last executing test programs: 6m7.757503972s ago: executing program 3 (id=206): mknodat$md(0xffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, 0x0) ioctl$STOP_ARRAY(r0, 0x932, 0x0) ioctl$STOP_ARRAY(r0, 0x932, 0x0) 6m6.993892s ago: executing program 3 (id=208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@empty}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0xc}, r1}, 0x14) 6m6.717088428s ago: executing program 3 (id=210): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 6m6.446041867s ago: executing program 3 (id=212): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0), 0x3, 0x45c, &(0x7f0000000940)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f0000000940)={[{}, {@usrquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x3, 0x447, &(0x7f0000000380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 6m5.902191102s ago: executing program 3 (id=215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x1d, 0x8, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r1}, 0xc) 6m5.173045287s ago: executing program 3 (id=221): r0 = eventfd2(0xffffffff, 0x1) write$eventfd(r0, &(0x7f0000000040)=0xffffffff00000000, 0x8) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x4}) read$eventfd(r0, &(0x7f00000000c0), 0x8) 6m4.697954726s ago: executing program 32 (id=221): r0 = eventfd2(0xffffffff, 0x1) write$eventfd(r0, &(0x7f0000000040)=0xffffffff00000000, 0x8) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x4}) read$eventfd(r0, &(0x7f00000000c0), 0x8) 5m25.461485482s ago: executing program 2 (id=481): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000001440)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@shortname_winnt}, {@uni_xlate}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@fat=@fmask={'fmask', 0x3d, 0x7}}, {@shortname_winnt}, {@shortname_win95}, {@numtail}]}, 0x81, 0x2ae, &(0x7f0000001980)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x5) getdents(r1, &(0x7f0000000100)=""/184, 0xb8) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5m25.100536169s ago: executing program 2 (id=475): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0x9) 5m24.932560037s ago: executing program 2 (id=477): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x802, 0x165) write(r0, &(0x7f00000004c0)='900', 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) 5m23.773169096s ago: executing program 2 (id=486): r0 = syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB="757466383d312c726f6469722c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c636865636b3d7374726963742c756e695f786c6174653d302c6e6f636173652c616c6c6f775f7574696d653d30303030303030303030303030303030303030343030302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c71756965742c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c757466383d302c666c7573682c726f6469722c73686f72746e616d653d6d697865642c73686f77657865632c636865636b3d72656c617865642c726f6469722c726f6469722c007cbda5978eff1afd303a09806ce0c610fe00684c0c67004cdbbd0b9992b0bbea8911a2050000006311c61fb0edf19ed5b7f8d03bfbf22d5655a02f9c7e7307c4f0cbeda2b4e5b2821ba502f452ce09bae8f886c9b612847e26f9afb26c9805000000000000000bc8604552e1dcb75008cfdd8a85c302b83f5ba6d806e8f77268091776f01e8c0465aa4a0ac02f13f9daeab1932f5688fd0ba15f0fc0d94f21c352fe6bc02b893c57f77281db316d62c523025b2c545ab273f28000ba55a384f4ddaa65567a7eb6e51c9d5b69a84c1cec408643486d4c6a17a1fe12f05c1bf8b7494265dc0493bbc87c7f86f7e5e9ed79d5822adebabbe3c1e9320ad777219218ae6103ce6a392927ef866f4b0bcfecea44742736cfc57fe72eee93d416f6ff7da7641eb9865ee1f09a9b76f87189d2f0113ebf44794240ccdfdee8fa1eccb4abfa1d4d470623d6e1530497c7e64924d946272d4fa346cfecac39646cbbf431869c533429e09b", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000c00)="$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") r1 = syz_io_uring_setup(0x10, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000400)=[r0], 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) 5m23.427916161s ago: executing program 2 (id=488): socket$kcm(0x23, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='wwnn=0x2000000010000001,wwpn=0x2000000010000002', 0x2f) 5m22.912594895s ago: executing program 2 (id=491): r0 = epoll_create1(0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xc000200f}) epoll_pwait(r0, &(0x7f0000000180)=[{}], 0x1, 0xfffffffb, 0x0, 0x0) 5m22.413453206s ago: executing program 33 (id=491): r0 = epoll_create1(0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xc000200f}) epoll_pwait(r0, &(0x7f0000000180)=[{}], 0x1, 0xfffffffb, 0x0, 0x0) 2m18.900580142s ago: executing program 0 (id=2068): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0xe1, 0x5, 0x2, 0x40, @empty, @loopback, 0x80, 0x40, 0x5, 0x2}}) 2m17.169036931s ago: executing program 0 (id=2072): getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000024c0)={0x0, 0x0, 0x0}, &(0x7f0000002500)=0xc) syz_mount_image$exfat(&(0x7f0000002540), &(0x7f0000002580)='./file0\x00', 0x20000c4c, &(0x7f00000025c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r3, @ANYBLOB=',uid=', @ANYRESOCT=r3, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25dab1e41382e6a4b2e1190"], 0x1, 0x14f5, &(0x7f0000002780)="$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") sendmmsg$unix(r0, &(0x7f000000ad40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400a0}}, {{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x400c020}}], 0x2, 0x0) 2m16.717746237s ago: executing program 0 (id=2075): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="88", 0x1}], 0x1}, 0x45) recvmsg$unix(r0, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x40008021) sendmsg$inet(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='?', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000d00), 0x4) recvmsg$unix(r0, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x22) 2m16.540096835s ago: executing program 0 (id=2076): syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000840)='./file2\x00', 0x80420c, &(0x7f0000000880)=ANY=[], 0x7, 0x37b, &(0x7f00000008c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000240)='./file0/../file0\x00') mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00') 2m16.192759791s ago: executing program 0 (id=2077): unshare(0x20040600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000380)={{r2}, 0x7, 0x5, 0x1}) 2m15.572299025s ago: executing program 0 (id=2080): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xea5bc50b6199d76e) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffc00}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x8000) 2m14.980110496s ago: executing program 34 (id=2080): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xea5bc50b6199d76e) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffc00}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x8000) 1m54.558959236s ago: executing program 5 (id=2225): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1m54.345202198s ago: executing program 5 (id=2228): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m54.189180715s ago: executing program 5 (id=2232): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x20000000, 0x0) setpgid(r0, r0) 1m53.230679423s ago: executing program 5 (id=2245): syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000840)='./file2\x00', 0x80420c, &(0x7f0000000880)=ANY=[], 0x7, 0x37b, &(0x7f00000008c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000240)='./file0/../file0\x00') mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00') 1m52.979704609s ago: executing program 5 (id=2250): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000200)='SG', 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) splice(r0, 0x0, r3, 0x0, 0x1e8640, 0x0) 1m52.208016808s ago: executing program 5 (id=2258): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="dc297bf1ce66483446d8201c47351c48446d35092c264952b8f5dc29101250a70dd587d7ce50b9d0498d730e2ebab5f00af36c7140005940a14d8ab9b12d393c3d0c4ee11a4d7387a436eae3fdf34c3066886a8e313cc51eb9b9202e0dfa69ff22f804a605555a9229ba5cf9a481032d85f29f418f14be1c5a5068f0e59e7dca13596a93002b768a2a9162dc177d1b696f0a20d8249cb3241b2cf5952a014e7ec0efbedcb8a132773999003dd76838", 0xaf}, {&(0x7f0000000800)="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", 0x4fa}], 0x2, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @broadcast}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x38}, 0x200000e0) 1m51.692784251s ago: executing program 35 (id=2258): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="dc297bf1ce66483446d8201c47351c48446d35092c264952b8f5dc29101250a70dd587d7ce50b9d0498d730e2ebab5f00af36c7140005940a14d8ab9b12d393c3d0c4ee11a4d7387a436eae3fdf34c3066886a8e313cc51eb9b9202e0dfa69ff22f804a605555a9229ba5cf9a481032d85f29f418f14be1c5a5068f0e59e7dca13596a93002b768a2a9162dc177d1b696f0a20d8249cb3241b2cf5952a014e7ec0efbedcb8a132773999003dd76838", 0xaf}, {&(0x7f0000000800)="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", 0x4fa}], 0x2, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @broadcast}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x38}, 0x200000e0) 56.766560481s ago: executing program 1 (id=2654): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)=':', 0x1, 0x24044013, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="7cffa9", 0x3, 0x4007c3e, 0x0, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(r0, 0x84, 0x25, &(0x7f00000000c0)={0x2, @in6={{0xa, 0x4e24, 0xf28, @empty, 0x8}}, 0xfc, 0x8}, &(0x7f00000001c0)=0x90) 56.524418936s ago: executing program 1 (id=2657): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_mount_image$udf(&(0x7f0000001880), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x1, 0x4ac, &(0x7f0000000500)="$eJzs20tsG1UXwPFzPLbruPk+3Adpi6piCSRCS9skLmmrIKE8iEBqG0gaEBUPhdgJJk4cxSkkVUu7BHYsumTJlgUrxBZVYolYoCDUXemGjVeUHeiO52XXSewm8TT1/1e1dx7H7r33zMy914kFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIDL022NOrYdcCAAC00qWJ8Z4M4z8AAG3lMut/AACAdqJiyR+icnKurBft/YrEhfzC1ZXJkdH6L+tQUYmIZcebv4nevsyZl/vPnnPLjV+/3Y7I2MTlwfRwcX5xKVcq5bLpyYX8dDGba/gdtvr6WsftDkjPz13NzsyU0n2nMlWnV1L39+ztSg30vz8cd2MnR0ZHJwIx0dgj/+8PWW+GHxdLXhSVT374Ti+JSES23hebXDs7rcNuxHG7EZMjo3ZDCvmphWVzUiNOVKS6T+JuH7UgF1sSETH10vj2rNliYsmPojJ0uqxjImK5/XDC/mC4ofqEIWqWriLSLbsgZ4+xPWLJh6Jy53RK3nT61c5/XOR62JXDjos6939Ry/qW/Tww95N5bF54O/3GwkwxEKsR545qZnyocw+GPj600mP+bEqIJWP2HV/W8bArg5brEEvmRSX+9af2vELseelTA2ePPXs+OMM4tMn7mNhTzs3VyJgcc6YOGjF/HqHa2BYJteRPUXnwe8Le73Zyw08E2oRaUhCVf26UVWvWpVZgfe/Z7WvDna1/R2K4uLi6lJ/9eLnu+WRi8KPS8tLUdP3TlbWrFTyy2Tq2VqS5JVlSKyu+Lz4re69z1gD/q+z5tfn2un8tdNeUruD108h2w8+ZJuZRpk6qltwTlZkPDlfGGUk23TftwOR/VFRK5V/UzbST/2hlL5D/V/z+S2h16bFz+//K51ruXOLIlYPrHd+J/Js6mfy/KypDfx92PtOo5N+qiTVxXaLy3u2jTlwkbuKibnMq7ziTL+R6TOy/orL/ZzdW7NikE3vAj+01sSVR+fJOdexeJ/agH9tnYtdE5e5v9WOf9mMzJnbV5Otu2o1NmthjTmyXH3tquljIbtatJv99ovLOzdfVbfO6+Q/c/7dqSs9DOd94e7vynwocu+Xk9YqT/+gm+f9KVFb/Ouq22+5797LaZ//r59/Mlb+/XR3rTkb3+7G9jTYrbCb/+0Tl/qtrXpudtjm7foaC+X8mWl16/RpS/vcFjqWcesWb7It2VFq9NjdVKOSW2GCDDTa8jbCfTGgFM/6Pm1G931J3HuOM/52VPX/G9OBzf/wfqCk9IY3/+wPHBpxZSywqklieX4wdEkmUVq+dzM9PzeZmcwuZM/09fefP9GTOxeLu5M7farjvngQm/ydE5cZPv3rrmOr5X/35f7Km9ISU/wPBNlXNaxruirZk8t8pKv331rz15kbzf3f93/1cdendfyHl/2DgWMqpV2eTfQEAAAAAAAAAAAAAAAAAu0lSLXleVFbGX1L3O0SN/P5ftqb0hPT7X12BY9nt/16D+9WoqlONVh0AAAAAAAAAAKCVImLJN6LygpT1pjnQKXIxWOKJ9l8AAAD//16uQhc=") r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x9e) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) 56.213155948s ago: executing program 1 (id=2659): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) 55.963925654s ago: executing program 1 (id=2662): open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) syz_mount_image$erofs(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0xa10410, &(0x7f0000000300)=ANY=[], 0x0, 0x24e, &(0x7f0000001c00)="$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") mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x1000002, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 55.743754596s ago: executing program 1 (id=2664): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) 55.12422871s ago: executing program 1 (id=2670): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000011c0)=""/35, &(0x7f0000000280)=0x23) 54.773908806s ago: executing program 36 (id=2670): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000011c0)=""/35, &(0x7f0000000280)=0x23) 40.073660218s ago: executing program 6 (id=2795): pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x1, 0x5, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffdd, 0xf) 39.028111886s ago: executing program 6 (id=2802): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) 38.724685177s ago: executing program 6 (id=2804): r0 = semget$private(0x0, 0x6, 0x1b5) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000000200)=[{0x0, 0xffff, 0x1000}], 0x1) semtimedop(r0, &(0x7f0000000040)=[{0x3, 0xffac}], 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) 37.696320543s ago: executing program 6 (id=2816): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 37.509063092s ago: executing program 6 (id=2819): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, 0x1a025, 0x1703}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_TOS={0x5, 0x9, 0x7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c4}, 0x4000020) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 37.108134323s ago: executing program 6 (id=2821): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) timer_create(0x4, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f000000a300)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xc9, 0x2, 0x81, 0xfc00, 0x4}}}}, 0xe) 36.901025975s ago: executing program 37 (id=2821): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) timer_create(0x4, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f000000a300)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xc9, 0x2, 0x81, 0xfc00, 0x4}}}}, 0xe) 3.979489241s ago: executing program 9 (id=3107): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000100000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x15, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000500)={r2, 0x0, 0x0}, 0x10) 3.979383141s ago: executing program 7 (id=3108): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r1, 0x51b0b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x40}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x4800, &(0x7f00000002c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 3.728547077s ago: executing program 7 (id=3112): r0 = syz_create_resource$futex(&(0x7f0000000040)=0x1) futex(r0, 0x9, 0x1, 0x0, r0, 0x2) r1 = syz_create_resource$futex(&(0x7f0000000080)=0x2) futex(r0, 0x3, 0x0, &(0x7f00000000c0), r1, 0x0) r2 = syz_create_resource$futex(&(0x7f0000000200)=0x2) futex(r1, 0xc, 0x1, 0x0, r2, 0x2) 3.727731297s ago: executing program 9 (id=3113): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 2.759339706s ago: executing program 7 (id=3120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) 1.762522969s ago: executing program 8 (id=3123): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x8}, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x20000010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) shutdown(r0, 0x1) 1.5560009s ago: executing program 8 (id=3125): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002140)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9f88}, 0x94) timer_settime(0x0, 0x0, &(0x7f00000015c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000200)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006, 0x0, 0xfffffffc}) 1.312621045s ago: executing program 8 (id=3127): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.154467071s ago: executing program 8 (id=3130): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0xeeee0000, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x40, 0x1, 0x45, 0x3, 0x4, 0xf9}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0xffffffff, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xd, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0xf000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00B\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000099000000000000000000000000000000000000000000796ec29dd161cf0d9a457a2cb680ba51faf491202db03a64f5d4a56d2e450cd1d63fef3c5929ef29662e"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") 908.057567ms ago: executing program 7 (id=3132): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e1e, @empty}}, 0xffffff01, 0x67, 0xa4f, 0xc0, 0x15, 0xffffff86, 0xa9}, 0x9c) 841.347314ms ago: executing program 8 (id=3133): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 841.005114ms ago: executing program 9 (id=3134): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/72, 0x48}], 0x1}, 0x0) 768.719021ms ago: executing program 4 (id=3135): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x0) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x412, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000003b00)='./file0\x00', 0x0) fstat(r1, 0x0) 715.495856ms ago: executing program 9 (id=3136): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x70, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x900}, 0x0) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) 576.749141ms ago: executing program 8 (id=3137): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b72040150000000000010902120001010080320904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000c40)={0x1c, &(0x7f0000000780)={0x20, 0x5, 0x1, "7f"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x20, 0xf, 0x2, "f2e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 540.117305ms ago: executing program 9 (id=3138): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad4c90c200"/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0xc004}, 0xc804) recvmmsg$unix(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/13, 0xd}, {&(0x7f0000000280)=""/27, 0x1b}], 0x2}}], 0x1, 0x40000100, 0x0) 539.744765ms ago: executing program 4 (id=3139): write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000000000000001"], 0x4a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008"], 0xa4}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100005800c0006"], 0x34}}, 0x0) 413.923438ms ago: executing program 9 (id=3140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000640)={0x0, &(0x7f0000000680)=[@nested_create_vm={0x12d, 0x18, 0x2}], 0x18}) ioctl$KVM_RUN(r3, 0xae80, 0x0) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0x80000a) 376.215152ms ago: executing program 4 (id=3141): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000004800010029bd7000ffdbdf250a008000", @ANYRES32=r1, @ANYBLOB="f9ffffff080002000b000000140001feff000000000000000000ffff00000000140001"], 0x4c}}, 0x4044004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, 0x0, 0x0}, 0x94) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 319.220097ms ago: executing program 7 (id=3142): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000600)={&(0x7f0000000640)=""/152, 0x98}) 247.801965ms ago: executing program 4 (id=3143): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="0ddac400000000000000bfb48c676fab22e2d076fb296526ae98655ee4c429d1f245f7b1cfa5447a76830be1d0cfd34ed8af4ddbcc0b787eb0619e69f27ab98c3754b47c0b61fc44", 0x48}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) recvmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) 193.5645ms ago: executing program 4 (id=3144): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x2, 0x0, 0xfdfd, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000001c0)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) 66.533923ms ago: executing program 7 (id=3145): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)=',8Zz', 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/7, 0x7}], 0x1}, 0x0) 0s ago: executing program 4 (id=3146): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={r2, 0x6}, &(0x7f0000000040)=0x8) kernel console output (not intermixed with test programs): 342.730296][ T8276] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.795269][ T6103] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.909142][ T6103] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.012647][ T6103] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.135495][ T6103] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.080776][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.094875][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.116514][T11712] netlink: 'syz.1.2056': attribute type 20 has an invalid length. [ 344.124862][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.133728][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2056'. [ 344.161502][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.169719][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 344.182670][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.203012][T11712] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.211933][T11712] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.220806][T11712] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.229835][T11712] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.402650][T11712] netlink: 'syz.1.2056': attribute type 20 has an invalid length. [ 344.422089][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2056'. [ 344.601523][T11714] rxe_eth0 speed is unknown, defaulting to 1000 [ 344.713928][T11728] netlink: 'syz.0.2060': attribute type 20 has an invalid length. [ 344.746799][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2060'. [ 344.809473][T11728] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.818432][T11728] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.827235][T11728] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.835982][T11728] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.880829][T11732] loop1: detected capacity change from 0 to 256 [ 344.916829][T11732] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 344.960814][T11728] netlink: 'syz.0.2060': attribute type 20 has an invalid length. [ 344.998030][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2060'. [ 345.244847][T11734] loop1: detected capacity change from 0 to 512 [ 345.286716][T11734] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 345.322450][T11734] EXT4-fs (loop1): 1 truncate cleaned up [ 345.358374][T11734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.609892][ T5787] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 346.109850][T11746] rxe_eth0 speed is unknown, defaulting to 1000 [ 346.131948][ T7125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.141523][ T5799] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 346.307002][ T52] Bluetooth: hci0: command tx timeout [ 346.399050][ T5799] usb 1-1: config 0 has no interfaces? [ 346.446426][ T5799] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 346.462744][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.486661][ T5799] usb 1-1: Product: syz [ 346.490903][ T5799] usb 1-1: Manufacturer: syz [ 346.521219][ T5799] usb 1-1: SerialNumber: syz [ 346.543541][ T5799] usb 1-1: config 0 descriptor?? [ 346.700798][T11714] chnl_net:caif_netlink_parms(): no params data found [ 347.194517][ T6103] hsr_slave_0: left promiscuous mode [ 347.213890][ T6103] hsr_slave_1: left promiscuous mode [ 347.239926][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.257860][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.295559][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.341172][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.364916][ T6103] bridge_slave_1: left allmulticast mode [ 347.386706][ T6103] bridge_slave_1: left promiscuous mode [ 347.392552][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.427362][ T6103] bridge_slave_0: left allmulticast mode [ 347.433107][ T6103] bridge_slave_0: left promiscuous mode [ 347.462894][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.625699][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 347.651234][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 347.662619][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 347.673625][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 347.689917][ T5802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 347.703739][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 347.807653][ T6103] bond1 (unregistering): (slave lo): Releasing backup interface [ 347.816305][ T6103] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 347.831523][ T6103] bond1 (unregistering): Released all slaves [ 347.869734][ T6103] pimreg (unregistering): left allmulticast mode [ 348.359051][ T6103] team0 (unregistering): Port device team_slave_1 removed [ 348.391581][ T52] Bluetooth: hci0: command tx timeout [ 348.473241][ T6103] team0 (unregistering): Port device team_slave_0 removed [ 348.570824][ T6103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.680074][ T6103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.488568][ T6103] bond0 (unregistering): Released all slaves [ 349.680990][T11714] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.699519][T11714] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.712384][T11714] bridge_slave_0: entered allmulticast mode [ 349.729318][T11714] bridge_slave_0: entered promiscuous mode [ 349.746885][ T52] Bluetooth: hci1: command tx timeout [ 349.769018][T11714] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.787031][T11714] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.794355][T11714] bridge_slave_1: entered allmulticast mode [ 349.814144][T11714] bridge_slave_1: entered promiscuous mode [ 349.991398][T11800] netlink: 'syz.4.2067': attribute type 20 has an invalid length. [ 350.026980][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2067'. [ 350.109114][T11800] netlink: 'syz.4.2067': attribute type 20 has an invalid length. [ 350.120433][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2067'. [ 350.189086][T11714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.204140][T11783] rxe_eth0 speed is unknown, defaulting to 1000 [ 350.259367][T11714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.409279][T11714] team0: Port device team_slave_0 added [ 350.429659][T11714] team0: Port device team_slave_1 added [ 350.466706][ T52] Bluetooth: hci0: command tx timeout [ 350.540048][T11714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.571105][T11714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.626644][T11714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.659077][T11714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.666086][T11714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.713622][T11714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.051286][T11714] hsr_slave_0: entered promiscuous mode [ 351.071849][T11714] hsr_slave_1: entered promiscuous mode [ 351.092356][T11714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.106238][T11714] Cannot create hsr debugfs directory [ 351.630479][ T5796] usb 1-1: USB disconnect, device number 21 [ 351.721809][T11783] chnl_net:caif_netlink_parms(): no params data found [ 351.827151][ T52] Bluetooth: hci1: command tx timeout [ 352.556685][ T52] Bluetooth: hci0: command tx timeout [ 352.803770][T11783] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.820296][T11783] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.832059][T11783] bridge_slave_0: entered allmulticast mode [ 352.843530][T11783] bridge_slave_0: entered promiscuous mode [ 352.867680][T11783] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.874905][T11783] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.890206][T11783] bridge_slave_1: entered allmulticast mode [ 352.898283][T11783] bridge_slave_1: entered promiscuous mode [ 353.113325][T11783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.138904][T11783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.274275][T11783] team0: Port device team_slave_0 added [ 353.295573][T11783] team0: Port device team_slave_1 added [ 353.413515][T11783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.421987][T11783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.455410][T11783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.485829][T11783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.504389][T11783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.541339][T11783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.573860][T11847] loop0: detected capacity change from 0 to 256 [ 353.631917][T11847] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 353.693675][T11714] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 353.749001][T11783] hsr_slave_0: entered promiscuous mode [ 353.768304][T11783] hsr_slave_1: entered promiscuous mode [ 353.784126][T11783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.803520][T11783] Cannot create hsr debugfs directory [ 353.815763][T11714] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 353.887613][T11714] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 353.906906][ T52] Bluetooth: hci1: command tx timeout [ 353.930609][T11714] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 354.137829][T11855] loop0: detected capacity change from 0 to 128 [ 354.397212][T11783] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.482947][T11714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.674734][T11783] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.844283][ T9284] syz_tun (unregistering): left allmulticast mode [ 354.874632][T11714] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.984289][T11783] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.035193][ T6092] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.042511][ T6092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.099493][ T6092] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.106776][ T6092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.232325][T11783] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.634529][T11783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 355.694148][T11783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 355.725681][T11783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 355.770312][T11783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 355.988127][ T52] Bluetooth: hci1: command tx timeout [ 356.026544][T11714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.127971][T11783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.226011][T11783] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.299183][ T6094] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.306441][ T6094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.367305][ T6094] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.374587][ T6094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.595149][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.617062][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.628536][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.638780][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.658927][ T5802] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 356.666313][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 356.777879][T11903] rxe_eth0 speed is unknown, defaulting to 1000 [ 357.205692][T11714] veth0_vlan: entered promiscuous mode [ 357.272113][T11714] veth1_vlan: entered promiscuous mode [ 357.474291][T11783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.568669][T11714] veth0_macvtap: entered promiscuous mode [ 357.650280][T11714] veth1_macvtap: entered promiscuous mode [ 357.806151][T11714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.852665][T11714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.880827][T11714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.943765][T11714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.995203][T11714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.026869][T11714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.046942][T11714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.062435][T11714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.090735][T11714] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.106377][T11714] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.116960][T11714] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.125720][T11714] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.144087][T11938] macvlan0: entered promiscuous mode [ 358.177658][T11903] chnl_net:caif_netlink_parms(): no params data found [ 358.235801][T11783] veth0_vlan: entered promiscuous mode [ 358.368112][T11783] veth1_vlan: entered promiscuous mode [ 358.671371][T11903] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.688206][T11903] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.705970][T11903] bridge_slave_0: entered allmulticast mode [ 358.712984][ T52] Bluetooth: hci3: command tx timeout [ 358.733754][T11903] bridge_slave_0: entered promiscuous mode [ 358.762276][ T6092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.786330][T11783] veth0_macvtap: entered promiscuous mode [ 358.793296][ T6092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.808499][T11903] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.815702][T11903] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.838708][T11903] bridge_slave_1: entered allmulticast mode [ 358.857531][T11903] bridge_slave_1: entered promiscuous mode [ 358.918370][T11783] veth1_macvtap: entered promiscuous mode [ 359.019708][T11903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.051897][T11903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.101594][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.120454][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.136372][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.151869][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.161812][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.172518][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.195456][T11783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.220427][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.245997][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.267275][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.286036][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.301906][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.326640][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.350263][T11783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.409758][T11903] team0: Port device team_slave_0 added [ 359.432418][T11783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.457991][T11783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.476674][T11783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.485446][T11783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.525832][T11903] team0: Port device team_slave_1 added [ 359.689294][T11903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.696323][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.755074][T11903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.757547][T11974] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 359.821252][T11903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.838315][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.917278][T11903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.160873][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.186800][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.298802][T11903] hsr_slave_0: entered promiscuous mode [ 360.339974][T11903] hsr_slave_1: entered promiscuous mode [ 360.383696][T11903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.416937][T11903] Cannot create hsr debugfs directory [ 360.565829][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.582996][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.728303][T11993] gadgetfs: bound to dummy_udc driver [ 360.787372][ T52] Bluetooth: hci3: command tx timeout [ 361.316966][T11903] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 361.359170][T11903] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 361.398691][T11903] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 361.431660][T11903] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 361.718124][T12015] netlink: 'syz.5.2105': attribute type 19 has an invalid length. [ 361.726564][T12015] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2105'. [ 361.743634][T12015] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.752909][T12015] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.762509][T12015] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.771555][T12015] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.794090][T11903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.817299][T12015] netlink: 'syz.5.2105': attribute type 19 has an invalid length. [ 361.825302][T12015] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2105'. [ 361.918450][T11903] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.964005][ T6092] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.971317][ T6092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.028395][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.035590][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.869246][ T52] Bluetooth: hci3: command tx timeout [ 362.912208][T11903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.576419][T12062] pim6reg: entered allmulticast mode [ 363.613964][T12062] team0: entered allmulticast mode [ 363.626659][T12062] team_slave_0: entered allmulticast mode [ 363.632459][T12062] team_slave_1: entered allmulticast mode [ 363.651770][T12062] pim6reg: left allmulticast mode [ 363.807640][T12060] team0: left allmulticast mode [ 363.823747][T12060] team_slave_0: left allmulticast mode [ 363.845581][T12060] team_slave_1: left allmulticast mode [ 363.944784][T11903] veth0_vlan: entered promiscuous mode [ 363.983196][T11903] veth1_vlan: entered promiscuous mode [ 364.071072][T12075] loop1: detected capacity change from 0 to 1024 [ 364.098576][T11903] veth0_macvtap: entered promiscuous mode [ 364.143361][T12075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.156042][T11903] veth1_macvtap: entered promiscuous mode [ 364.225714][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.236454][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.247717][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.258416][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.268546][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.284599][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.301266][T11903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.344279][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.388662][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.405564][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.447261][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.457506][ T5796] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 364.485427][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.501749][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.517083][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.529750][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.544326][T11903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.590386][T11903] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.599482][T11903] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.609150][T11903] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.618413][T11903] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.656916][ T5796] usb 2-1: Using ep0 maxpacket: 32 [ 364.665643][ T5796] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.686517][ T5796] usb 2-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice= 0.13 [ 364.726969][ T5796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.751090][ T5796] usb 2-1: config 0 descriptor?? [ 364.816992][ T5796] usb 2-1: bad CDC descriptors [ 364.854618][ T5796] usb 2-1: bad CDC descriptors [ 364.925277][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.947473][ T52] Bluetooth: hci3: command tx timeout [ 364.958230][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.007095][ T5796] usb 2-1: USB disconnect, device number 13 [ 365.052832][ T6105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.063291][ T6105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.610294][T11783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.144328][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2134'. [ 366.944878][T12140] rxe_eth0 speed is unknown, defaulting to 1000 [ 367.448124][ T5884] IPVS: starting estimator thread 0... [ 367.557684][T12161] IPVS: using max 19 ests per chain, 45600 per kthread [ 367.952533][T12155] netdevsim netdevsim5 netdevsim1: IPsec offload requires 128 bit authentication [ 367.990690][T12144] loop1: detected capacity change from 0 to 32768 [ 368.057374][T12144] XFS (loop1): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 368.237912][T12144] XFS (loop1): Ending clean mount [ 368.472877][T11783] XFS (loop1): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 369.204663][T12209] tipc: Started in network mode [ 369.216661][T12209] tipc: Node identity 1001001, cluster identity 4711 [ 369.233680][T12209] tipc: Node number set to 16781313 [ 369.248212][T12209] tipc: Enabled bearer , priority 0 [ 369.704086][T12225] netlink: 'syz.6.2173': attribute type 1 has an invalid length. [ 369.906112][T12234] 9pnet_fd: p9_fd_create_unix (12234): problem connecting socket: ./file0: -5 [ 370.363160][T12247] autofs4:pid:12247:autofs_fill_super: pipe file descriptor does not contain proper ops [ 370.888654][T12256] tipc: Resetting bearer [ 371.540464][T12250] loop5: detected capacity change from 0 to 32768 [ 371.775253][T12250] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 372.015817][T12250] overlayfs: upper fs does not support tmpfile. [ 372.075352][T12250] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 372.184052][T12250] overlayfs: upper fs missing required features. [ 372.397233][T11714] ocfs2: Unmounting device (7,5) on (node local) [ 373.797229][T12324] tipc: Started in network mode [ 373.802236][T12324] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 373.837561][T12324] tipc: Enabled bearer , priority 0 [ 374.053484][T12332] netlink: 'syz.6.2209': attribute type 1 has an invalid length. [ 374.379665][T12336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2211'. [ 374.400075][T12336] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2211'. [ 374.413796][T12338] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2212'. [ 374.535982][T12340] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2213'. [ 374.557196][T12340] bridge_slave_0: left allmulticast mode [ 374.562940][T12340] bridge_slave_0: left promiscuous mode [ 374.592907][T12340] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.623156][T12340] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 374.656729][T12344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2215'. [ 374.971011][ T5884] tipc: Node number set to 43690 [ 376.649318][T12391] loop6: detected capacity change from 0 to 256 [ 376.748869][T12391] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2236'. [ 376.953604][T12401] veth1_to_bond: entered promiscuous mode [ 376.962077][T12401] veth1_to_bond: entered allmulticast mode [ 376.974946][T12401] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2240'. [ 377.074881][T12401] veth1_to_bond (unregistering): left allmulticast mode [ 377.082344][T12401] veth1_to_bond (unregistering): left promiscuous mode [ 377.123505][T12401] bond0: (slave bond_slave_1): Releasing backup interface [ 377.256342][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2243'. [ 377.395129][T12412] loop5: detected capacity change from 0 to 128 [ 377.429986][T12413] loop1: detected capacity change from 0 to 1024 [ 377.519312][T12413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.591836][ T27] kauditd_printk_skb: 75 callbacks suppressed [ 377.591853][ T27] audit: type=1800 audit(1793194618.209:209): pid=12413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2246" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 377.706110][ T27] audit: type=1800 audit(1793194618.209:210): pid=12413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2246" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 377.765691][T11783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.813013][T12425] netlink: 'syz.4.2251': attribute type 1 has an invalid length. [ 377.919830][T12425] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.102176][T12427] bond2: (slave gretap1): making interface the new active one [ 378.114849][T12427] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 378.205696][ T5799] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 378.426837][ T5799] usb 2-1: Using ep0 maxpacket: 8 [ 378.437392][ T5799] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 378.458379][ T5799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.466545][ T5799] usb 2-1: Product: syz [ 378.472044][ T5799] usb 2-1: Manufacturer: syz [ 378.476799][ T5799] usb 2-1: SerialNumber: syz [ 378.494600][ T5799] usb 2-1: config 0 descriptor?? [ 378.728086][ T5799] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 378.876463][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.886913][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.227905][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2262'. [ 379.237150][T12453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.419725][T12453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.509324][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 379.520664][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 379.538268][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 379.546646][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.554485][ T5802] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 379.566192][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.734996][T12456] rxe_eth0 speed is unknown, defaulting to 1000 [ 379.947162][ T5799] usb write operation failed. (-71) [ 379.958927][ T5799] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 379.978508][ T5799] dvbdev: DVB: registering new adapter (Terratec H7) [ 379.997384][ T5799] usb 2-1: media controller created [ 380.008374][ T5799] usb read operation failed. (-71) [ 380.014215][ T5799] usb write operation failed. (-71) [ 380.025542][ T5799] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5 [ 380.067943][ T5799] usb 2-1: USB disconnect, device number 14 [ 380.157620][T12469] loop6: detected capacity change from 0 to 8192 [ 380.233185][T12469] loop6: p1 < > p2 < > p4 < > [ 380.256277][T12469] loop6: partition table partially beyond EOD, truncated [ 380.288638][T12469] loop6: p2 start 16776960 is beyond EOD, truncated [ 380.577426][T12486] loop1: detected capacity change from 0 to 128 [ 380.628828][T12486] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 380.646094][T12486] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 380.893220][T12456] chnl_net:caif_netlink_parms(): no params data found [ 380.973403][T11783] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 381.173351][T12456] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.185264][T12456] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.200025][T12456] bridge_slave_0: entered allmulticast mode [ 381.227956][T12456] bridge_slave_0: entered promiscuous mode [ 381.259998][T12456] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.286913][T12456] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.294268][T12456] bridge_slave_1: entered allmulticast mode [ 381.328157][T12456] bridge_slave_1: entered promiscuous mode [ 381.449422][T12456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.479867][T12456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.635968][T12507] ALSA: seq fatal error: cannot create timer (-16) [ 381.654260][T12456] team0: Port device team_slave_0 added [ 381.663333][T12456] team0: Port device team_slave_1 added [ 381.672573][ T5802] Bluetooth: hci0: command tx timeout [ 381.746192][T12456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.753367][T12456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.789238][T12456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.829058][T12456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.836090][T12456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.905431][ T27] audit: type=1326 audit(1793194622.529:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08db19f559 code=0x7ffc0000 [ 381.905907][T12456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.956741][ T27] audit: type=1326 audit(1793194622.529:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08db19f559 code=0x7ffc0000 [ 382.011433][ T27] audit: type=1326 audit(1793194622.589:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08db19f559 code=0x7ffc0000 [ 382.082684][ T27] audit: type=1326 audit(1793194622.589:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08db19f559 code=0x7ffc0000 [ 382.113508][T12456] hsr_slave_0: entered promiscuous mode [ 382.137241][ T27] audit: type=1326 audit(1793194622.589:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f08db19f559 code=0x7ffc0000 [ 382.171740][ T27] audit: type=1326 audit(1793194622.589:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08db19f559 code=0x7ffc0000 [ 382.196982][T12456] hsr_slave_1: entered promiscuous mode [ 382.221129][T12456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.231242][T12456] Cannot create hsr debugfs directory [ 382.270354][ T27] audit: type=1326 audit(1793194622.589:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08db19f559 code=0x7ffc0000 [ 382.343991][ T27] audit: type=1326 audit(1793194622.589:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08db19f559 code=0x7ffc0000 [ 382.604705][ T27] kauditd_printk_skb: 148 callbacks suppressed [ 382.604721][ T27] audit: type=1326 audit(1793194623.229:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08db15fd8e code=0x7ffc0000 [ 382.684386][T12525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2285'. [ 382.689886][ T27] audit: type=1326 audit(1793194623.269:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08db15fd8e code=0x7ffc0000 [ 382.804591][T12527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 382.823166][T12527] bridge0: port 3(bond1) entered blocking state [ 382.828747][ T27] audit: type=1326 audit(1793194623.279:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08db15fd8e code=0x7ffc0000 [ 382.840054][T12527] bridge0: port 3(bond1) entered disabled state [ 382.863522][T12527] bond1: entered allmulticast mode [ 382.871574][T12527] bond1: entered promiscuous mode [ 382.878067][T12527] bridge0: port 3(bond1) entered blocking state [ 382.884509][T12527] bridge0: port 3(bond1) entered forwarding state [ 382.892508][ T27] audit: type=1326 audit(1793194623.279:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08db15fd8e code=0x7ffc0000 [ 382.936779][ T27] audit: type=1326 audit(1793194623.279:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08db15fd8e code=0x7ffc0000 [ 383.003245][ T27] audit: type=1326 audit(1793194623.279:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08db15fd8e code=0x7ffc0000 [ 383.028758][ T27] audit: type=1326 audit(1793194623.289:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08db15fd8e code=0x7ffc0000 [ 383.093339][T12532] netlink: 'syz.4.2287': attribute type 1 has an invalid length. [ 383.104243][ T27] audit: type=1326 audit(1793194623.289:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08db15fd8e code=0x7ffc0000 [ 383.149866][ T27] audit: type=1326 audit(1793194623.299:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08db15fd8e code=0x7ffc0000 [ 383.223310][T12535] loop6: detected capacity change from 0 to 4096 [ 383.239020][ T27] audit: type=1326 audit(1793194623.299:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.6.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08db15fd8e code=0x7ffc0000 [ 383.250743][T12532] 8021q: adding VLAN 0 to HW filter on device bond3 [ 383.291939][T12535] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512). [ 383.311676][T12456] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 383.366034][T12456] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 383.380042][T12535] ntfs3: loop6: ino=19, mi_enum_attr [ 383.385621][T12535] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 383.409945][T12456] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 383.417147][T12535] ntfs3: loop6: Failed to initialize $Extend/$ObjId. [ 383.482607][T12456] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 383.747498][ T5802] Bluetooth: hci0: command tx timeout [ 383.780389][ T1109] bridge0: port 3(bond1) entered disabled state [ 383.950650][T12456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.044989][T12456] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.109962][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.117250][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.166638][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.173950][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.905919][T12456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.104538][T12588] bridge1: entered promiscuous mode [ 385.110192][T12588] bridge1: entered allmulticast mode [ 385.674123][T12456] veth0_vlan: entered promiscuous mode [ 385.748062][T12456] veth1_vlan: entered promiscuous mode [ 385.827342][ T5802] Bluetooth: hci0: command tx timeout [ 385.849690][T12456] veth0_macvtap: entered promiscuous mode [ 385.890325][T12456] veth1_macvtap: entered promiscuous mode [ 385.984012][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.028055][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.057942][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.078740][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.101930][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.132051][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.155464][T12456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.230177][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.274138][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.289892][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.308376][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.321438][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.334613][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.345382][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.356379][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.377145][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.396829][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.409638][T12614] loop6: detected capacity change from 0 to 2048 [ 386.431969][T12456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.487736][T12456] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.498075][T12614] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.519428][T12456] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.530376][T12456] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.541354][T12456] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.550498][T12614] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.641535][T12624] 0ªî{X¹¦: left allmulticast mode [ 386.650515][T12614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.867154][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.875047][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.100374][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.109276][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.908233][ T5802] Bluetooth: hci0: command tx timeout [ 387.955012][T12654] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 388.064368][T12656] ip6gre1: entered promiscuous mode [ 388.072290][T12656] ip6gre1: entered allmulticast mode [ 388.144138][T12658] capability: warning: `syz.7.2334' uses 32-bit capabilities (legacy support in use) [ 389.127564][T12682] netlink: 'syz.7.2343': attribute type 1 has an invalid length. [ 389.865288][T12694] bridge1: entered promiscuous mode [ 389.925490][T12694] bridge1: entered allmulticast mode [ 390.331707][T12704] vcan0: tx address claim with different name [ 390.609859][T12709] pim6reg: entered allmulticast mode [ 390.695506][T12709] team0: entered allmulticast mode [ 390.711086][T12709] team_slave_0: entered allmulticast mode [ 390.741471][T12709] team_slave_1: entered allmulticast mode [ 390.762391][T12711] pim6reg: left allmulticast mode [ 390.988255][T12708] team0: left allmulticast mode [ 390.993212][T12708] team_slave_0: left allmulticast mode [ 391.016749][T12708] team_slave_1: left allmulticast mode [ 391.334757][T12720] netlink: 'syz.6.2358': attribute type 1 has an invalid length. [ 391.497500][T12720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.631819][T12722] bond1: (slave gretap1): making interface the new active one [ 391.663593][T12722] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 392.522012][T12742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 392.530221][T12742] bridge0: port 1(bond2) entered blocking state [ 392.586727][T12742] bridge0: port 1(bond2) entered disabled state [ 392.644629][T12742] bond2: entered allmulticast mode [ 392.720795][T12742] bond2: entered promiscuous mode [ 392.748413][T12742] bridge0: port 1(bond2) entered blocking state [ 392.754919][T12742] bridge0: port 1(bond2) entered forwarding state [ 392.883771][T12737] bridge0: port 1(bond2) entered disabled state [ 393.205764][T12756] tipc: Resetting bearer [ 393.778676][T12766] FAULT_INJECTION: forcing a failure. [ 393.778676][T12766] name failslab, interval 1, probability 0, space 0, times 0 [ 393.832758][T12766] CPU: 1 PID: 12766 Comm: syz.6.2373 Not tainted syzkaller #0 [ 393.840305][T12766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 393.850415][T12766] Call Trace: [ 393.853798][T12766] [ 393.856819][T12766] dump_stack_lvl+0x18c/0x250 [ 393.861660][T12766] ? show_regs_print_info+0x20/0x20 [ 393.866927][T12766] ? load_image+0x420/0x420 [ 393.871483][T12766] ? __lock_acquire+0x7eb0/0x7eb0 [ 393.876632][T12766] should_fail_ex+0x394/0x4c0 [ 393.881412][T12766] should_failslab+0x9/0x20 [ 393.885959][T12766] slab_pre_alloc_hook+0x59/0x300 [ 393.891032][T12766] ? __register_sysctl_table+0xa2c/0x1210 [ 393.896795][T12766] ? __register_sysctl_table+0xa2c/0x1210 [ 393.902542][T12766] __kmem_cache_alloc_node+0x53/0x260 [ 393.907953][T12766] ? __register_sysctl_table+0xa2c/0x1210 [ 393.913728][T12766] __kmalloc+0xa7/0x240 [ 393.917945][T12766] __register_sysctl_table+0xa2c/0x1210 [ 393.923549][T12766] __devinet_sysctl_register+0x35c/0x460 [ 393.929284][T12766] ? devinet_sysctl_register+0x1f0/0x1f0 [ 393.934981][T12766] devinet_init_net+0x32b/0x5c0 [ 393.939882][T12766] ops_init+0x391/0x640 [ 393.944112][T12766] setup_net+0x3b6/0xa20 [ 393.948407][T12766] ? copy_net_ns+0x530/0x530 [ 393.953037][T12766] ? copy_net_ns+0x347/0x530 [ 393.957690][T12766] ? down_read_killable+0x1d0/0x340 [ 393.963079][T12766] copy_net_ns+0x361/0x530 [ 393.967557][T12766] create_new_namespaces+0x3ce/0x700 [ 393.972930][T12766] unshare_nsproxy_namespaces+0x11a/0x160 [ 393.978689][T12766] ksys_unshare+0x4fa/0x8f0 [ 393.983241][T12766] ? sighand_ctor+0x50/0x50 [ 393.987783][T12766] ? lock_chain_count+0x20/0x20 [ 393.992670][T12766] ? syscall_enter_from_user_mode+0x25/0x80 [ 393.998660][T12766] __x64_sys_unshare+0x38/0x40 [ 394.003461][T12766] do_syscall_64+0x55/0xb0 [ 394.008021][T12766] ? clear_bhb_loop+0x40/0x90 [ 394.012817][T12766] ? clear_bhb_loop+0x40/0x90 [ 394.017536][T12766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.023469][T12766] RIP: 0033:0x7f08db19f559 [ 394.027977][T12766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.047674][T12766] RSP: 002b:00007f08dc117028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 394.056136][T12766] RAX: ffffffffffffffda RBX: 00007f08db425fa0 RCX: 00007f08db19f559 [ 394.064144][T12766] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 394.072150][T12766] RBP: 00007f08db236b20 R08: 0000000000000000 R09: 0000000000000000 [ 394.080158][T12766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.088163][T12766] R13: 00007f08db426038 R14: 00007f08db425fa0 R15: 00007ffcbc4b6a88 [ 394.096213][T12766] [ 394.324368][T12766] sysctl could not get directory: /net/ipv4/conf/all -12 [ 394.497340][T12771] netlink: 'syz.4.2375': attribute type 1 has an invalid length. [ 394.587543][T12771] 8021q: adding VLAN 0 to HW filter on device bond4 [ 395.031710][T12776] 8021q: adding VLAN 0 to HW filter on device bond5 [ 395.088875][T12776] bridge0: port 4(bond5) entered blocking state [ 395.122566][T12776] bridge0: port 4(bond5) entered disabled state [ 395.143896][T12776] bond5: entered allmulticast mode [ 395.169871][T12776] bond5: entered promiscuous mode [ 396.439839][T12793] loop6: detected capacity change from 0 to 32768 [ 396.498484][T12793] JBD2: Ignoring recovery information on journal [ 396.646914][T12793] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 397.090222][T11903] ocfs2: Unmounting device (7,6) on (node local) [ 397.853917][T12811] rxe_eth0 speed is unknown, defaulting to 1000 [ 398.619057][T12820] loop7: detected capacity change from 0 to 32768 [ 398.646289][T12820] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.2393 (12820) [ 398.688896][T12820] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 398.699360][T12820] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 398.708478][T12820] BTRFS info (device loop7): turning on sync discard [ 398.715279][T12820] BTRFS info (device loop7): using free space tree [ 398.813081][T12820] BTRFS info (device loop7): enabling ssd optimizations [ 398.880111][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 398.880130][ T27] audit: type=1800 audit(1793194639.479:389): pid=12820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2393" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 399.128464][T12812] loop6: detected capacity change from 0 to 32768 [ 399.217134][T12812] XFS (loop6): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 399.301641][T12840] loop1: detected capacity change from 0 to 4096 [ 399.323038][T12840] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 399.384646][T12456] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 399.434741][T12840] ntfs3: loop1: ino=19, mi_enum_attr [ 399.459999][T12812] XFS (loop6): Ending clean mount [ 399.465265][T12840] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 399.489562][T12840] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 399.882581][T12797] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop7 scanned by udevd (12797) [ 399.930977][T11903] XFS (loop6): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 400.801454][T12855] loop7: detected capacity change from 0 to 32768 [ 400.875612][T12855] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 400.889745][T12855] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 400.900947][T12855] BTRFS info (device loop7): using free space tree [ 400.992362][T12855] BTRFS info (device loop7): enabling ssd optimizations [ 401.000060][T12855] BTRFS info (device loop7): auto enabling async discard [ 401.604199][T12456] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 401.615968][T12321] BTRFS info (device loop7): qgroup scan completed (inconsistency flag cleared) [ 401.688226][T12891] overlayfs: failed to clone upperpath [ 403.062781][T12907] rxe_eth0 speed is unknown, defaulting to 1000 [ 403.836392][T12917] loop1: detected capacity change from 0 to 32768 [ 403.883995][T12917] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 403.893398][T12917] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 404.025191][T12917] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 404.060946][ T5796] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 404.076673][ T5796] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 404.226936][ T5796] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 150ms [ 404.282905][ T5796] gfs2: fsid=syz:syz.0: jid=0: Done [ 404.299267][T12917] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 404.692475][T12908] loop7: detected capacity change from 0 to 32768 [ 404.739911][T12908] XFS (loop7): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 404.888687][T12908] XFS (loop7): Ending clean mount [ 405.317341][T12456] XFS (loop7): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 405.529496][T12928] overlayfs: failed to clone upperpath [ 405.723308][T12944] sch_tbf: burst 7 is lower than device bridge0 mtu (1514) ! [ 405.847468][T12950] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2419'. [ 405.879151][T12950] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 405.902274][T12952] loop7: detected capacity change from 0 to 1024 [ 405.971678][T12952] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.229767][T12456] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.367968][T12969] bond2: entered allmulticast mode [ 406.451519][T12971] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 406.510655][T12971] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 406.535294][T12978] netlink: 1363 bytes leftover after parsing attributes in process `syz.7.2427'. [ 406.896839][ T5884] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 406.986440][T12973] loop6: detected capacity change from 0 to 32768 [ 407.011615][T12973] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.2429 (12973) [ 407.077996][T12973] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 407.099638][ T5884] usb 8-1: Using ep0 maxpacket: 16 [ 407.110113][T12973] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 407.125262][ T5884] usb 8-1: unable to get BOS descriptor or descriptor too short [ 407.142305][ T5884] usb 8-1: config 1 interface 0 has no altsetting 0 [ 407.159536][T12973] BTRFS info (device loop6): turning on sync discard [ 407.166465][T12973] BTRFS info (device loop6): using free space tree [ 407.190255][ T5884] usb 8-1: string descriptor 0 read error: -22 [ 407.197099][ T5884] usb 8-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.40 [ 407.206218][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.391990][T12973] BTRFS info (device loop6): enabling ssd optimizations [ 407.471162][T12983] lo: entered promiscuous mode [ 407.490687][T12983] lo: entered allmulticast mode [ 407.496130][T12983] bond0: entered promiscuous mode [ 407.536872][T12983] bond0: entered allmulticast mode [ 407.552661][T12983] dummy0: entered promiscuous mode [ 407.568420][T12983] dummy0: entered allmulticast mode [ 407.588952][T12983] eql: entered promiscuous mode [ 407.607116][T12983] eql: entered allmulticast mode [ 407.619609][T12983] ifb0: entered promiscuous mode [ 407.634992][T12983] ifb0: entered allmulticast mode [ 407.654396][ T27] audit: type=1800 audit(1793194648.279:390): pid=12973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2429" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 407.678125][T12983] ifb1: entered promiscuous mode [ 407.695027][T12983] ifb1: entered allmulticast mode [ 407.706640][T12983] virtio_net virtio1 eth0: entered promiscuous mode [ 407.726774][T12983] virtio_net virtio1 eth0: entered allmulticast mode [ 407.755358][T12983] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 407.797242][T12983] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 407.811569][T12983] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 407.857454][T12983] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 407.904381][T12983] hwsim0: entered promiscuous mode [ 407.927012][T12983] hwsim0: entered allmulticast mode [ 407.940390][T12983] ieee802154 phy0 wpan0: entered promiscuous mode [ 407.988409][T12983] ieee802154 phy0 wpan0: entered allmulticast mode [ 408.027082][T12983] ieee802154 phy1 wpan1: entered promiscuous mode [ 408.064400][T12983] ieee802154 phy1 wpan1: entered allmulticast mode [ 408.113134][T12983] teql0: entered promiscuous mode [ 408.123740][T11903] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 408.134447][T12983] teql0: entered allmulticast mode [ 408.178284][T12983] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 408.339466][ T5884] usbhid 8-1:1.0: can't add hid device: -71 [ 408.358482][ T5884] usbhid: probe of 8-1:1.0 failed with error -71 [ 408.381594][ T5884] usb 8-1: USB disconnect, device number 2 [ 409.746791][ T5796] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 409.844912][T13058] jffs2: notice: (13058) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 409.968083][ T5796] usb 8-1: unable to get BOS descriptor or descriptor too short [ 409.991852][ T5796] usb 8-1: not running at top speed; connect to a high speed hub [ 410.022625][ T5796] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 410.076469][ T5796] usb 8-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 410.100576][ T5796] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.129130][ T5796] usb 8-1: Product: syz [ 410.133382][ T5796] usb 8-1: Manufacturer: syz [ 410.155545][ T5796] usb 8-1: SerialNumber: syz [ 410.246812][ T5884] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 410.403552][ T27] audit: type=1326 audit(1793194651.029:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13066 comm="syz.4.2455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe9dcd9f559 code=0x0 [ 410.464571][ T5796] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 410.482655][ T5884] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 410.500203][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.516792][ T5884] usb 7-1: Product: syz [ 410.523516][ T5884] usb 7-1: Manufacturer: syz [ 410.531298][ T5884] usb 7-1: SerialNumber: syz [ 410.541169][ T5884] usb 7-1: config 0 descriptor?? [ 410.646520][ T5796] usb 8-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 410.655232][ T5796] usb 8-1: found format II with max.bitrate = 4, frame size=7372 [ 410.800937][ T5884] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 411.048537][ T5796] usb 8-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 411.066834][ T5796] usb 8-1: found format II with max.bitrate = 4, frame size=7372 [ 411.274894][ T5796] usb 8-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 411.360008][ T5796] usb 8-1: USB disconnect, device number 3 [ 411.495179][T12824] udevd[12824]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.634323][ T5884] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 411.660708][ T5884] usb 7-1: USB disconnect, device number 2 [ 411.686990][T13083] bond0: entered promiscuous mode [ 411.715495][T13083] bond_slave_0: entered promiscuous mode [ 411.728175][T13083] bond_slave_1: entered promiscuous mode [ 413.537221][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 413.544795][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 413.560535][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 413.566770][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 413.617126][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 413.623247][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 413.662003][T13135] ip6gre2: entered promiscuous mode [ 413.667724][T13135] ip6gre2: entered allmulticast mode [ 413.691508][T13135] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 413.702921][T13135] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 413.831043][ T5973] libceph: connect (1)[c::]:6789 error -101 [ 413.837697][ T5973] libceph: mon0 (1)[c::]:6789 connect error [ 413.866346][T13139] loop1: detected capacity change from 0 to 512 [ 413.887653][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 413.894019][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 413.913255][T13139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.946931][T13139] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.957344][ T2983] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 413.989597][ T5884] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 414.007169][ T2983] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 414.177128][T11783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.312600][T13127] ceph: No mds server is up or the cluster is laggy [ 414.321553][T13131] ceph: No mds server is up or the cluster is laggy [ 414.328760][ T5973] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 414.347187][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 414.360701][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 414.377189][ T5982] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 414.860457][ T2138] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 414.951760][T13167] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2493'. [ 415.010459][T13169] loop1: detected capacity change from 0 to 512 [ 415.048539][ T2138] usb 7-1: Using ep0 maxpacket: 16 [ 415.070237][ T2138] usb 7-1: unable to get BOS descriptor or descriptor too short [ 415.089979][ T2138] usb 7-1: config 1 interface 0 has no altsetting 0 [ 415.097458][T13169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.113432][T13169] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.129797][ T2138] usb 7-1: string descriptor 0 read error: -22 [ 415.136317][ T2138] usb 7-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.40 [ 415.151702][ T2138] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.305177][T11783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.455684][T13154] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 415.565810][ T2138] usbhid 7-1:1.0: can't add hid device: -71 [ 415.572359][ T2138] usbhid: probe of 7-1:1.0 failed with error -71 [ 415.598261][ T2138] usb 7-1: USB disconnect, device number 3 [ 416.034767][T13197] loop7: detected capacity change from 0 to 512 [ 416.100630][T13197] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.136171][T13197] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.425419][T12456] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.727827][T13204] rxe_eth0 speed is unknown, defaulting to 1000 [ 416.826987][T13195] loop1: detected capacity change from 0 to 32768 [ 416.861380][T13195] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2513 (13195) [ 416.934955][T13195] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 416.958897][T13195] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 416.979522][T13195] BTRFS info (device loop1): turning on sync discard [ 416.995398][T13195] BTRFS info (device loop1): using free space tree [ 417.226401][T13195] BTRFS info (device loop1): enabling ssd optimizations [ 417.389180][ T27] audit: type=1800 audit(1793194658.019:392): pid=13195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2513" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 417.922521][T11783] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 417.986844][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 419.477689][T13269] gadgetfs: bound to dummy_udc driver [ 419.606911][T13259] loop7: detected capacity change from 0 to 32768 [ 419.625271][T13259] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.2519 (13259) [ 419.730605][T13259] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 419.764155][T13259] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 419.785251][T13259] BTRFS info (device loop7): setting nodatacow, compression disabled [ 419.804781][T13259] BTRFS info (device loop7): setting datasum, datacow enabled [ 419.833495][T13259] BTRFS info (device loop7): force clearing of disk cache [ 419.867395][T13259] BTRFS info (device loop7): enabling ssd optimizations [ 419.884757][T13259] BTRFS info (device loop7): using spread ssd allocation scheme [ 419.911609][T13259] BTRFS info (device loop7): turning on sync discard [ 419.953578][T13259] BTRFS info (device loop7): turning off barriers [ 419.971189][T13259] BTRFS info (device loop7): enabling disk space caching [ 419.999285][T13259] BTRFS info (device loop7): enabling auto defrag [ 420.005819][T13259] BTRFS info (device loop7): not using ssd optimizations [ 420.026651][T13259] BTRFS info (device loop7): not using spread ssd allocation scheme [ 420.045442][T13282] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 420.046837][T13259] BTRFS info (device loop7): disk space caching is enabled [ 420.205343][T13259] BTRFS info (device loop7): rebuilding free space tree [ 420.267923][T13259] BTRFS info (device loop7): disabling free space tree [ 420.275074][T13259] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 420.281172][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804dfc4800: rx timeout, send abort [ 420.285065][T13259] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 420.302895][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804dfc4800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 420.392712][T13301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2531'. [ 421.089173][T12456] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 421.844076][T13341] netlink: 'syz.6.2545': attribute type 10 has an invalid length. [ 421.910089][T13341] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.951600][T13341] bridge_slave_1: left allmulticast mode [ 421.958098][T13341] bridge_slave_1: left promiscuous mode [ 421.981994][T13341] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.864242][T13353] loop6: detected capacity change from 0 to 32768 [ 422.914781][T13353] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 423.138966][T13353] XFS (loop6): Ending clean mount [ 423.170370][T13353] XFS (loop6): Quotacheck needed: Please wait. [ 423.315552][T13353] XFS (loop6): Quotacheck: Done. [ 423.514875][T11903] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 425.742565][ T27] audit: type=1326 audit(1793194666.369:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13434 comm="syz.6.2580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08db19f559 code=0x7ffc0000 [ 425.806741][ T27] audit: type=1326 audit(1793194666.369:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13434 comm="syz.6.2580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08db19f559 code=0x7ffc0000 [ 425.917171][ T27] audit: type=1326 audit(1793194666.399:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13434 comm="syz.6.2580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08db19f559 code=0x7ffc0000 [ 426.005246][ T27] audit: type=1326 audit(1793194666.399:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13434 comm="syz.6.2580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08db19f559 code=0x7ffc0000 [ 426.076786][ T27] audit: type=1326 audit(1793194666.399:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13434 comm="syz.6.2580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f08db19f559 code=0x7ffc0000 [ 426.146819][ T27] audit: type=1326 audit(1793194666.399:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13434 comm="syz.6.2580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08db19f559 code=0x7ffc0000 [ 426.226900][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 426.246679][ T27] audit: type=1326 audit(1793194666.399:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13434 comm="syz.6.2580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08db19f559 code=0x7ffc0000 [ 426.328218][ T27] audit: type=1326 audit(1793194666.399:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13434 comm="syz.6.2580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08db19f559 code=0x7ffc0000 [ 426.410185][ T27] audit: type=1326 audit(1793194666.409:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13434 comm="syz.6.2580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f08db15fd8e code=0x7ffc0000 [ 426.498992][ T27] audit: type=1326 audit(1793194666.409:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13434 comm="syz.6.2580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08db19f559 code=0x7ffc0000 [ 426.640214][T13459] loop6: detected capacity change from 0 to 256 [ 426.742510][T12824] blk_print_req_error: 11 callbacks suppressed [ 426.742526][T12824] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 427.363687][T13464] loop7: detected capacity change from 0 to 40427 [ 427.386939][T13464] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 427.395937][T13464] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 427.412581][T13464] F2FS-fs (loop7): invalid crc value [ 427.446850][T13464] F2FS-fs (loop7): Found nat_bits in checkpoint [ 427.637602][T13464] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 427.644733][T13464] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 429.426355][T13516] netlink: 'syz.4.2612': attribute type 10 has an invalid length. [ 429.437852][ T5973] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 429.457942][T13516] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.465185][T13516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.475101][T13516] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.482414][T13516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.527567][T13516] bridge0: entered promiscuous mode [ 429.540237][T13516] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 429.566105][T13518] FAULT_INJECTION: forcing a failure. [ 429.566105][T13518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.579907][T13518] CPU: 0 PID: 13518 Comm: syz.1.2613 Not tainted syzkaller #0 [ 429.587459][T13518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 429.597581][T13518] Call Trace: [ 429.600923][T13518] [ 429.603908][T13518] dump_stack_lvl+0x18c/0x250 [ 429.608674][T13518] ? show_regs_print_info+0x20/0x20 [ 429.613954][T13518] ? load_image+0x420/0x420 [ 429.618533][T13518] ? __lock_acquire+0x7eb0/0x7eb0 [ 429.623632][T13518] ? __virt_addr_valid+0x10c/0x380 [ 429.628879][T13518] should_fail_ex+0x394/0x4c0 [ 429.633631][T13518] _copy_to_user+0x2f/0xa0 [ 429.638235][T13518] bpf_vlog_reverse_ubuf+0x2ad/0x3a0 [ 429.643640][T13518] bpf_vlog_finalize+0x1b3/0x3e0 [ 429.648669][T13518] btf_new_fd+0x4ca/0x9e0 [ 429.653087][T13518] ? bpf_btf_show_fdinfo+0x80/0x80 [ 429.658278][T13518] ? capable+0x88/0xe0 [ 429.662455][T13518] __sys_bpf+0x670/0x890 [ 429.666783][T13518] ? bpf_link_show_fdinfo+0x560/0x560 [ 429.672273][T13518] ? lock_chain_count+0x20/0x20 [ 429.677208][T13518] __x64_sys_bpf+0x7c/0x90 [ 429.681696][T13518] do_syscall_64+0x55/0xb0 [ 429.686187][T13518] ? clear_bhb_loop+0x40/0x90 [ 429.690933][T13518] ? clear_bhb_loop+0x40/0x90 [ 429.695677][T13518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.701618][T13518] RIP: 0033:0x7f806cb9f559 [ 429.706095][T13518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.725749][T13518] RSP: 002b:00007f806d9e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 429.734216][T13518] RAX: ffffffffffffffda RBX: 00007f806ce25fa0 RCX: 00007f806cb9f559 [ 429.742251][T13518] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 429.750364][T13518] RBP: 00007f806cc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 429.758414][T13518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.766443][T13518] R13: 00007f806ce26038 R14: 00007f806ce25fa0 R15: 00007fff804b90e8 [ 429.774751][T13518] [ 429.795844][ T5973] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 429.805788][ T5973] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 429.828622][ T5973] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 429.857348][ T5973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.865516][ T5973] usb 7-1: Product: syz [ 429.880581][ T5973] usb 7-1: Manufacturer: syz [ 429.885259][ T5973] usb 7-1: SerialNumber: syz [ 430.158558][ T5973] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 430.362513][ C1] usblp0: nonzero read bulk status received: -71 [ 430.378738][ T5973] usb 7-1: USB disconnect, device number 4 [ 430.625203][T13509] usblp0: removed [ 431.765208][T13572] syz_tun: entered allmulticast mode [ 431.790492][T13572] pim6reg: entered allmulticast mode [ 431.836946][T13572] pim6reg: left allmulticast mode [ 431.842178][T13572] syz_tun: left allmulticast mode [ 434.105865][T13625] loop1: detected capacity change from 0 to 128 [ 434.157103][T13625] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 434.224433][T13625] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 434.650231][T13637] loop1: detected capacity change from 0 to 16 [ 434.700682][T13637] erofs: (device loop1): mounted with root inode @ nid 36. [ 435.063712][T13149] tipc: Resetting bearer [ 435.323186][T13149] tipc: Disabling bearer [ 436.304693][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 436.328471][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 436.337213][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 436.347494][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 436.357036][ T5802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 436.364829][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 436.541665][T13661] rxe_eth0 speed is unknown, defaulting to 1000 [ 437.319272][T13679] netlink: 'syz.4.2682': attribute type 25 has an invalid length. [ 437.357056][T13679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2682'. [ 437.490371][T13679] netlink: 'syz.4.2682': attribute type 25 has an invalid length. [ 437.517031][T13679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2682'. [ 437.546257][T13683] TCP: TCP_TX_DELAY enabled [ 437.664840][T13661] chnl_net:caif_netlink_parms(): no params data found [ 438.015319][T13661] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.022774][T13661] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.030723][T13661] bridge_slave_0: entered allmulticast mode [ 438.038322][T13661] bridge_slave_0: entered promiscuous mode [ 438.053302][T13661] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.060678][T13661] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.068253][T13661] bridge_slave_1: entered allmulticast mode [ 438.075840][T13661] bridge_slave_1: entered promiscuous mode [ 438.120341][ T5903] kernel write not supported for file /192/setgroups (pid: 5903 comm: kworker/1:4) [ 438.162625][T13661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.190547][T13661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.311473][T13661] team0: Port device team_slave_0 added [ 438.341928][T13661] team0: Port device team_slave_1 added [ 438.404126][T13661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.415742][T13661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.466797][ T52] Bluetooth: hci1: command tx timeout [ 438.476520][T13661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.549074][T13661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.578265][T13661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.627466][T13661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.796362][T13661] hsr_slave_0: entered promiscuous mode [ 438.817727][T13661] hsr_slave_1: entered promiscuous mode [ 438.825305][T13661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.839294][T13661] Cannot create hsr debugfs directory [ 438.891286][T13711] loop7: detected capacity change from 0 to 1024 [ 438.913980][T13711] EXT4-fs: Ignoring removed nomblk_io_submit option [ 438.963849][T13711] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 439.074731][T13711] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.205741][T13711] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.297189][T13711] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.2691: bg 0: block 112: padding at end of block bitmap is not set [ 439.366792][T13711] EXT4-fs (loop7): Remounting filesystem read-only [ 439.531028][T13661] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 439.551828][T13661] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 439.561755][T12456] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 439.592721][T13661] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 439.631734][T13661] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 439.911191][T13661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.964499][T13661] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.010930][T12737] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.018187][T12737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.054681][T12737] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.061992][T12737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.249962][T13725] loop7: detected capacity change from 0 to 512 [ 440.314229][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.320922][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.335267][T13725] EXT4-fs (loop7): orphan cleanup on readonly fs [ 440.350407][T13725] EXT4-fs error (device loop7): ext4_ext_check_inode:532: inode #4: comm syz.7.2696: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 440.435009][T13725] EXT4-fs error (device loop7): ext4_quota_enable:7143: comm syz.7.2696: Bad quota inode: 4, type: 1 [ 440.501653][T13725] EXT4-fs warning (device loop7): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 440.546917][ T52] Bluetooth: hci1: command tx timeout [ 440.576977][T13725] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 440.585120][T13725] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 440.768694][T12456] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.920145][T13661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.588910][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 442.102819][T13661] veth0_vlan: entered promiscuous mode [ 442.150798][T13661] veth1_vlan: entered promiscuous mode [ 442.185607][T13775] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.2713'. [ 442.268781][T13661] veth0_macvtap: entered promiscuous mode [ 442.298875][T13661] veth1_macvtap: entered promiscuous mode [ 442.393092][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.443284][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.485730][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.513669][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.536798][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.587200][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.609474][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.626887][ T52] Bluetooth: hci1: command tx timeout [ 442.667715][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.698799][T13661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.745963][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.806876][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.836927][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.867724][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.884350][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.895347][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.906017][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.926631][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.943252][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.954313][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.967786][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.985094][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.000250][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 443.000266][ T27] audit: type=1326 audit(1793194683.629:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13800 comm="syz.6.2722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08db19f559 code=0x0 [ 443.033055][T13661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.046053][T13661] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.057831][T13661] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.071840][T13661] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.083085][T13661] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.304403][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.329968][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.384178][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.403214][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.897703][T13813] loop8: detected capacity change from 0 to 4096 [ 443.939811][T13813] EXT4-fs: Ignoring removed nobh option [ 443.986117][T13813] EXT4-fs: Ignoring removed bh option [ 444.057472][T13813] EXT4-fs (loop8): Test dummy encryption mode enabled [ 444.124840][T13813] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.253788][T13813] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 444.401784][T13661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.520911][T13831] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2731'. [ 444.555037][T13831] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2731'. [ 444.714151][ T5802] Bluetooth: hci1: command tx timeout [ 444.986524][T13837] serio: Serial port ptm0 [ 445.151492][T13844] netlink: 27 bytes leftover after parsing attributes in process `syz.8.2735'. [ 445.828706][T13864] loop6: detected capacity change from 0 to 1024 [ 445.911605][T13866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2745'. [ 446.431084][T13884] netlink: 'syz.8.2753': attribute type 9 has an invalid length. [ 446.443660][T13884] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2753'. [ 446.752174][T13892] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2756'. [ 446.765338][T13892] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2756'. [ 447.109564][T13900] loop7: detected capacity change from 0 to 512 [ 447.268493][T13900] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.281906][T13900] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.534632][T12456] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.933832][T13929] FAULT_INJECTION: forcing a failure. [ 447.933832][T13929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.960576][T13929] CPU: 1 PID: 13929 Comm: syz.6.2769 Not tainted syzkaller #0 [ 447.968132][T13929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 447.978289][T13929] Call Trace: [ 447.981623][T13929] [ 447.984602][T13929] dump_stack_lvl+0x18c/0x250 [ 447.989356][T13929] ? show_regs_print_info+0x20/0x20 [ 447.994619][T13929] ? load_image+0x420/0x420 [ 447.999192][T13929] ? __might_fault+0xaa/0x120 [ 448.003937][T13929] ? __lock_acquire+0x7eb0/0x7eb0 [ 448.009017][T13929] ? __virt_addr_valid+0x10c/0x380 [ 448.014225][T13929] should_fail_ex+0x394/0x4c0 [ 448.018975][T13929] _copy_to_user+0x2f/0xa0 [ 448.023458][T13929] bpf_verifier_vlog+0x4e6/0x840 [ 448.028472][T13929] __btf_verifier_log+0xe3/0x140 [ 448.033504][T13929] ? btf_check_sec_info+0x350/0x350 [ 448.038772][T13929] btf_verifier_log_member+0x5a9/0x800 [ 448.044311][T13929] ? __btf_verifier_log_type+0x690/0x690 [ 448.050023][T13929] btf_struct_check_meta+0xb3c/0xce0 [ 448.055392][T13929] btf_check_all_metas+0x371/0xaf0 [ 448.060579][T13929] btf_parse_type_sec+0xfc/0x1960 [ 448.065664][T13929] ? btf_check_sec_info+0x350/0x350 [ 448.070935][T13929] ? __virt_addr_valid+0x10c/0x380 [ 448.076129][T13929] ? btf_verifier_log+0x1a0/0x1a0 [ 448.081215][T13929] ? btf_parse_hdr+0x545/0x700 [ 448.086040][T13929] ? btf_parse_str_sec+0x20d/0x2a0 [ 448.091245][T13929] btf_new_fd+0x440/0x9e0 [ 448.095662][T13929] ? bpf_btf_show_fdinfo+0x80/0x80 [ 448.100836][T13929] ? capable+0x88/0xe0 [ 448.104971][T13929] __sys_bpf+0x670/0x890 [ 448.109281][T13929] ? bpf_link_show_fdinfo+0x560/0x560 [ 448.114739][T13929] ? lock_chain_count+0x20/0x20 [ 448.119664][T13929] __x64_sys_bpf+0x7c/0x90 [ 448.124411][T13929] do_syscall_64+0x55/0xb0 [ 448.128897][T13929] ? clear_bhb_loop+0x40/0x90 [ 448.133680][T13929] ? clear_bhb_loop+0x40/0x90 [ 448.138426][T13929] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.144389][T13929] RIP: 0033:0x7f08db19f559 [ 448.148902][T13929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.168579][T13929] RSP: 002b:00007f08dc117028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 448.177049][T13929] RAX: ffffffffffffffda RBX: 00007f08db425fa0 RCX: 00007f08db19f559 [ 448.185112][T13929] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 448.193140][T13929] RBP: 00007f08db236b20 R08: 0000000000000000 R09: 0000000000000000 [ 448.201166][T13929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.209188][T13929] R13: 00007f08db426038 R14: 00007f08db425fa0 R15: 00007ffcbc4b6a88 [ 448.217233][T13929] [ 448.365330][T13932] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 448.674190][T13943] ip6gre1: entered promiscuous mode [ 448.683690][T13943] ip6gre1: entered allmulticast mode [ 448.806248][T13949] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2777'. [ 449.314354][T13968] netlink: 'syz.4.2785': attribute type 11 has an invalid length. [ 449.534750][T13974] netlink: 'syz.4.2788': attribute type 4 has an invalid length. [ 450.714559][T13957] loop7: detected capacity change from 0 to 40427 [ 450.759666][T13957] F2FS-fs (loop7): invalid crc value [ 450.783757][T13957] F2FS-fs (loop7): Found nat_bits in checkpoint [ 451.039534][T13957] F2FS-fs (loop7): Start checkpoint disabled! [ 451.135318][T13957] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 451.293352][T13957] syz.7.2780: attempt to access beyond end of device [ 451.293352][T13957] loop7: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 451.426682][ C0] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967292. macoff=76 [ 451.769107][T12318] kworker/u4:27: attempt to access beyond end of device [ 451.769107][T12318] loop7: rw=1, sector=45104, nr_sectors = 8 limit=40427 [ 451.842040][T12318] kworker/u4:27: attempt to access beyond end of device [ 451.842040][T12318] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 451.887003][T12318] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 451.893983][T12318] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 453.177317][ T27] audit: type=1326 audit(1793194693.809:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14052 comm="syz.8.2817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b119f559 code=0x7fc00000 [ 453.213391][T11903] tipc: Resetting bearer [ 453.339370][T11903] tipc: Disabling bearer [ 453.836866][ T27] audit: type=1326 audit(1793194694.439:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14052 comm="syz.8.2817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f96b11408d9 code=0x7fc00000 [ 453.918212][ T27] audit: type=1326 audit(1793194694.439:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14052 comm="syz.8.2817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f96b114099d code=0x7fc00000 [ 454.006923][ T27] audit: type=1326 audit(1793194694.439:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14052 comm="syz.8.2817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f96b119f559 code=0x7fc00000 [ 454.160491][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 454.173873][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 454.186406][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 454.195413][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 454.207928][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 454.217076][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 454.286323][T14065] rxe_eth0 speed is unknown, defaulting to 1000 [ 454.537580][T14072] io-wq is not configured for unbound workers [ 455.004696][T14065] chnl_net:caif_netlink_parms(): no params data found [ 455.190751][T14065] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.218681][T14065] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.226068][T14065] bridge_slave_0: entered allmulticast mode [ 455.264212][T14065] bridge_slave_0: entered promiscuous mode [ 455.288070][T14065] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.314497][T14065] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.332486][T14065] bridge_slave_1: entered allmulticast mode [ 455.349410][T14065] bridge_slave_1: entered promiscuous mode [ 455.435475][T14065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.479071][T14065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.620880][T14065] team0: Port device team_slave_0 added [ 455.657836][T14065] team0: Port device team_slave_1 added [ 455.753217][T14065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.786700][T14065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.897669][T14065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.950990][T14065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.982305][T14065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.047915][T14065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.273006][T14065] hsr_slave_0: entered promiscuous mode [ 456.302452][T14065] hsr_slave_1: entered promiscuous mode [ 456.310132][ T52] Bluetooth: hci3: command tx timeout [ 456.349589][T14065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.380473][T14065] Cannot create hsr debugfs directory [ 457.967007][T14110] FAULT_INJECTION: forcing a failure. [ 457.967007][T14110] name failslab, interval 1, probability 0, space 0, times 0 [ 458.007719][T14110] CPU: 1 PID: 14110 Comm: syz.7.2840 Not tainted syzkaller #0 [ 458.015276][T14110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 458.025393][T14110] Call Trace: [ 458.028725][T14110] [ 458.031700][T14110] dump_stack_lvl+0x18c/0x250 [ 458.036437][T14110] ? show_regs_print_info+0x20/0x20 [ 458.041714][T14110] ? load_image+0x420/0x420 [ 458.046293][T14110] ? __might_sleep+0xe0/0xe0 [ 458.050960][T14110] ? __lock_acquire+0x7eb0/0x7eb0 [ 458.056029][T14110] should_fail_ex+0x394/0x4c0 [ 458.060769][T14110] should_failslab+0x9/0x20 [ 458.065305][T14110] slab_pre_alloc_hook+0x59/0x300 [ 458.070371][T14110] ? call_usermodehelper_setup+0x8e/0x260 [ 458.076147][T14110] __kmem_cache_alloc_node+0x53/0x260 [ 458.081556][T14110] ? call_usermodehelper_setup+0x8e/0x260 [ 458.087307][T14110] kmalloc_trace+0x2a/0xe0 [ 458.091766][T14110] call_usermodehelper_setup+0x8e/0x260 [ 458.097344][T14110] ? __request_module+0x600/0x600 [ 458.102404][T14110] __request_module+0x3bb/0x600 [ 458.107315][T14110] ? module_enforce_rwx_sections+0x150/0x150 [ 458.113339][T14110] ? __rwlock_init+0x150/0x150 [ 458.118165][T14110] ? do_raw_spin_unlock+0x121/0x230 [ 458.123464][T14110] __sock_create+0x323/0x940 [ 458.128180][T14110] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 458.134213][T14110] __sys_socket+0xd7/0x1b0 [ 458.138682][T14110] __x64_sys_socket+0x7a/0x90 [ 458.143401][T14110] do_syscall_64+0x55/0xb0 [ 458.147877][T14110] ? clear_bhb_loop+0x40/0x90 [ 458.152603][T14110] ? clear_bhb_loop+0x40/0x90 [ 458.157353][T14110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 458.163294][T14110] RIP: 0033:0x7f5c6af9f559 [ 458.167744][T14110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.187382][T14110] RSP: 002b:00007f5c691f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 458.195833][T14110] RAX: ffffffffffffffda RBX: 00007f5c6b225fa0 RCX: 00007f5c6af9f559 [ 458.203834][T14110] RDX: 0000000000000006 RSI: 0000000000080000 RDI: 0000000000000005 [ 458.211830][T14110] RBP: 00007f5c6b036b20 R08: 0000000000000000 R09: 0000000000000000 [ 458.219835][T14110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.227853][T14110] R13: 00007f5c6b226038 R14: 00007f5c6b225fa0 R15: 00007ffc5e7a4d68 [ 458.235891][T14110] [ 458.387956][ T52] Bluetooth: hci3: command tx timeout [ 458.555297][T14065] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 458.585899][T14065] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 458.613398][T14065] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 458.640311][T14065] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 458.911208][T14065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.971038][T14065] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.995148][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.002428][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.076210][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.083563][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.642651][T14144] netlink: 'syz.4.2851': attribute type 1 has an invalid length. [ 459.801165][T14065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.385796][T14166] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2859'. [ 460.469688][ T52] Bluetooth: hci3: command tx timeout [ 460.790061][T14065] veth0_vlan: entered promiscuous mode [ 460.834173][T14065] veth1_vlan: entered promiscuous mode [ 460.856445][ T5904] IPVS: starting estimator thread 0... [ 460.969112][T14182] IPVS: using max 19 ests per chain, 45600 per kthread [ 460.989926][T14065] veth0_macvtap: entered promiscuous mode [ 461.042589][T14065] veth1_macvtap: entered promiscuous mode [ 461.108581][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.146670][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.176978][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.216673][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.237164][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.255964][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.270603][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.281971][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.294883][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.317052][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.338627][T14065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.362890][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.387400][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.410692][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.423309][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.434713][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.445992][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.456481][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.470952][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.487772][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.510815][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.534676][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.555597][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.574755][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.607128][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.658775][T14065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.670736][T14191] netlink: 'syz.4.2870': attribute type 12 has an invalid length. [ 461.735437][T14065] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.776653][T14065] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.785955][T14065] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.806838][T14065] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.865523][T14199] ip_tables: iptables: counters copy to user failed while replacing table [ 462.230070][T12737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.255141][T12737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.315067][T12318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.329612][T12318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.556745][ T52] Bluetooth: hci3: command tx timeout [ 462.564333][T14212] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 462.576084][T14212] overlayfs: failed to set xattr on upper [ 462.582022][T14212] overlayfs: ...falling back to redirect_dir=nofollow. [ 462.589136][T14212] overlayfs: ...falling back to index=off. [ 462.595190][T14212] overlayfs: ...falling back to uuid=null. [ 462.601305][T14212] overlayfs: maximum fs stacking depth exceeded [ 463.274032][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2880'. [ 463.812016][T14234] loop7: detected capacity change from 0 to 8192 [ 464.169571][T14249] netlink: 'syz.7.2892': attribute type 12 has an invalid length. [ 464.186663][T14249] netlink: 'syz.7.2892': attribute type 29 has an invalid length. [ 464.227084][T14249] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2892'. [ 464.257812][T14249] netlink: 'syz.7.2892': attribute type 1 has an invalid length. [ 464.265638][T14249] netlink: 'syz.7.2892': attribute type 2 has an invalid length. [ 464.307438][T14249] netlink: 'syz.7.2892': attribute type 3 has an invalid length. [ 464.315253][T14249] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2892'. [ 464.355212][T14247] netlink: 'syz.9.2891': attribute type 1 has an invalid length. [ 464.412530][T14247] netlink: 'syz.9.2891': attribute type 2 has an invalid length. [ 464.436898][T14247] netlink: 244 bytes leftover after parsing attributes in process `syz.9.2891'. [ 465.322510][T14277] loop9: detected capacity change from 0 to 512 [ 465.427658][T14277] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.457242][T14277] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.840812][T14065] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.038148][T14304] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3393688969 (54299023504 ns) > initial count (49421972784 ns). Using initial count to start timer. [ 468.084798][T14357] loop7: detected capacity change from 0 to 2048 [ 468.253721][T14338] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12456] was attempted by " [ 468.431646][T14365] 9pnet_fd: Insufficient options for proto=fd [ 470.212069][T14388] bridge1: entered promiscuous mode [ 470.237481][T14388] bridge1: entered allmulticast mode [ 470.867947][ T5924] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 471.104588][T14411] loop7: detected capacity change from 0 to 2048 [ 471.204628][T14411] loop7: p4 < > [ 471.227413][ T5153] loop7: p4 < > [ 471.271682][T14411] syz.7.2955: attempt to access beyond end of device [ 471.271682][T14411] loop7p4: rw=2048, sector=2, nr_sectors = 1 limit=2 [ 471.337107][T14411] hfsplus: unable to find HFS+ superblock [ 471.451610][T14164] udevd[14164]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 471.530232][T14416] netlink: 'syz.8.2957': attribute type 16 has an invalid length. [ 471.538785][T14416] netlink: 'syz.8.2957': attribute type 17 has an invalid length. [ 471.602711][T14416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 471.645071][T14418] sit0: entered promiscuous mode [ 471.682024][T14418] netlink: 'syz.7.2958': attribute type 1 has an invalid length. [ 471.765171][T14418] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2958'. [ 472.223408][ T5973] IPVS: starting estimator thread 0... [ 472.232247][T14429] IPVS: rr: UDP [::1]:8080 - no destination available [ 472.288298][T14434] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2965'. [ 472.357459][T14430] IPVS: using max 18 ests per chain, 43200 per kthread [ 472.615943][T14441] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 472.869409][T14447] loop8: detected capacity change from 0 to 128 [ 472.948189][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 473.264164][T14455] loop9: detected capacity change from 0 to 8 [ 473.388854][T14457] FAULT_INJECTION: forcing a failure. [ 473.388854][T14457] name failslab, interval 1, probability 0, space 0, times 0 [ 473.452044][T14457] CPU: 0 PID: 14457 Comm: syz.7.2976 Not tainted syzkaller #0 [ 473.459606][T14457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 473.469719][T14457] Call Trace: [ 473.473056][T14457] [ 473.476037][T14457] dump_stack_lvl+0x18c/0x250 [ 473.480827][T14457] ? show_regs_print_info+0x20/0x20 [ 473.486097][T14457] ? load_image+0x420/0x420 [ 473.490674][T14457] ? __might_sleep+0xe0/0xe0 [ 473.495338][T14457] ? __lock_acquire+0x7eb0/0x7eb0 [ 473.500449][T14457] should_fail_ex+0x394/0x4c0 [ 473.505210][T14457] should_failslab+0x9/0x20 [ 473.509782][T14457] slab_pre_alloc_hook+0x59/0x300 [ 473.515213][T14457] ? __ns_get_path+0x2e/0x5f0 [ 473.520004][T14457] kmem_cache_alloc_lru+0x4d/0x2c0 [ 473.525174][T14457] ? new_inode_pseudo+0x82/0x1d0 [ 473.530183][T14457] new_inode_pseudo+0x82/0x1d0 [ 473.535008][T14457] __ns_get_path+0x249/0x5f0 [ 473.539680][T14457] ns_get_path+0x54/0x90 [ 473.543991][T14457] proc_ns_get_link+0x16c/0x2d0 [ 473.548904][T14457] ? proc_ns_instantiate+0xf0/0xf0 [ 473.554087][T14457] ? bpf_lsm_inode_follow_link+0x9/0x10 [ 473.559695][T14457] ? security_inode_follow_link+0xb7/0x100 [ 473.565641][T14457] ? proc_ns_instantiate+0xf0/0xf0 [ 473.570856][T14457] pick_link+0x666/0xdd0 [ 473.575190][T14457] step_into+0xc18/0xee0 [ 473.579515][T14457] ? rcu_read_lock_any_held+0xb4/0x140 [ 473.585049][T14457] ? rcu_read_lock_bh_held+0x100/0x100 [ 473.590570][T14457] ? set_root+0x3a0/0x3a0 [ 473.594966][T14457] ? d_splice_alias+0x114/0x330 [ 473.599879][T14457] path_openat+0x1656/0x3270 [ 473.604576][T14457] ? do_filp_open+0x430/0x430 [ 473.609330][T14457] do_filp_open+0x1f2/0x430 [ 473.613921][T14457] ? vfs_tmpfile+0x620/0x620 [ 473.618610][T14457] ? _raw_spin_unlock+0x28/0x40 [ 473.623554][T14457] ? alloc_fd+0x590/0x640 [ 473.627958][T14457] do_sys_openat2+0x134/0x1d0 [ 473.632706][T14457] ? do_sys_open+0xe0/0xe0 [ 473.637186][T14457] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 473.643232][T14457] ? lock_chain_count+0x20/0x20 [ 473.648146][T14457] __x64_sys_openat+0x139/0x160 [ 473.653070][T14457] do_syscall_64+0x55/0xb0 [ 473.657546][T14457] ? clear_bhb_loop+0x40/0x90 [ 473.662291][T14457] ? clear_bhb_loop+0x40/0x90 [ 473.667045][T14457] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.672999][T14457] RIP: 0033:0x7f5c6af5fd8e [ 473.677469][T14457] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 473.697142][T14457] RSP: 002b:00007f5c691f5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 473.705629][T14457] RAX: ffffffffffffffda RBX: 00007f5c691f66c0 RCX: 00007f5c6af5fd8e [ 473.713663][T14457] RDX: 0000000000000002 RSI: 00007f5c691f5f90 RDI: ffffffffffffff9c [ 473.721700][T14457] RBP: 00007f5c6b036b20 R08: 0000000000000000 R09: 0000000000000000 [ 473.729761][T14457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.737789][T14457] R13: 00007f5c6b226038 R14: 00007f5c6b225fa0 R15: 00007ffc5e7a4d68 [ 473.745840][T14457] [ 474.876622][T14486] 9pnet: p9_errstr2errno: server reported unknown error õ€ÿ0xffffffffffffffff [ 474.931695][T14484] loop9: detected capacity change from 0 to 4096 [ 475.102636][T14484] ntfs3: loop9: Failed to load $Extend (-22). [ 475.127106][T14484] ntfs3: loop9: Failed to initialize $Extend. [ 475.413877][T14482] loop7: detected capacity change from 0 to 32768 [ 475.494568][T14482] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 475.534679][T14482] JBD2: Ignoring recovery information on journal [ 475.712229][T14482] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 475.809388][T14495] loop9: detected capacity change from 0 to 64 [ 475.885290][T14482] (syz.7.2986,14482,1):ocfs2_get_suballoc_slot_bit:2748 ERROR: invalid inode 2 requested [ 475.922498][ T27] audit: type=1800 audit(1793194726.555:430): pid=14495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2999" name="file1" dev="loop9" ino=21 res=0 errno=0 [ 475.973323][T14482] (syz.7.2986,14482,1):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -22 [ 476.020646][T14482] (syz.7.2986,14482,1):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -22 [ 476.060823][T14482] (syz.7.2986,14482,1):ocfs2_test_inode_bit:2896 ERROR: status = -22 [ 476.258926][T12456] ocfs2: Unmounting device (7,7) on (node local) [ 476.343734][T14502] loop8: detected capacity change from 0 to 1024 [ 476.379565][T14502] EXT4-fs: Ignoring removed bh option [ 476.490463][T14502] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 476.577004][T14502] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.781953][T13661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 477.176874][T14528] loop8: detected capacity change from 0 to 512 [ 477.239560][T14528] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 477.317892][T14528] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 477.387336][T14528] EXT4-fs (loop8): orphan cleanup on readonly fs [ 477.419305][T14528] EXT4-fs warning (device loop8): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 477.447897][T14533] ip_tables: iptables: counters copy to user failed while replacing table [ 477.460477][T14528] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 477.485901][T14528] EXT4-fs (loop8): 1 orphan inode deleted [ 477.510145][T14528] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 477.594143][T14528] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.314412][T14573] FAULT_INJECTION: forcing a failure. [ 479.314412][T14573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.342009][T14573] CPU: 1 PID: 14573 Comm: syz.7.3022 Not tainted syzkaller #0 [ 479.349566][T14573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 479.359717][T14573] Call Trace: [ 479.363042][T14573] [ 479.366021][T14573] dump_stack_lvl+0x18c/0x250 [ 479.370816][T14573] ? show_regs_print_info+0x20/0x20 [ 479.376079][T14573] ? load_image+0x420/0x420 [ 479.380655][T14573] ? __might_fault+0xaa/0x120 [ 479.385393][T14573] ? __lock_acquire+0x7eb0/0x7eb0 [ 479.390493][T14573] should_fail_ex+0x394/0x4c0 [ 479.395240][T14573] _copy_from_iter+0x1cd/0x1290 [ 479.400165][T14573] ? zone_statistics+0x170/0x170 [ 479.405253][T14573] ? copyout_mc+0x70/0x70 [ 479.409644][T14573] ? tun_get_user+0x667/0x3d30 [ 479.414522][T14573] ? alloc_page_interleave+0x15f/0x1e0 [ 479.420043][T14573] ? page_copy_sane+0x4e/0x270 [ 479.424866][T14573] copy_page_from_iter+0x7b/0x100 [ 479.429957][T14573] tun_get_user+0x1c33/0x3d30 [ 479.434702][T14573] ? tun_get_user+0x667/0x3d30 [ 479.439542][T14573] ? rcu_read_unlock+0xa0/0xa0 [ 479.444383][T14573] ? tun_get+0x1c/0x2e0 [ 479.448596][T14573] ? __lock_acquire+0x7eb0/0x7eb0 [ 479.453735][T14573] ? tun_get+0x1c/0x2e0 [ 479.457958][T14573] tun_chr_write_iter+0x119/0x200 [ 479.463039][T14573] vfs_write+0x474/0x9a0 [ 479.467354][T14573] ? file_end_write+0x250/0x250 [ 479.472276][T14573] ? __fget_files+0x3fc/0x460 [ 479.477200][T14573] ? __fdget_pos+0x1d8/0x330 [ 479.481860][T14573] ? ksys_write+0x74/0x260 [ 479.486349][T14573] ksys_write+0x151/0x260 [ 479.490750][T14573] ? __ia32_sys_read+0x90/0x90 [ 479.495588][T14573] ? lockdep_hardirqs_on+0x98/0x150 [ 479.500879][T14573] do_syscall_64+0x55/0xb0 [ 479.505359][T14573] ? clear_bhb_loop+0x40/0x90 [ 479.510101][T14573] ? clear_bhb_loop+0x40/0x90 [ 479.514849][T14573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.520808][T14573] RIP: 0033:0x7f5c6af5fd8e [ 479.525284][T14573] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 479.545058][T14573] RSP: 002b:00007f5c691f5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 479.553545][T14573] RAX: ffffffffffffffda RBX: 00007f5c691f66c0 RCX: 00007f5c6af5fd8e [ 479.561584][T14573] RDX: 000000000000000e RSI: 0000200000000480 RDI: 00000000000000c8 [ 479.569638][T14573] RBP: 00007f5c6b036b20 R08: 0000000000000000 R09: 0000000000000000 [ 479.577657][T14573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.585761][T14573] R13: 00007f5c6b226038 R14: 00007f5c6b225fa0 R15: 00007ffc5e7a4d68 [ 479.593798][T14573] [ 480.368730][T14589] Bluetooth: ISO socket layer initialized [ 480.680845][T14597] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 482.591010][T14667] bond0: option slaves: interface +duÒ&B. does not exist! [ 482.882285][T14675] ref_ctr_offset mismatch. inode: 0x1e7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 483.529814][T14693] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3065'. [ 483.567452][T14693] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3065'. [ 484.767238][T14733] overlayfs: refusing to follow metacopy origin for (/file1) [ 484.988078][T14739] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3083'. [ 485.214574][T14747] overlayfs: failed to clone upperpath [ 485.390644][T14754] Invalid ELF header type: 2 != 1 [ 485.399727][T14751] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 485.867679][T14773] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3097'. [ 486.075289][T14773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.122999][T14773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.152301][T14773] bond0 (unregistering): Released all slaves [ 486.687632][T14798] bridge2: entered promiscuous mode [ 486.692961][T14798] bridge2: entered allmulticast mode [ 487.197936][ T5903] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 487.261914][T14825] FAULT_INJECTION: forcing a failure. [ 487.261914][T14825] name failslab, interval 1, probability 0, space 0, times 0 [ 487.293174][T14827] netlink: 'syz.4.3119': attribute type 15 has an invalid length. [ 487.303600][T14825] CPU: 0 PID: 14825 Comm: syz.8.3118 Not tainted syzkaller #0 [ 487.311142][T14825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 487.321270][T14825] Call Trace: [ 487.324598][T14825] [ 487.327580][T14825] dump_stack_lvl+0x18c/0x250 [ 487.332330][T14825] ? show_regs_print_info+0x20/0x20 [ 487.337600][T14825] ? load_image+0x420/0x420 [ 487.342171][T14825] ? __lock_acquire+0x7eb0/0x7eb0 [ 487.347254][T14825] ? new_inode+0x1b6/0x1d0 [ 487.351735][T14825] should_fail_ex+0x394/0x4c0 [ 487.356474][T14825] should_failslab+0x9/0x20 [ 487.361038][T14825] slab_pre_alloc_hook+0x59/0x300 [ 487.366142][T14825] ? inode_update_timestamps+0x600/0x600 [ 487.371831][T14825] kmem_cache_alloc_lru+0x4d/0x2c0 [ 487.376975][T14825] ? __d_alloc+0x31/0x710 [ 487.381341][T14825] __d_alloc+0x31/0x710 [ 487.385541][T14825] d_make_root+0x4a/0xe0 [ 487.389812][T14825] ? mqueue_get_tree+0xf0/0xf0 [ 487.394614][T14825] mqueue_fill_super+0x101/0x150 [ 487.399587][T14825] get_tree_nodev+0xb5/0x140 [ 487.404220][T14825] vfs_get_tree+0x8c/0x280 [ 487.408706][T14825] fc_mount+0x1c/0xb0 [ 487.412761][T14825] mq_init_ns+0x3a1/0x510 [ 487.417151][T14825] copy_ipcs+0x309/0x500 [ 487.421431][T14825] create_new_namespaces+0x212/0x700 [ 487.426763][T14825] unshare_nsproxy_namespaces+0x11a/0x160 [ 487.432528][T14825] ksys_unshare+0x4fa/0x8f0 [ 487.437083][T14825] ? sighand_ctor+0x50/0x50 [ 487.441643][T14825] ? lock_chain_count+0x20/0x20 [ 487.446536][T14825] ? syscall_enter_from_user_mode+0x25/0x80 [ 487.452473][T14825] __x64_sys_unshare+0x38/0x40 [ 487.457286][T14825] do_syscall_64+0x55/0xb0 [ 487.461756][T14825] ? clear_bhb_loop+0x40/0x90 [ 487.466492][T14825] ? clear_bhb_loop+0x40/0x90 [ 487.471210][T14825] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 487.477166][T14825] RIP: 0033:0x7f96b119f559 [ 487.481615][T14825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.501267][T14825] RSP: 002b:00007f96b1fc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 487.509732][T14825] RAX: ffffffffffffffda RBX: 00007f96b1425fa0 RCX: 00007f96b119f559 [ 487.517770][T14825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 487.525771][T14825] RBP: 00007f96b1236b20 R08: 0000000000000000 R09: 0000000000000000 [ 487.533791][T14825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.541814][T14825] R13: 00007f96b1426038 R14: 00007f96b1425fa0 R15: 00007ffd0bced868 [ 487.549943][T14825] [ 487.564163][ T5903] usb 10-1: Using ep0 maxpacket: 16 [ 487.567518][T14827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3119'. [ 487.585229][T14827] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 487.587701][ T5903] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.594404][T14827] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 487.615873][T14827] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 487.620013][ T5903] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 487.627061][T14827] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 487.652678][T14827] netlink: 'syz.4.3119': attribute type 15 has an invalid length. [ 487.660872][T14827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3119'. [ 487.694810][ T5903] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 487.707069][ T5903] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.719383][ T5903] usb 10-1: config 0 descriptor?? [ 488.173798][ T5903] HID 045e:07da: Invalid code 65791 type 1 [ 488.200928][ T5903] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0012/input/input22 [ 488.262502][ T5903] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 489.102782][ T5982] usb 10-1: USB disconnect, device number 2 [ 489.535698][T14853] device-mapper: ioctl: Unable to rename non-existent device, to . [ 490.326844][ T5904] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 490.509341][ T5904] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 490.529126][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.567111][ T6103] unregister_netdevice: waiting for vcan0 to become free. Usage count = 3 [ 490.587788][ T6103] ref_tracker: vcan0@ffff8880770f8600 has 1/2 users at [ 490.587788][ T6103] j1939_ecu_create_locked+0x1c6/0x400 [ 490.587788][ T6103] j1939_local_ecu_get+0xec/0x400 [ 490.587788][ T6103] j1939_sk_bind+0x70a/0xc60 [ 490.587788][ T6103] __sys_bind+0x2f0/0x3f0 [ 490.587788][ T6103] __x64_sys_bind+0x7a/0x90 [ 490.587788][ T6103] do_syscall_64+0x55/0xb0 [ 490.587788][ T6103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.587788][ T6103] [ 490.634456][ T6103] ref_tracker: vcan0@ffff8880770f8600 has 1/2 users at [ 490.634456][ T6103] j1939_netdev_start+0x37c/0xaf0 [ 490.634456][ T6103] j1939_sk_bind+0x941/0xc60 [ 490.634456][ T6103] __sys_bind+0x2f0/0x3f0 [ 490.634456][ T6103] __x64_sys_bind+0x7a/0x90 [ 490.634456][ T6103] do_syscall_64+0x55/0xb0 [ 490.634456][ T6103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.634456][ T6103] [ 491.624275][ T5904] usb 9-1: non-Atmel transceiver xxxx1f7f [ 491.836984][ T5904] usb 9-1: Firmware version (0.0) predates our first public release. [ 491.848592][ T5904] usb 9-1: Please update to version 0.2 or newer [ 491.856310][ T5904] usb 9-1: atusb_probe: initialization failed, error = -19 [ 491.874350][ T5904] usb 9-1: USB disconnect, device number 2