128 [ 376.109862][T12230] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 376.190785][T12230] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8) [ 376.225838][T12230] FAT-fs (loop6): Filesystem has been set read-only [ 376.232655][T12230] FAT-fs (loop6): error, corrupted file size (i_pos 548, 522) [ 376.730357][T12244] team0: Port device team_slave_0 removed [ 376.843633][ T27] audit: type=1326 audit(1771356163.446:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.3.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68cd9c629 code=0x7fc00000 [ 378.530688][T12307] overlayfs: failed to clone upperpath [ 378.706662][T12309] xt_socket: unknown flags 0x4c [ 378.730388][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.737398][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.745049][ T2129] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 380.972203][ T2129] usb 7-1: config 0 has no interfaces? [ 380.986013][ T2129] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 381.001100][ T2129] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.011648][ T2129] usb 7-1: Product: syz [ 381.016029][ T2129] usb 7-1: Manufacturer: syz [ 381.022851][ T2129] usb 7-1: SerialNumber: syz [ 381.038846][ T2129] usb 7-1: config 0 descriptor?? [ 381.683116][T12344] veth0_vlan: left promiscuous mode [ 381.695249][T12344] veth0_vlan: entered promiscuous mode [ 381.980989][ T23] usb 7-1: USB disconnect, device number 2 [ 382.500063][T12344] syz.6.2256 (12344) used greatest stack depth: 18312 bytes left [ 382.563267][T12371] ref_ctr increment failed for inode: 0xb8 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88802daf8980 [ 383.439202][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2272'. [ 384.165923][ T51] Bluetooth: hci0: unexpected event for opcode 0x200a [ 385.677360][T12443] tmpfs: Bad value for 'mpol' [ 385.919805][T12452] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 386.317347][T12462] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2293'. [ 387.682991][T12482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2302'. [ 387.703122][T12482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2302'. [ 387.731936][T12482] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.741064][T12482] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.749481][T12482] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.757753][T12482] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.780603][T12484] netlink: 'syz.3.2301': attribute type 1 has an invalid length. [ 387.826191][T12484] 8021q: adding VLAN 0 to HW filter on device bond5 [ 387.854696][T12485] bond5: (slave bridge0): making interface the new active one [ 387.863343][T12485] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 387.876250][T12482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2302'. [ 387.885270][T12482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2302'. [ 389.161959][T12507] bond6: entered allmulticast mode [ 389.234490][T12507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2310'. [ 389.270630][T12507] bridge5: entered allmulticast mode [ 389.278906][T12507] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 389.423169][T12511] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 392.262330][T12582] sctp: [Deprecated]: syz.1.2339 (pid 12582) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.262330][T12582] Use struct sctp_sack_info instead [ 393.263560][ T8203] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 393.277957][ T8203] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 393.295950][ T8203] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 393.309897][ T8203] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 393.321254][ T8203] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 393.328901][ T8203] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 393.913674][T12600] chnl_net:caif_netlink_parms(): no params data found [ 394.227269][T12600] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.264285][T12600] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.272519][T12600] bridge_slave_0: entered allmulticast mode [ 394.304743][T12600] bridge_slave_0: entered promiscuous mode [ 394.321985][T12600] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.344445][T12600] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.351733][T12600] bridge_slave_1: entered allmulticast mode [ 394.377193][T12600] bridge_slave_1: entered promiscuous mode [ 394.421456][T12600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.433909][T12600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.463717][T12627] netlink: 'syz.1.2355': attribute type 1 has an invalid length. [ 394.472043][T12627] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2355'. [ 394.509614][T12600] team0: Port device team_slave_0 added [ 394.530938][T12600] team0: Port device team_slave_1 added [ 394.637633][T12600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.674811][T12600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.706996][T12600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.724092][T12600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.735587][T12600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.775608][T12600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.788066][T12632] overlayfs: failed to clone upperpath [ 394.877044][T12600] hsr_slave_0: entered promiscuous mode [ 394.894977][T12600] hsr_slave_1: entered promiscuous mode [ 394.903655][T12600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.916505][T12600] Cannot create hsr debugfs directory [ 395.365263][ T51] Bluetooth: hci1: command tx timeout [ 395.464848][T12600] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 395.641889][T12600] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 395.685058][T12640] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 395.874922][T12600] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 395.894810][T12600] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 396.081456][T12600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.120715][T12600] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.135786][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.142995][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.183340][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.190520][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.601036][T12665] syz_tun: entered allmulticast mode [ 396.663778][T12664] syz_tun: left allmulticast mode [ 396.800161][T12600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.356437][T12600] veth0_vlan: entered promiscuous mode [ 397.375758][T12600] veth1_vlan: entered promiscuous mode [ 397.442725][T12600] veth0_macvtap: entered promiscuous mode [ 397.449266][ T51] Bluetooth: hci1: command tx timeout [ 397.470605][T12600] veth1_macvtap: entered promiscuous mode [ 397.507823][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.519942][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.530464][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.545805][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.567395][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.584263][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.603807][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.627828][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.644467][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.667021][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.688615][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.706816][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.726589][T12600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.786767][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.809081][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.823722][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.843189][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.861262][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.878504][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.888752][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.899705][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.911116][T12600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.948079][T12600] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.969421][T12600] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.988857][T12600] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.998323][T12600] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.111296][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.125173][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.202252][T12103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.220342][T12103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.162323][T12727] lo: left promiscuous mode [ 399.188504][T12727] tunl0: entered allmulticast mode [ 399.259047][T12727] gre0: entered allmulticast mode [ 399.358451][T12727] gretap0: entered allmulticast mode [ 399.389193][T12727] erspan0: entered allmulticast mode [ 399.420689][T12727] ip_vti0: entered allmulticast mode [ 399.449132][T12727] ip6_vti0: entered allmulticast mode [ 399.488586][T12727] sit0: entered allmulticast mode [ 399.519583][T12727] ip6tnl0: entered allmulticast mode [ 399.528444][ T51] Bluetooth: hci1: command tx timeout [ 399.552981][T12727] ip6gre0: entered allmulticast mode [ 399.573114][T12727] syz_tun: entered allmulticast mode [ 399.582853][T12727] ip6gretap0: entered allmulticast mode [ 399.602974][T12727] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.610892][T12727] bridge0: entered allmulticast mode [ 399.629167][T12727] bond0: entered allmulticast mode [ 399.635455][T12727] bond_slave_0: entered allmulticast mode [ 399.641309][T12727] bond_slave_1: entered allmulticast mode [ 399.647264][T12727] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 399.669917][T12727] team0: entered allmulticast mode [ 399.675746][T12727] team_slave_1: entered allmulticast mode [ 399.689969][T12727] dummy0: left promiscuous mode [ 399.704205][T12727] dummy0: entered allmulticast mode [ 399.711079][T12727] nlmon0: entered allmulticast mode [ 399.725919][T12727] caif0: entered allmulticast mode [ 399.737326][T12727] batadv0: entered allmulticast mode [ 399.760819][T12727] vxcan0: entered allmulticast mode [ 399.772611][T12727] vxcan1: entered allmulticast mode [ 399.782776][T12727] veth0: entered allmulticast mode [ 399.804342][T12727] veth1: entered allmulticast mode [ 399.823368][T12727] wg1: entered allmulticast mode [ 399.839164][T12727] wg2: entered allmulticast mode [ 399.864950][T12727] veth0_to_bridge: entered allmulticast mode [ 399.938265][T12727] veth1_to_bridge: entered allmulticast mode [ 399.967218][T12727] veth0_to_bond: entered allmulticast mode [ 399.998475][T12727] veth1_to_bond: entered allmulticast mode [ 400.026867][T12727] veth1_to_team: entered allmulticast mode [ 400.056368][T12727] veth0_to_batadv: entered allmulticast mode [ 400.066778][T12727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.081648][T12727] batadv_slave_0: entered allmulticast mode [ 400.111688][T12727] veth1_to_batadv: entered allmulticast mode [ 400.124240][T12727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.138498][T12727] batadv_slave_1: entered allmulticast mode [ 400.160914][T12727] xfrm0: entered allmulticast mode [ 400.182077][T12727] veth0_to_hsr: entered allmulticast mode [ 400.201858][T12727] hsr_slave_0: entered allmulticast mode [ 400.222356][T12727] veth1_to_hsr: entered allmulticast mode [ 400.241879][T12727] hsr_slave_1: entered allmulticast mode [ 400.260468][T12727] hsr0: entered allmulticast mode [ 400.278078][T12727] veth1_virt_wifi: entered allmulticast mode [ 400.296015][T12727] veth0_virt_wifi: entered allmulticast mode [ 400.317173][T12727] veth1_vlan: entered allmulticast mode [ 400.338387][T12727] veth0_vlan: entered allmulticast mode [ 400.361379][T12727] vlan0: entered allmulticast mode [ 400.384155][T12727] vlan1: entered allmulticast mode [ 400.393198][T12727] macvlan0: entered allmulticast mode [ 400.417548][T12727] macvlan1: entered allmulticast mode [ 400.430715][T12727] ipvlan0: entered allmulticast mode [ 400.442911][T12727] ipvlan1: entered allmulticast mode [ 400.449158][T12727] veth1_macvtap: entered allmulticast mode [ 400.467685][T12727] veth0_macvtap: entered allmulticast mode [ 400.486634][T12727] macvtap0: entered allmulticast mode [ 400.510237][T12727] macsec0: entered allmulticast mode [ 400.532682][T12727] geneve0: entered allmulticast mode [ 400.558168][T12727] geneve1: entered allmulticast mode [ 400.581287][T12727] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 400.597998][T12727] bond1: left promiscuous mode [ 400.602833][T12727] bond1: entered allmulticast mode [ 400.608288][T12727] ip6tnl1: entered allmulticast mode [ 400.613666][T12727] bond2: entered allmulticast mode [ 400.620527][T12727] bridge1: entered allmulticast mode [ 400.632982][T12727] netdevsim netdevsim1 eth0: entered allmulticast mode [ 400.643019][T12727] netdevsim netdevsim1 eth1: entered allmulticast mode [ 400.650281][T12727] netdevsim netdevsim1 eth2: entered allmulticast mode [ 400.657489][T12727] netdevsim netdevsim1 eth3: entered allmulticast mode [ 400.665194][T12727] bridge2: entered allmulticast mode [ 400.681384][T12727] bond4: entered allmulticast mode [ 400.690447][T12727] erspan1: entered allmulticast mode [ 400.703207][T12727] bond5: entered allmulticast mode [ 400.708662][T12727] mac80211_hwsim hwsim18 wlan2: entered allmulticast mode [ 400.715955][T12727] veth2: entered allmulticast mode [ 400.721182][T12727] veth3: entered allmulticast mode [ 400.728270][T12727] bond6: entered allmulticast mode [ 400.734619][T12727] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.743096][T12727] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.751639][T12727] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.760212][T12727] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.775190][T12727] geneve2: left promiscuous mode [ 400.787198][T12727] bridge3: entered allmulticast mode [ 400.811745][T12727] bond7: entered allmulticast mode [ 400.825985][T12727] veth4: entered allmulticast mode [ 400.847717][T12727] veth5: entered allmulticast mode [ 400.864173][T12727] bond8: entered allmulticast mode [ 400.878784][T12727] bond9: entered allmulticast mode [ 400.896511][T12727] bridge4: entered allmulticast mode [ 400.912545][T12727] veth6: entered allmulticast mode [ 400.919680][T12727] veth7: entered allmulticast mode [ 400.929787][T12727] macsec1: entered allmulticast mode [ 400.952086][T12727] gre1: entered allmulticast mode [ 400.963857][T12727] vlan2: entered allmulticast mode [ 401.001693][T12727] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.010304][T12727] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.019051][T12727] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.027927][T12727] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.045505][T12727] vxlan0: entered allmulticast mode [ 401.065998][T12744] syz_tun: entered allmulticast mode [ 401.074448][T12744] syz_tun: left allmulticast mode [ 401.605233][ T51] Bluetooth: hci1: command tx timeout [ 401.649868][T12763] pimreg: entered allmulticast mode [ 401.663655][T12763] pimreg: left allmulticast mode [ 402.618888][T12792] netlink: 'syz.3.2409': attribute type 1 has an invalid length. [ 402.839142][T12792] bond7: (slave ip6gretap1): making interface the new active one [ 402.892585][T12792] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 402.921268][T12796] bond7: entered promiscuous mode [ 402.948601][T12796] ip6gretap1: entered promiscuous mode [ 402.963276][T12796] bond7: entered allmulticast mode [ 403.020131][T12808] loop7: detected capacity change from 0 to 512 [ 403.026992][T12796] ip6gretap1: entered allmulticast mode [ 403.047858][T12796] 8021q: adding VLAN 0 to HW filter on device bond7 [ 403.123817][T12808] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.137407][T12808] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.351333][T12600] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.448370][T12817] loop6: detected capacity change from 0 to 2048 [ 403.488988][T12817] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.169079][T12834] sit0: left allmulticast mode [ 404.179608][T12834] netlink: 'syz.1.2422': attribute type 10 has an invalid length. [ 404.198398][T12834] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2422'. [ 404.612034][T12839] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2424'. [ 404.654774][T12840] bridge1: port 1(veth0_to_bond) entered blocking state [ 404.674292][T12847] tipc: Failed to remove unknown binding: 66,0,0/0:591995506/591995507 [ 404.678673][T12840] bridge1: port 1(veth0_to_bond) entered disabled state [ 404.692961][T12847] tipc: Failed to remove unknown binding: 66,0,0/0:591995506/591995507 [ 404.698628][T12840] veth0_to_bond: entered allmulticast mode [ 404.713149][T12840] veth0_to_bond: entered promiscuous mode [ 405.363472][T12867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.309395][T12918] batadv_slave_0: entered promiscuous mode [ 407.328291][T12917] batadv_slave_0: left promiscuous mode [ 408.715042][T12956] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2464'. [ 408.732037][T12958] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2465'. [ 408.858010][T12960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.873327][T12960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.893597][T12960] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 408.918515][T12960] bond0 (unregistering): Released all slaves [ 409.593306][T12992] netlink: 'syz.6.2475': attribute type 4 has an invalid length. [ 409.666911][T12995] netlink: 'syz.6.2475': attribute type 4 has an invalid length. [ 410.460966][T13010] tipc: Started in network mode [ 410.484272][T13010] tipc: Node identity ac14140f, cluster identity 4711 [ 410.496025][T13010] tipc: Enabled bearer , priority 10 [ 410.796839][T13018] bridge_slave_0: left allmulticast mode [ 410.842584][T13018] bridge_slave_0: left promiscuous mode [ 410.854297][T13018] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.256267][T13018] bridge_slave_1: left allmulticast mode [ 411.265773][T13018] bridge_slave_1: left promiscuous mode [ 411.274291][T13018] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.312474][T13018] bond0: (slave bond_slave_0): Releasing backup interface [ 411.395153][T13018] bond0: (slave bond_slave_1): Releasing backup interface [ 411.512023][T13018] team0: Port device team_slave_0 removed [ 411.548960][T13018] team0: Port device team_slave_1 removed [ 411.558248][T13018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.566485][T13018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.586285][T13018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.593886][T13018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.742012][ T5956] tipc: Node number set to 2886997007 [ 411.877420][T13034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.914826][T13034] batadv_slave_0: entered promiscuous mode [ 412.473573][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066ea0000: rx timeout, send abort [ 412.973665][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066ea0400: rx timeout, send abort [ 412.982028][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066ea0000: abort rx timeout. Force session deactivation [ 413.367848][T13053] loop6: detected capacity change from 0 to 128 [ 413.444628][T13053] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 413.481960][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066ea0400: abort rx timeout. Force session deactivation [ 413.536798][T13053] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 413.559039][T13053] ext2 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.756929][T11909] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 413.884841][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061513c00: rx timeout, send abort [ 413.893721][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030901c00: rx timeout, send abort [ 413.904039][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888061513c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 413.921419][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888030901c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 414.651484][T13086] ceph: No mds server is up or the cluster is laggy [ 415.125208][T13113] netlink: 'syz.6.2518': attribute type 10 has an invalid length. [ 415.140977][T13113] netlink: 55 bytes leftover after parsing attributes in process `syz.6.2518'. [ 415.280256][T13123] netlink: 'syz.1.2521': attribute type 1 has an invalid length. [ 415.355218][T13125] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2522'. [ 415.433578][T13125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 415.485311][T13128] 8021q: adding VLAN 0 to HW filter on device bond10 [ 415.493787][T13128] bond0: (slave bond10): making interface the new active one [ 415.502373][T13128] bond0: (slave bond10): Enslaving as an active interface with an up link [ 415.541253][T13129] macvlan0: entered promiscuous mode [ 415.585508][T13129] team_slave_0: entered promiscuous mode [ 415.591694][T13129] team_slave_1: entered promiscuous mode [ 415.614423][T13129] team0: entered promiscuous mode [ 415.620950][T13129] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 415.645181][T13129] bond1: (slave macvlan0): Enslaving as an active interface with an up link [ 415.706591][T13123] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 415.715726][T13128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2521'. [ 415.757912][T13128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.041504][T13141] netlink: 'syz.1.2527': attribute type 4 has an invalid length. [ 416.070542][T13141] netlink: 'syz.1.2527': attribute type 4 has an invalid length. [ 416.787755][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2533'. [ 416.824897][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2533'. [ 416.844467][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2533'. [ 416.875362][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2533'. [ 416.892254][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2533'. [ 417.027032][T13161] (unnamed net_device) (uninitialized): up delay (129) is not a multiple of miimon (9), value rounded to 126 ms [ 417.136171][T13161] bond11: entered allmulticast mode [ 417.151574][T13164] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2535'. [ 417.243495][T13165] bridge5: entered allmulticast mode [ 417.304602][T13165] bond11: (slave bridge5): Enslaving as an active interface with an up link [ 418.760775][T13189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2541'. [ 419.369033][T13202] bridge_slave_0: left promiscuous mode [ 419.418508][T13202] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.526497][T13202] bridge_slave_1: left promiscuous mode [ 419.669059][T13202] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.744011][T13202] team0: Port device team_slave_1 removed [ 419.773379][T13202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.808922][T13202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.819977][T13202] bond6: (slave geneve2): Releasing active interface [ 419.839152][T13202] bond7: (slave veth5): Releasing active interface [ 419.849778][T13202] bond0: (slave bond10): Releasing backup interface [ 419.866052][T13202] bond0: (slave bond10): the permanent HWaddr of slave - 66:93:7a:f4:3d:18 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 419.906973][T13202] bond0: (slave gretap1): making interface the new active one [ 419.939982][T13202] bond0: (slave gretap1): Releasing backup interface [ 419.964769][T13202] bond11: (slave bridge5): Releasing backup interface [ 419.966218][T13210] [ 419.973752][T13202] bridge5: left allmulticast mode [ 420.100781][ T49] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.279422][ T49] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.381361][T13228] overlayfs: failed to clone upperpath [ 420.387911][ T49] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.535824][ T49] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.198631][ T49] tipc: Left network mode [ 421.200254][T13245] (null): rxe_set_mtu: Set mtu to 1024 [ 421.338814][T13249] bridge_slave_0: left allmulticast mode [ 421.384233][T13249] bridge_slave_0: left promiscuous mode [ 421.390326][T13249] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.419290][T13249] bridge_slave_1: left allmulticast mode [ 421.463612][T13249] bridge_slave_1: left promiscuous mode [ 421.484293][T13249] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.511050][T13249] veth0_to_bond: left allmulticast mode [ 421.554582][T13249] veth0_to_bond: left promiscuous mode [ 421.582685][T13249] bridge1: port 1(veth0_to_bond) entered disabled state [ 421.607834][T13249] bond0: (slave bond_slave_0): Releasing backup interface [ 421.639556][T13249] bond0: (slave bond_slave_1): Releasing backup interface [ 421.670394][T13249] team_slave_0: left promiscuous mode [ 421.718683][T13249] team0: Port device team_slave_0 removed [ 421.740871][T13249] team_slave_1: left promiscuous mode [ 421.781542][T13249] team0: Port device team_slave_1 removed [ 421.792409][T13249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.810259][T13249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.819672][T13249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.861510][T13249] bond1: (slave macvlan0): Releasing backup interface [ 421.878242][T13249] team0: left promiscuous mode [ 422.705727][T13245] infiniband syz1: set active [ 422.710904][T13245] infiniband syz1: added syz_tun [ 422.717998][T13273] batadv_slave_0: entered promiscuous mode [ 422.754014][T13245] syz1: rxe_create_cq: returned err = -12 [ 422.762937][T13245] infiniband syz1: Couldn't create ib_mad CQ [ 422.809573][T13245] infiniband syz1: Couldn't open port 1 [ 422.936670][T13245] RDS/IB: syz1: added [ 422.952801][T13245] smc: adding ib device syz1 with port count 1 [ 422.976593][T13245] smc: ib device syz1 port 1 has pnetid [ 423.193121][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2568'. [ 424.207973][ T49] bond0: (slave wlan1): Releasing backup interface [ 428.703038][ T49] hsr_slave_0: left promiscuous mode [ 428.709887][ T49] hsr_slave_1: left promiscuous mode [ 428.737700][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.764216][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.820393][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.844860][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.865746][ T49] bridge_slave_1: left allmulticast mode [ 428.871448][ T49] bridge_slave_1: left promiscuous mode [ 428.892645][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.933804][ T49] bridge_slave_0: left allmulticast mode [ 428.939776][ T49] bridge_slave_0: left promiscuous mode [ 428.951757][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.081090][ T49] veth1_macvtap: left promiscuous mode [ 429.098985][ T49] veth0_macvtap: left promiscuous mode [ 429.382718][ T49] pimreg (unregistering): left allmulticast mode [ 429.596158][ T49] bond3 (unregistering): (slave veth3): Releasing active interface [ 429.927718][ T49] bond3 (unregistering): Released all slaves [ 429.968013][T13419] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2595'. [ 430.036643][T13420] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2595'. [ 430.106925][T13421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2595'. [ 430.214365][ T49] bond2 (unregistering): Released all slaves [ 430.240704][ T49] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 430.260818][ T49] bridge1 (unregistering): left promiscuous mode [ 430.510751][ T49] bond1 (unregistering): Released all slaves [ 432.185007][ T49] team0 (unregistering): Port device team_slave_1 removed [ 432.264085][ T49] team0 (unregistering): Port device team_slave_0 removed [ 432.334617][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.453167][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.967694][ T49] team0 (unregistering): Port device dummy0 removed [ 433.051879][ T49] bond0 (unregistering): Released all slaves [ 433.190296][T13399] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 433.197608][T13399] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 433.548521][T13458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2607'. [ 433.593956][T13458] ip6gre1: entered promiscuous mode [ 433.614873][T13458] ip6gre1: entered allmulticast mode [ 433.794134][T13460] netlink: 'syz.1.2607': attribute type 6 has an invalid length. [ 433.825030][T13460] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2607'. [ 434.435060][T13489] loop7: detected capacity change from 0 to 2048 [ 434.492861][T13489] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 434.580028][T13489] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 434.716041][T13505] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2621'. [ 434.912346][T13509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2622'. [ 435.025447][T13511] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 435.358533][T13534] netlink: 'syz.3.2629': attribute type 1 has an invalid length. [ 435.400521][T13534] bond8: entered promiscuous mode [ 435.420224][T13534] 8021q: adding VLAN 0 to HW filter on device bond8 [ 435.526531][T13541] bond8: (slave veth9): making interface the new active one [ 435.544125][T13541] veth9: entered promiscuous mode [ 435.550703][T13541] bond8: (slave veth9): Enslaving as an active interface with an up link [ 435.851422][T13553] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2633'. [ 435.924992][T13558] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2633'. [ 438.575200][T13626] loop6: detected capacity change from 0 to 512 [ 438.589764][T13626] EXT4-fs (loop6): Test dummy encryption mode enabled [ 438.606314][T13626] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 438.688288][T13626] EXT4-fs error (device loop6): ext4_orphan_get:1424: comm syz.6.2650: bad orphan inode 131083 [ 438.765952][T13626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.779440][T13633] overlayfs: failed to clone upperpath [ 439.342343][T11909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.988917][T13667] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 440.170145][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.177166][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.315307][T13672] netlink: 'syz.3.2663': attribute type 39 has an invalid length. [ 440.638189][T13684] fuse: Bad value for 'fd' [ 440.755026][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2671'. [ 440.773189][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2671'. [ 440.787466][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2671'. [ 440.797780][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2671'. [ 440.961110][ T5956] IPVS: starting estimator thread 0... [ 440.969727][T13697] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 441.074753][T13698] IPVS: using max 36 ests per chain, 86400 per kthread [ 443.199664][T13714] fuse: Bad value for 'fd' [ 443.239778][T13716] overlayfs: failed to clone upperpath [ 445.548525][T13771] overlayfs: failed to resolve './file2': -2 [ 446.344817][T13751] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2686'. [ 446.391671][T13751] lo: entered promiscuous mode [ 446.411368][T13751] lo: entered allmulticast mode [ 447.997077][T13830] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2710'. [ 448.245770][ T27] audit: type=1326 audit(1771356746.860:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13837 comm="syz.1.2712" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2da6d9c629 code=0x0 [ 448.630381][T13853] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2716'. [ 448.966409][T13871] netlink: 'syz.3.2720': attribute type 13 has an invalid length. [ 449.136919][ T27] audit: type=1326 audit(1771356747.740:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13873 comm="syz.7.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25659c629 code=0x7ffc0000 [ 449.207080][ T27] audit: type=1326 audit(1771356747.750:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13873 comm="syz.7.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25659c629 code=0x7ffc0000 [ 449.285042][ T27] audit: type=1326 audit(1771356747.750:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13873 comm="syz.7.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7fc25659c629 code=0x7ffc0000 [ 449.311742][ T27] audit: type=1326 audit(1771356747.750:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13873 comm="syz.7.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25659c629 code=0x7ffc0000 [ 449.334587][ T27] audit: type=1326 audit(1771356747.750:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13873 comm="syz.7.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fc25659c629 code=0x7ffc0000 [ 449.369007][T13871] infiniband syz1: set down [ 449.395511][ T27] audit: type=1326 audit(1771356747.750:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13873 comm="syz.7.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25659c629 code=0x7ffc0000 [ 449.471275][ T27] audit: type=1326 audit(1771356747.770:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13873 comm="syz.7.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fc25659c629 code=0x7ffc0000 [ 449.533417][ T27] audit: type=1326 audit(1771356747.770:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13873 comm="syz.7.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25659c629 code=0x7ffc0000 [ 449.592439][ T27] audit: type=1326 audit(1771356747.770:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13873 comm="syz.7.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25659c629 code=0x7ffc0000 [ 449.925244][T13871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.536457][T13871] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.559167][T13871] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.573987][T13871] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.602800][T13871] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.125011][T13875] kthread_run failed with err -4 [ 451.326087][T13897] netlink: 'syz.6.2726': attribute type 1 has an invalid length. [ 451.401462][T13902] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2728'. [ 451.769651][T13905] bond3: entered promiscuous mode [ 451.781899][T13905] bond3: entered allmulticast mode [ 451.794740][T13905] 8021q: adding VLAN 0 to HW filter on device bond3 [ 451.846805][T13897] bridge4: entered promiscuous mode [ 451.875374][T13897] bridge4: entered allmulticast mode [ 451.886423][T13897] bond3: (slave bridge4): Enslaving as a backup interface with an up link [ 451.903944][ T3532] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 452.051775][ T11] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 452.121538][T13932] IPv6: NLM_F_CREATE should be specified when creating new route [ 452.173722][T13933] netlink: 'syz.6.2736': attribute type 39 has an invalid length. [ 453.480841][T13960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2744'. [ 453.568902][T13955] loop6: detected capacity change from 0 to 8192 [ 453.610075][T13955] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 454.144574][T13983] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 454.275442][T10878] Process accounting resumed [ 454.384119][ T28] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 454.589943][ T28] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 454.609714][ T28] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.630763][ T28] usb 7-1: Product: syz [ 454.647803][ T28] usb 7-1: Manufacturer: syz [ 454.658874][ T28] usb 7-1: SerialNumber: syz [ 454.896586][ T28] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 454.936962][ T28] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 455.523760][T14035] fuse: Bad value for 'fd' [ 455.526536][T14036] overlayfs: failed to resolve './file2': -2 [ 455.838153][T14042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.880753][T10875] wlan1: authenticate with 08:02:11:00:00:00 [ 455.928792][T14042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.933568][T10875] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 455.974340][T12109] wlan1: authenticated [ 455.986165][T10875] mac80211_hwsim hwsim22 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 456.017745][T12109] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 456.037776][T12109] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 456.045643][T14047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.064756][T12109] wlan1: associated [ 456.392560][ T28] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -71 [ 456.412114][ T28] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 456.423670][ T28] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 456.456588][ T28] lan78xx: probe of 7-1:1.0 failed with error -71 [ 456.484335][ T28] usb 7-1: USB disconnect, device number 3 [ 458.489060][T14135] netlink: 'syz.3.2784': attribute type 1 has an invalid length. [ 458.561298][T14135] bond9: entered promiscuous mode [ 458.594472][T14135] bond9: entered allmulticast mode [ 458.683301][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2784'. [ 458.707136][T14137] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 458.902763][T14137] bond9: (slave bridge7): making interface the new active one [ 458.923767][T14137] bridge7: entered promiscuous mode [ 458.944493][T14137] bridge7: entered allmulticast mode [ 459.013553][T14137] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 459.119243][T14135] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2784'. [ 459.252019][T14135] bond9: left promiscuous mode [ 459.298743][T14135] bridge7: left promiscuous mode [ 459.486459][T14135] bond9: left allmulticast mode [ 460.227140][T14135] bridge7: left allmulticast mode [ 460.269702][T14135] 8021q: adding VLAN 0 to HW filter on device bond9 [ 461.325151][T14170] bridge_slave_0: entered promiscuous mode [ 465.191354][T14204] loop6: detected capacity change from 0 to 1024 [ 465.315245][T14204] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.556295][T14204] EXT4-fs (loop6): pa ffff88805dd3acb0: logic 8192, phys. 161, len 21 [ 465.565419][T14204] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5388: group 0, free 20, pa_free 9 [ 465.636348][T14204] EXT4-fs (loop6): pa ffff88805dccacb0: logic 8192, phys. 193, len 19 [ 465.645649][T14204] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5388: group 0, free 17, pa_free 11 [ 465.902759][T11909] EXT4-fs error (device loop6): mb_free_blocks:1954: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 465.973429][T11909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.828351][T14220] netlink: 'syz.1.2808': attribute type 13 has an invalid length. [ 467.149252][T14218] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2810'. [ 467.169395][T14226] netlink: 'syz.6.2812': attribute type 1 has an invalid length. [ 467.207975][T14226] 8021q: adding VLAN 0 to HW filter on device bond4 [ 467.215531][T14230] bond4: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 467.254869][T14230] bond4: entered allmulticast mode [ 467.300733][T14226] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 469.364795][T14252] loop6: detected capacity change from 0 to 2048 [ 469.463615][T14252] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.511631][T14252] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 469.551578][T14252] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 469.575701][T14252] EXT4-fs (loop6): This should not happen!! Data will be lost [ 469.575701][T14252] [ 469.589122][T14252] EXT4-fs (loop6): Total free blocks count 0 [ 469.617780][T14252] EXT4-fs (loop6): Free/Dirty block details [ 469.632780][T14252] EXT4-fs (loop6): free_blocks=2415919504 [ 469.667246][T14252] EXT4-fs (loop6): dirty_blocks=16 [ 469.702973][T14252] EXT4-fs (loop6): Block reservation details [ 469.728574][T14266] netlink: 'syz.7.2822': attribute type 13 has an invalid length. [ 469.744290][T14252] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 470.243721][T11909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.728580][T14266] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.737745][T14266] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.746803][T14266] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.755749][T14266] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.818736][T14266] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 472.201781][T14299] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2828'. [ 472.699197][ T8203] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 472.716140][ T8203] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 472.729111][ T8203] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 472.738339][ T8203] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 472.748247][ T8203] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 472.756550][ T8203] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 473.284882][T14310] chnl_net:caif_netlink_parms(): no params data found [ 474.152508][T14310] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.184188][T14310] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.214348][T14310] bridge_slave_0: entered allmulticast mode [ 474.241378][T14310] bridge_slave_0: entered promiscuous mode [ 474.258620][T14310] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.265940][T14310] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.273128][T14310] bridge_slave_1: entered allmulticast mode [ 474.280860][T14310] bridge_slave_1: entered promiscuous mode [ 474.313861][T14310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.334561][T14310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.391677][T14310] team0: Port device team_slave_0 added [ 474.405121][T14310] team0: Port device team_slave_1 added [ 474.435373][T14310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.442431][T14310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.471382][T14310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.484877][T14310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.491938][T14310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.526513][T14310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.586640][T14310] hsr_slave_0: entered promiscuous mode [ 474.593563][T14310] hsr_slave_1: entered promiscuous mode [ 474.600547][T14310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.608505][T14310] Cannot create hsr debugfs directory [ 474.815377][ T51] Bluetooth: hci3: command tx timeout [ 474.886380][T14310] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 474.906845][T14310] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 474.927192][T14310] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 474.947307][T14310] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 475.086149][T14310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.135127][T14310] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.161160][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.168360][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.188945][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.196097][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.349840][T14344] ================================================================== [ 475.357945][T14344] BUG: KASAN: slab-out-of-bounds in fib6_add+0x4680/0x46e0 [ 475.365179][T14344] Read of size 1 at addr ffff88814b99edce by task syz.1.2847/14344 [ 475.373069][T14344] [ 475.375402][T14344] CPU: 0 PID: 14344 Comm: syz.1.2847 Not tainted syzkaller #0 [ 475.382857][T14344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 475.392910][T14344] Call Trace: [ 475.396183][T14344] [ 475.399104][T14344] dump_stack_lvl+0x18c/0x250 [ 475.403777][T14344] ? __lock_acquire+0x7d40/0x7d40 [ 475.408793][T14344] ? show_regs_print_info+0x20/0x20 [ 475.413991][T14344] ? load_image+0x400/0x400 [ 475.418484][T14344] ? __virt_addr_valid+0x469/0x540 [ 475.423583][T14344] print_report+0xa8/0x210 [ 475.427990][T14344] ? fib6_add+0x4680/0x46e0 [ 475.432483][T14344] kasan_report+0x117/0x150 [ 475.436975][T14344] ? fib6_add+0x4680/0x46e0 [ 475.441471][T14344] fib6_add+0x4680/0x46e0 [ 475.445799][T14344] ? fib6_update_sernum_stub+0x1e0/0x1e0 [ 475.451424][T14344] ? do_raw_spin_lock+0x11f/0x2c0 [ 475.456450][T14344] ? __rwlock_init+0x150/0x150 [ 475.461205][T14344] ? ip6_route_add+0x75/0x160 [ 475.465871][T14344] ip6_route_add+0x8a/0x160 [ 475.470362][T14344] inet6_rtm_newroute+0x2ba/0x1c90 [ 475.475468][T14344] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 475.481359][T14344] ? __mutex_trylock_common+0x159/0x260 [ 475.486894][T14344] ? trace_raw_output_contention_end+0xd0/0xd0 [ 475.493052][T14344] ? rcu_is_watching+0x15/0xb0 [ 475.497812][T14344] ? trace_contention_end+0x39/0xe0 [ 475.503012][T14344] ? __mutex_lock+0x315/0xcc0 [ 475.507704][T14344] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 475.512818][T14344] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 475.517924][T14344] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 475.523817][T14344] rtnetlink_rcv_msg+0x869/0xfa0 [ 475.528750][T14344] ? rtnetlink_bind+0x80/0x80 [ 475.533414][T14344] ? mark_lock+0x94/0x320 [ 475.537733][T14344] ? __lock_acquire+0x1273/0x7d40 [ 475.542745][T14344] ? __kernel_text_address+0xd/0x30 [ 475.547933][T14344] ? mark_lock+0x94/0x320 [ 475.552251][T14344] ? mark_lock+0x94/0x320 [ 475.556570][T14344] ? __lock_acquire+0x1273/0x7d40 [ 475.561589][T14344] ? kmalloc_reserve+0x95/0x240 [ 475.566432][T14344] ? verify_lock_unused+0x140/0x140 [ 475.571641][T14344] ? verify_lock_unused+0x140/0x140 [ 475.576854][T14344] netlink_rcv_skb+0x241/0x4d0 [ 475.581626][T14344] ? rtnetlink_bind+0x80/0x80 [ 475.586302][T14344] ? netlink_ack+0x1180/0x1180 [ 475.591065][T14344] ? __lock_acquire+0x7d40/0x7d40 [ 475.596079][T14344] ? net_generic+0x1e/0x240 [ 475.600574][T14344] ? netlink_deliver_tap+0x2e/0x1b0 [ 475.605768][T14344] netlink_unicast+0x751/0x8d0 [ 475.610527][T14344] netlink_sendmsg+0x8d0/0xbf0 [ 475.615283][T14344] ? netlink_getsockopt+0x590/0x590 [ 475.620476][T14344] ? aa_sock_msg_perm+0x94/0x150 [ 475.625401][T14344] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 475.630676][T14344] ? security_socket_sendmsg+0x80/0xa0 [ 475.636120][T14344] ? netlink_getsockopt+0x590/0x590 [ 475.641309][T14344] ____sys_sendmsg+0x5ba/0x960 [ 475.646063][T14344] ? __asan_memset+0x22/0x40 [ 475.650639][T14344] ? __sys_sendmsg_sock+0x30/0x30 [ 475.655651][T14344] ? __import_iovec+0x5f2/0x850 [ 475.660497][T14344] ? import_iovec+0x73/0xa0 [ 475.664991][T14344] ___sys_sendmsg+0x2a6/0x360 [ 475.669655][T14344] ? __sys_sendmsg+0x2a0/0x2a0 [ 475.674417][T14344] __se_sys_sendmsg+0x1c2/0x2b0 [ 475.679251][T14344] ? __x64_sys_sendmsg+0x80/0x80 [ 475.684181][T14344] ? lockdep_hardirqs_on+0x98/0x150 [ 475.689363][T14344] do_syscall_64+0x55/0xa0 [ 475.693768][T14344] ? clear_bhb_loop+0x40/0x90 [ 475.698431][T14344] ? clear_bhb_loop+0x40/0x90 [ 475.703110][T14344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.709001][T14344] RIP: 0033:0x7f2da6d9c629 [ 475.713435][T14344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.733041][T14344] RSP: 002b:00007f2da7ce6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.741449][T14344] RAX: ffffffffffffffda RBX: 00007f2da7015fa0 RCX: 00007f2da6d9c629 [ 475.749406][T14344] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000004 [ 475.757371][T14344] RBP: 00007f2da6e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 475.765331][T14344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.773306][T14344] R13: 00007f2da7016038 R14: 00007f2da7015fa0 R15: 00007ffd3b58d7b8 [ 475.781314][T14344] [ 475.784336][T14344] [ 475.786655][T14344] Allocated by task 6170: [ 475.790967][T14344] kasan_set_track+0x4e/0x70 [ 475.795549][T14344] __kasan_kmalloc+0x8f/0xa0 [ 475.800128][T14344] __kmalloc+0xb4/0x230 [ 475.804275][T14344] fib6_info_alloc+0x30/0xf0 [ 475.808861][T14344] ip6_route_info_create+0x44f/0x1240 [ 475.814216][T14344] ip6_route_add+0x28/0x160 [ 475.818709][T14344] inet6_rtm_newroute+0x2ba/0x1c90 [ 475.823806][T14344] rtnetlink_rcv_msg+0x869/0xfa0 [ 475.828729][T14344] netlink_rcv_skb+0x241/0x4d0 [ 475.833483][T14344] netlink_unicast+0x751/0x8d0 [ 475.838234][T14344] netlink_sendmsg+0x8d0/0xbf0 [ 475.842983][T14344] ____sys_sendmsg+0x5ba/0x960 [ 475.847729][T14344] ___sys_sendmsg+0x2a6/0x360 [ 475.852392][T14344] __se_sys_sendmsg+0x1c2/0x2b0 [ 475.857225][T14344] do_syscall_64+0x55/0xa0 [ 475.861628][T14344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.867506][T14344] [ 475.869812][T14344] Last potentially related work creation: [ 475.875508][T14344] kasan_save_stack+0x3e/0x60 [ 475.880183][T14344] __kasan_record_aux_stack+0xaf/0xc0 [ 475.885543][T14344] insert_work+0x3d/0x310 [ 475.889859][T14344] __queue_work+0xc39/0x1020 [ 475.894433][T14344] queue_work_on+0x128/0x1f0 [ 475.899008][T14344] call_usermodehelper_exec+0x284/0x4b0 [ 475.904538][T14344] kobject_uevent_env+0x681/0x8b0 [ 475.909635][T14344] version_sysfs_builtin+0x8b/0xd0 [ 475.914731][T14344] param_sysfs_builtin_init+0x28/0x30 [ 475.920084][T14344] do_one_initcall+0x242/0x790 [ 475.924833][T14344] do_initcall_level+0x137/0x1f0 [ 475.929757][T14344] do_initcalls+0x69/0xd0 [ 475.934077][T14344] kernel_init_freeable+0x3ed/0x580 [ 475.939263][T14344] kernel_init+0x1d/0x1c0 [ 475.943580][T14344] ret_from_fork+0x48/0x80 [ 475.947983][T14344] ret_from_fork_asm+0x11/0x20 [ 475.952733][T14344] [ 475.955038][T14344] The buggy address belongs to the object at ffff88814b99ed00 [ 475.955038][T14344] which belongs to the cache kmalloc-192 of size 192 [ 475.969075][T14344] The buggy address is located 22 bytes to the right of [ 475.969075][T14344] allocated 184-byte region [ffff88814b99ed00, ffff88814b99edb8) [ 475.983638][T14344] [ 475.985947][T14344] The buggy address belongs to the physical page: [ 475.992373][T14344] page:ffffea00052e6780 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88814b99e500 pfn:0x14b99e [ 476.003911][T14344] flags: 0x57ff00000000800(slab|node=1|zone=2|lastcpupid=0x7ff) [ 476.011550][T14344] page_type: 0xffffffff() [ 476.015880][T14344] raw: 057ff00000000800 ffff888017c41a00 ffffea00050ad290 ffffea00052e3e50 [ 476.024452][T14344] raw: ffff88814b99e500 0000000000100002 00000001ffffffff 0000000000000000 [ 476.033015][T14344] page dumped because: kasan: bad access detected [ 476.039419][T14344] page_owner tracks the page as allocated [ 476.045123][T14344] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 12661870201, free_ts 11020273611 [ 476.062652][T14344] post_alloc_hook+0x1c1/0x200 [ 476.067412][T14344] get_page_from_freelist+0x1951/0x19e0 [ 476.072946][T14344] __alloc_pages+0x1f0/0x460 [ 476.077517][T14344] alloc_page_interleave+0x24/0x1e0 [ 476.082696][T14344] alloc_slab_page+0x5d/0x160 [ 476.087364][T14344] new_slab+0x87/0x2d0 [ 476.091427][T14344] ___slab_alloc+0xc5d/0x12f0 [ 476.096107][T14344] __kmem_cache_alloc_node+0x19e/0x250 [ 476.101564][T14344] kmalloc_trace+0x2a/0xe0 [ 476.105973][T14344] call_usermodehelper_setup+0x8e/0x260 [ 476.111521][T14344] __request_module+0x3bb/0x600 [ 476.116360][T14344] lowpan_module_init+0x57/0xa0 [ 476.121250][T14344] do_one_initcall+0x242/0x790 [ 476.126004][T14344] do_initcall_level+0x137/0x1f0 [ 476.130927][T14344] do_initcalls+0x69/0xd0 [ 476.135237][T14344] kernel_init_freeable+0x3ed/0x580 [ 476.140421][T14344] page last free stack trace: [ 476.145076][T14344] free_unref_page_prepare+0x7b2/0x8c0 [ 476.150520][T14344] free_unref_page+0x32/0x2e0 [ 476.155184][T14344] vfree+0x1a6/0x320 [ 476.159064][T14344] tpg_free+0x52/0x420 [ 476.163117][T14344] vivid_dev_release+0xb9/0x120 [ 476.167954][T14344] v4l2_device_put+0x7b/0xc0 [ 476.172532][T14344] vivid_probe+0x409d/0x5c80 [ 476.177108][T14344] platform_probe+0x13b/0x1c0 [ 476.181771][T14344] really_probe+0x25b/0xb20 [ 476.186256][T14344] __driver_probe_device+0x18c/0x330 [ 476.191527][T14344] driver_probe_device+0x4f/0x420 [ 476.196537][T14344] __driver_attach+0x44e/0x6e0 [ 476.201288][T14344] bus_for_each_dev+0x235/0x2b0 [ 476.206127][T14344] bus_add_driver+0x340/0x630 [ 476.210800][T14344] driver_register+0x23a/0x310 [ 476.215548][T14344] vivid_init+0x3d/0x70 [ 476.219689][T14344] [ 476.222000][T14344] Memory state around the buggy address: [ 476.227610][T14344] ffff88814b99ec80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 476.235652][T14344] ffff88814b99ed00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.243692][T14344] >ffff88814b99ed80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 476.251732][T14344] ^ [ 476.258125][T14344] ffff88814b99ee00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 476.266173][T14344] ffff88814b99ee80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 476.274216][T14344] ================================================================== [ 476.282483][T14344] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 476.289683][T14344] CPU: 0 PID: 14344 Comm: syz.1.2847 Not tainted syzkaller #0 [ 476.297148][T14344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 476.307216][T14344] Call Trace: [ 476.310509][T14344] [ 476.313442][T14344] dump_stack_lvl+0x18c/0x250 [ 476.318140][T14344] ? show_regs_print_info+0x20/0x20 [ 476.323345][T14344] ? load_image+0x400/0x400 [ 476.327847][T14344] panic+0x2dc/0x730 [ 476.331732][T14344] ? bpf_jit_dump+0xd0/0xd0 [ 476.336230][T14344] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 476.342111][T14344] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 476.347991][T14344] ? _raw_spin_unlock+0x40/0x40 [ 476.352824][T14344] ? print_memory_metadata+0x314/0x400 [ 476.358270][T14344] ? fib6_add+0x4680/0x46e0 [ 476.362761][T14344] check_panic_on_warn+0x84/0xa0 [ 476.367684][T14344] ? fib6_add+0x4680/0x46e0 [ 476.372177][T14344] end_report+0x6f/0x130 [ 476.376406][T14344] kasan_report+0x128/0x150 [ 476.380911][T14344] ? fib6_add+0x4680/0x46e0 [ 476.385404][T14344] fib6_add+0x4680/0x46e0 [ 476.389732][T14344] ? fib6_update_sernum_stub+0x1e0/0x1e0 [ 476.395366][T14344] ? do_raw_spin_lock+0x11f/0x2c0 [ 476.400392][T14344] ? __rwlock_init+0x150/0x150 [ 476.405154][T14344] ? ip6_route_add+0x75/0x160 [ 476.409827][T14344] ip6_route_add+0x8a/0x160 [ 476.414325][T14344] inet6_rtm_newroute+0x2ba/0x1c90 [ 476.419451][T14344] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 476.425337][T14344] ? __mutex_trylock_common+0x159/0x260 [ 476.430874][T14344] ? trace_raw_output_contention_end+0xd0/0xd0 [ 476.437014][T14344] ? rcu_is_watching+0x15/0xb0 [ 476.441764][T14344] ? trace_contention_end+0x39/0xe0 [ 476.446946][T14344] ? __mutex_lock+0x315/0xcc0 [ 476.451624][T14344] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 476.456724][T14344] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 476.461837][T14344] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 476.467741][T14344] rtnetlink_rcv_msg+0x869/0xfa0 [ 476.472688][T14344] ? rtnetlink_bind+0x80/0x80 [ 476.477356][T14344] ? mark_lock+0x94/0x320 [ 476.481674][T14344] ? __lock_acquire+0x1273/0x7d40 [ 476.486687][T14344] ? __kernel_text_address+0xd/0x30 [ 476.491877][T14344] ? mark_lock+0x94/0x320 [ 476.496191][T14344] ? mark_lock+0x94/0x320 [ 476.500524][T14344] ? __lock_acquire+0x1273/0x7d40 [ 476.505626][T14344] ? kmalloc_reserve+0x95/0x240 [ 476.510468][T14344] ? verify_lock_unused+0x140/0x140 [ 476.515666][T14344] ? verify_lock_unused+0x140/0x140 [ 476.520888][T14344] netlink_rcv_skb+0x241/0x4d0 [ 476.525653][T14344] ? rtnetlink_bind+0x80/0x80 [ 476.530324][T14344] ? netlink_ack+0x1180/0x1180 [ 476.535084][T14344] ? __lock_acquire+0x7d40/0x7d40 [ 476.540101][T14344] ? net_generic+0x1e/0x240 [ 476.544593][T14344] ? netlink_deliver_tap+0x2e/0x1b0 [ 476.549782][T14344] netlink_unicast+0x751/0x8d0 [ 476.554541][T14344] netlink_sendmsg+0x8d0/0xbf0 [ 476.559298][T14344] ? netlink_getsockopt+0x590/0x590 [ 476.564484][T14344] ? aa_sock_msg_perm+0x94/0x150 [ 476.569408][T14344] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 476.574688][T14344] ? security_socket_sendmsg+0x80/0xa0 [ 476.580134][T14344] ? netlink_getsockopt+0x590/0x590 [ 476.585322][T14344] ____sys_sendmsg+0x5ba/0x960 [ 476.590095][T14344] ? __asan_memset+0x22/0x40 [ 476.594691][T14344] ? __sys_sendmsg_sock+0x30/0x30 [ 476.599711][T14344] ? __import_iovec+0x5f2/0x850 [ 476.604563][T14344] ? import_iovec+0x73/0xa0 [ 476.609065][T14344] ___sys_sendmsg+0x2a6/0x360 [ 476.613730][T14344] ? __sys_sendmsg+0x2a0/0x2a0 [ 476.618495][T14344] __se_sys_sendmsg+0x1c2/0x2b0 [ 476.623329][T14344] ? __x64_sys_sendmsg+0x80/0x80 [ 476.628255][T14344] ? lockdep_hardirqs_on+0x98/0x150 [ 476.633456][T14344] do_syscall_64+0x55/0xa0 [ 476.637894][T14344] ? clear_bhb_loop+0x40/0x90 [ 476.642570][T14344] ? clear_bhb_loop+0x40/0x90 [ 476.647240][T14344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 476.653125][T14344] RIP: 0033:0x7f2da6d9c629 [ 476.657528][T14344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.677122][T14344] RSP: 002b:00007f2da7ce6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.685521][T14344] RAX: ffffffffffffffda RBX: 00007f2da7015fa0 RCX: 00007f2da6d9c629 [ 476.693479][T14344] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000004 [ 476.701434][T14344] RBP: 00007f2da6e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 476.709392][T14344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.717349][T14344] R13: 00007f2da7016038 R14: 00007f2da7015fa0 R15: 00007ffd3b58d7b8 [ 476.725310][T14344] [ 476.728614][T14344] Kernel Offset: disabled [ 476.732920][T14344] Rebooting in 86400 seconds..