last executing test programs: 43.045687736s ago: executing program 0 (id=934): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) close(r1) r2 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x2, 0x9}) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) r3 = epoll_create1(0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x140f, 0x0, 0x70bd23, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x6058884) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x18}) mq_timedreceive(r2, &(0x7f0000001140)=""/170, 0xaa, 0x0, 0x0) epoll_wait(r3, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000000)={0x28, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x80000000}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x20000094) 42.321610897s ago: executing program 0 (id=936): pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x40000000000007c, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x714f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 41.393416123s ago: executing program 0 (id=941): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 40.223476879s ago: executing program 0 (id=944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 38.895322501s ago: executing program 0 (id=955): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf0c, &(0x7f0000000400)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0xa) fchdir(r6) r7 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r7, 0x2007ffb) close(r7) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8000003d) fcntl$setsig(r8, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 38.839449351s ago: executing program 0 (id=949): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51a, &(0x7f0000000f00)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) write(0xffffffffffffffff, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0xb01, @empty, 0x6}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="0dc785c4cb69d0b3d461ca", 0xb}], 0x1}}], 0x1, 0x48000) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 38.476350272s ago: executing program 32 (id=949): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51a, &(0x7f0000000f00)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) write(0xffffffffffffffff, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0xb01, @empty, 0x6}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="0dc785c4cb69d0b3d461ca", 0xb}], 0x1}}], 0x1, 0x48000) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 32.446581922s ago: executing program 1 (id=971): openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) 32.445442443s ago: executing program 3 (id=973): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000bc0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x1, 0x1537, &(0x7f0000001140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r3, 0xfffffffe) accept4$unix(r3, 0x0, 0x0, 0x0) 30.976844239s ago: executing program 1 (id=976): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x130bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x10, 0xffe4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x20040052) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0006000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4004805) 30.860226138s ago: executing program 3 (id=977): syz_open_procfs(0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x39000, 0x0) r6 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) splice(r4, 0x0, r6, 0x0, 0x2, 0x5) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffe3e) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 30.781276981s ago: executing program 2 (id=978): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x80088a02, 0xfffffffffffff29a) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$revoke(0x3, r3) 29.190353388s ago: executing program 1 (id=979): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x1}, 0x1}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r3, 0x2219, 0x4be2, 0x16, 0x0, 0x0) 29.18118508s ago: executing program 2 (id=980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 29.18070783s ago: executing program 3 (id=981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 28.199750374s ago: executing program 2 (id=982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000810, &(0x7f0000000000)={[{@stats}]}) 27.09036512s ago: executing program 2 (id=983): openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0xfffffffffffffffc) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x6, 0x800, 0x6, 0x4, 0x0, @multicast, @rand_addr, @broadcast, @empty}}}}, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x3) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) 27.08939947s ago: executing program 3 (id=991): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 26.979867398s ago: executing program 1 (id=984): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xa57, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(r1, &(0x7f0000000580)="44c394f305916c4516999da288a8", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0500000014000100ff0000000000000000000000000000010800020009000000080002000c000000"], 0x40}, 0x1, 0x0, 0x0, 0x40881}, 0x20040000) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8004, 0x2823}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc044010}, 0x20040040) 25.727823148s ago: executing program 1 (id=985): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) syz_open_dev$usbfs(0x0, 0x8, 0x301e80) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 25.726110419s ago: executing program 2 (id=986): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x2, 0x7ffe}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r4, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r5, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r2, r5, 0x6700000000000000) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close_range(r1, 0xffffffffffffffff, 0x0) 25.723532999s ago: executing program 3 (id=987): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 24.778065847s ago: executing program 2 (id=988): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) write(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 24.516351752s ago: executing program 3 (id=989): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x80088a02, 0xfffffffffffff29a) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$revoke(0x3, r3) 24.469233279s ago: executing program 1 (id=990): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 10.581911077s ago: executing program 4 (id=950): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000a00)={[{@noacl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@minixdf}, {@dax_inode}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [{@dont_hash}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x58, 0x31, 0x39, 0x38, 0x65, 0x38, 0x39, 0x36], 0x2d, [0x36, 0x37, 0x64, 0x64], 0x2d, [0x65, 0x37, 0x64, 0x66], 0x2d, [0x35, 0x63, 0x34, 0x35], 0x2d, [0x65, 0x31, 0x62, 0x32, 0x37, 0x4, 0x64, 0x6a]}}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@audit}, {@fowner_lt}], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe2(0x0, 0x0) pipe2(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x80000000000003) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) waitid(0x2, 0x0, 0x0, 0x4, 0x0) ptrace$pokeuser(0x6, 0x0, 0xf03, 0x100000001) 8.679852216s ago: executing program 4 (id=950): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000a00)={[{@noacl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@minixdf}, {@dax_inode}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [{@dont_hash}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x58, 0x31, 0x39, 0x38, 0x65, 0x38, 0x39, 0x36], 0x2d, [0x36, 0x37, 0x64, 0x64], 0x2d, [0x65, 0x37, 0x64, 0x66], 0x2d, [0x35, 0x63, 0x34, 0x35], 0x2d, [0x65, 0x31, 0x62, 0x32, 0x37, 0x4, 0x64, 0x6a]}}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@audit}, {@fowner_lt}], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe2(0x0, 0x0) pipe2(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x80000000000003) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) waitid(0x2, 0x0, 0x0, 0x4, 0x0) ptrace$pokeuser(0x6, 0x0, 0xf03, 0x100000001) 6.652745676s ago: executing program 4 (id=950): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000a00)={[{@noacl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@minixdf}, {@dax_inode}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [{@dont_hash}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x58, 0x31, 0x39, 0x38, 0x65, 0x38, 0x39, 0x36], 0x2d, [0x36, 0x37, 0x64, 0x64], 0x2d, [0x65, 0x37, 0x64, 0x66], 0x2d, [0x35, 0x63, 0x34, 0x35], 0x2d, [0x65, 0x31, 0x62, 0x32, 0x37, 0x4, 0x64, 0x6a]}}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@audit}, {@fowner_lt}], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe2(0x0, 0x0) pipe2(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x80000000000003) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) waitid(0x2, 0x0, 0x0, 0x4, 0x0) ptrace$pokeuser(0x6, 0x0, 0xf03, 0x100000001) 4.527766292s ago: executing program 4 (id=950): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000a00)={[{@noacl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@minixdf}, {@dax_inode}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [{@dont_hash}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x58, 0x31, 0x39, 0x38, 0x65, 0x38, 0x39, 0x36], 0x2d, [0x36, 0x37, 0x64, 0x64], 0x2d, [0x65, 0x37, 0x64, 0x66], 0x2d, [0x35, 0x63, 0x34, 0x35], 0x2d, [0x65, 0x31, 0x62, 0x32, 0x37, 0x4, 0x64, 0x6a]}}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@audit}, {@fowner_lt}], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe2(0x0, 0x0) pipe2(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x80000000000003) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) waitid(0x2, 0x0, 0x0, 0x4, 0x0) ptrace$pokeuser(0x6, 0x0, 0xf03, 0x100000001) 2.33084546s ago: executing program 4 (id=950): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000a00)={[{@noacl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@minixdf}, {@dax_inode}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [{@dont_hash}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x58, 0x31, 0x39, 0x38, 0x65, 0x38, 0x39, 0x36], 0x2d, [0x36, 0x37, 0x64, 0x64], 0x2d, [0x65, 0x37, 0x64, 0x66], 0x2d, [0x35, 0x63, 0x34, 0x35], 0x2d, [0x65, 0x31, 0x62, 0x32, 0x37, 0x4, 0x64, 0x6a]}}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@audit}, {@fowner_lt}], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$eJzs289vFFUcAPDvbFt+YyviDxC1ij8af7S0oHLwgtGEi4mJHvBYSyFIoYbWRAiR6gGPhpNH9WjiX+BJLkY9abzq3ZgQw0U0kYyZ3ZllaXeX7W63C+znk0x33uybed83M6998940gL41mv1IIrZFxG8RMRwRA8szjFY+rl09P/PP1fMzSaTpW38l2W7x99XzM0XWJP/cmifGStVNKyycPXdyem5u9kyenlg89f7EwtlzL5w4NX189vjs6amDBw/sn3z5pakX16Se27NYd380v2fX4XcuvTFz5NK7P36TBbct/762HhUjHZc5GqMNT8BTHR/99rI9/2x4wbktZW19MCKGyu1/OAbKqYrheP2TngYHdFWapunGFVurPYClFLiLJdHrCIDeKP7QZ8+/xbKO3Y+eu3Ko8gCU1ftavlS+GYxSnmeo5vl2rY1GxJGlf7/Ilqg7DgEAsLa+y/o/z9fr/5XigZp89+RzQyMRcW9E7IiI+yJiZ0TcH1HO+2BEPLTK8keXpW+Ufz0fhPplc/u1u7UrhyJ5JZ/burn/V/T+YmQgT20v138oOXZibnZffk7GYmhjlp5sUsbl1379rNF3tf2/bMnKL/qCeRx/Di4boDs6vTjdSZ1rXfm4PAZ4YWX9k+pMQBIRuyJidxvH3xQRJ579ek91w4aag+aa17+JwTYCWib9KuKZyvVfimX1j5pQm8xPTmyKudl9E8VdsdJPP198s1H5t77+3ZVd/y117/9q/UeS2vnahdWXcfH3Txs+07R7/29I3i6vF7fTh9OLi2cmIzYkSyu3T93Yt0gX+bP6j+2t3/53RFz/Mt/v4YjIbuJHIuLRiHgsj/3xiHgiIvY2qf8Prz75Xvv1766s/kdXdf1XvzJw8vtvG5Xf2vU/UF4by7e08vuv1QA7OXcAAABwpyiV34FPSuPV9VJpfLzyDv/O2FKam19YfO7Y/Aenj1belR+JoVIx0jVcMx46mY+5FOmpfKy4SO8vjxunaZpuLqfHZ+bnujWnDrRma4P2n/ljoNfRAV1Xnkc7+Hlrmf2HF9xVbppHH+pdHMD6W4P3aIA7lPYP/Uv7h/5Vr/1fiLjWg1CAdebvP/Qv7R/6l/YP/Uv7h77Uyf/1N1vZcbhbR74TVy5HRKM8A20feWNEdBrh01vb3T1KvT6rra8U77RVt5TqZP6vVxFm17HVzBdivQLr8S8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANfJ/AAAA///tr+cS") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe2(0x0, 0x0) pipe2(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x80000000000003) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) waitid(0x2, 0x0, 0x0, 0x4, 0x0) ptrace$pokeuser(0x6, 0x0, 0xf03, 0x100000001) 0s ago: executing program 4 (id=950): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000a00)={[{@noacl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@minixdf}, {@dax_inode}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [{@dont_hash}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x58, 0x31, 0x39, 0x38, 0x65, 0x38, 0x39, 0x36], 0x2d, [0x36, 0x37, 0x64, 0x64], 0x2d, [0x65, 0x37, 0x64, 0x66], 0x2d, [0x35, 0x63, 0x34, 0x35], 0x2d, [0x65, 0x31, 0x62, 0x32, 0x37, 0x4, 0x64, 0x6a]}}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@audit}, {@fowner_lt}], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe2(0x0, 0x0) pipe2(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x80000000000003) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) waitid(0x2, 0x0, 0x0, 0x4, 0x0) ptrace$pokeuser(0x6, 0x0, 0xf03, 0x100000001) kernel console output (not intermixed with test programs): obson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. syzkaller login: [ 67.182084][ T5760] cgroup: Unknown subsys name 'net' [ 67.310760][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.662098][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.970439][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.985343][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.993081][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.001047][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.008850][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.016183][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.103904][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.112716][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.122445][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.137263][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.155734][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.163082][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.171129][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.179331][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.183949][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.186995][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.195923][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.209258][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.209869][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.217082][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.225084][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.231431][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.238150][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.252483][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.456111][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 70.585804][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.593202][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.600841][ T5771] bridge_slave_0: entered allmulticast mode [ 70.608549][ T5771] bridge_slave_0: entered promiscuous mode [ 70.626931][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.634388][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.641622][ T5771] bridge_slave_1: entered allmulticast mode [ 70.648364][ T5771] bridge_slave_1: entered promiscuous mode [ 70.728229][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.758168][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.770522][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 70.840126][ T5771] team0: Port device team_slave_0 added [ 70.852281][ T5771] team0: Port device team_slave_1 added [ 70.867513][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 70.948559][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.955718][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.981781][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.002996][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.010050][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.035990][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.070534][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 71.081963][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.089601][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.097049][ T5775] bridge_slave_0: entered allmulticast mode [ 71.103705][ T5775] bridge_slave_0: entered promiscuous mode [ 71.131346][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.138618][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.146174][ T5775] bridge_slave_1: entered allmulticast mode [ 71.152790][ T5775] bridge_slave_1: entered promiscuous mode [ 71.211465][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.218923][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.226321][ T5777] bridge_slave_0: entered allmulticast mode [ 71.232939][ T5777] bridge_slave_0: entered promiscuous mode [ 71.242083][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.253523][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.273208][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.280606][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.287816][ T5777] bridge_slave_1: entered allmulticast mode [ 71.294403][ T5777] bridge_slave_1: entered promiscuous mode [ 71.314537][ T5771] hsr_slave_0: entered promiscuous mode [ 71.320847][ T5771] hsr_slave_1: entered promiscuous mode [ 71.363225][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.384117][ T5775] team0: Port device team_slave_0 added [ 71.402426][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.428162][ T5775] team0: Port device team_slave_1 added [ 71.458441][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.465733][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.473245][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.474863][ T5774] bridge_slave_0: entered allmulticast mode [ 71.484053][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.486998][ T5774] bridge_slave_0: entered promiscuous mode [ 71.500279][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.507714][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.514971][ T5774] bridge_slave_1: entered allmulticast mode [ 71.522069][ T5774] bridge_slave_1: entered promiscuous mode [ 71.551402][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.558580][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.584587][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.617222][ T5777] team0: Port device team_slave_0 added [ 71.625811][ T5777] team0: Port device team_slave_1 added [ 71.639174][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.646273][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.672715][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.699310][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.731084][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.738232][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.764233][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.783797][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.809345][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.817421][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.843522][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.908241][ T5774] team0: Port device team_slave_0 added [ 71.920442][ T5775] hsr_slave_0: entered promiscuous mode [ 71.926878][ T5775] hsr_slave_1: entered promiscuous mode [ 71.932856][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.941307][ T5775] Cannot create hsr debugfs directory [ 71.979491][ T5774] team0: Port device team_slave_1 added [ 71.996687][ T5777] hsr_slave_0: entered promiscuous mode [ 72.003248][ T5777] hsr_slave_1: entered promiscuous mode [ 72.011851][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.019466][ T5777] Cannot create hsr debugfs directory [ 72.073585][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.080702][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.106880][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.118268][ T5783] Bluetooth: hci0: command tx timeout [ 72.161496][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.168583][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.197996][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.292309][ T5774] hsr_slave_0: entered promiscuous mode [ 72.299635][ T5774] hsr_slave_1: entered promiscuous mode [ 72.305824][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.313367][ T5774] Cannot create hsr debugfs directory [ 72.344986][ T5783] Bluetooth: hci3: command tx timeout [ 72.350560][ T5783] Bluetooth: hci1: command tx timeout [ 72.364712][ T51] Bluetooth: hci2: command tx timeout [ 72.471440][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.492849][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.508804][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.518644][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.604372][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.622439][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.633502][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.645536][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.708761][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.719624][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.740980][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.751219][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.840004][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.849993][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.862197][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.872960][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.944526][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.982688][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.026896][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.039407][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.053255][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.060801][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.088492][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.099840][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.106996][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.152872][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.166271][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.173392][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.183547][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.190659][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.221069][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.228229][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.266713][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.273805][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.369343][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.411668][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.443833][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.451023][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.488084][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.495276][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.664180][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.771469][ T5777] veth0_vlan: entered promiscuous mode [ 73.790396][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.804508][ T5777] veth1_vlan: entered promiscuous mode [ 73.875380][ T5777] veth0_macvtap: entered promiscuous mode [ 73.898679][ T5777] veth1_macvtap: entered promiscuous mode [ 73.971224][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.993833][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.028027][ T5771] veth0_vlan: entered promiscuous mode [ 74.038871][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.048563][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.058227][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.067006][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.083432][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.101737][ T5771] veth1_vlan: entered promiscuous mode [ 74.181328][ T5771] veth0_macvtap: entered promiscuous mode [ 74.188115][ T5783] Bluetooth: hci0: command tx timeout [ 74.219564][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.242115][ T5771] veth1_macvtap: entered promiscuous mode [ 74.279437][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.300893][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.310694][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.324131][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.336182][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.364803][ T5775] veth0_vlan: entered promiscuous mode [ 74.385736][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.396998][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.408262][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.421955][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.424791][ T51] Bluetooth: hci2: command tx timeout [ 74.431533][ T5773] Bluetooth: hci3: command tx timeout [ 74.441515][ T5783] Bluetooth: hci1: command tx timeout [ 74.449610][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.458901][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.470636][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.499998][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.500655][ T5775] veth1_vlan: entered promiscuous mode [ 74.514480][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.555344][ T5774] veth0_vlan: entered promiscuous mode [ 74.627531][ T5774] veth1_vlan: entered promiscuous mode [ 74.688374][ T5775] veth0_macvtap: entered promiscuous mode [ 74.721013][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.731057][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.743570][ T5775] veth1_macvtap: entered promiscuous mode [ 74.791770][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.800194][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.802641][ T5774] veth0_macvtap: entered promiscuous mode [ 74.822717][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.835091][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.845606][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.856182][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.868986][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.899651][ T5774] veth1_macvtap: entered promiscuous mode [ 74.923511][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.943110][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.953886][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.974678][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.995908][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.013932][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.034960][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.043708][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.057605][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.202560][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.213708][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.232314][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.243668][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.259039][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.270390][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.287902][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.301633][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.320381][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.332405][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.348651][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.360170][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.377239][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.397666][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.459294][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.480330][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.489533][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.503066][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.744086][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.768650][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.847427][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.878004][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.909833][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.924295][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.003569][ T2955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.031366][ T2955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.283760][ T5783] Bluetooth: hci0: command tx timeout [ 76.370961][ T5851] syz.1.7[5851]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 76.406350][ T5783] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 76.416169][ T5783] CPU: 0 PID: 5783 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 76.423733][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.433807][ T5783] Workqueue: hci1 hci_rx_work [ 76.438548][ T5783] Call Trace: [ 76.441854][ T5783] [ 76.444800][ T5783] dump_stack_lvl+0x18c/0x250 [ 76.449514][ T5783] ? show_regs_print_info+0x20/0x20 [ 76.454741][ T5783] ? load_image+0x420/0x420 [ 76.459285][ T5783] sysfs_create_dir_ns+0x26e/0x2a0 [ 76.464422][ T5783] ? __lock_acquire+0x7d80/0x7d80 [ 76.469477][ T5783] ? sysfs_warn_dup+0xa0/0xa0 [ 76.474182][ T5783] ? do_raw_spin_unlock+0x121/0x230 [ 76.479407][ T5783] kobject_add_internal+0x617/0xc90 [ 76.484617][ T5783] kobject_add+0x164/0x240 [ 76.489031][ T5783] ? __rwlock_init+0x150/0x150 [ 76.493802][ T5783] ? kobject_init+0x1d0/0x1d0 [ 76.498482][ T5783] ? _raw_spin_unlock+0x28/0x40 [ 76.503339][ T5783] ? get_device_parent+0x366/0x390 [ 76.508459][ T5783] device_add+0x3fa/0xc40 [ 76.512791][ T5783] hci_conn_add_sysfs+0xd5/0x1e0 [ 76.517734][ T5783] hci_sync_conn_complete_evt+0x6d6/0x9a0 [ 76.523452][ T5783] ? hci_remote_ext_features_evt+0xa80/0xa80 [ 76.529437][ T5783] hci_event_packet+0x807/0x1280 [ 76.534379][ T5783] ? __lock_acquire+0x7d80/0x7d80 [ 76.539401][ T5783] ? lock_chain_count+0x20/0x20 [ 76.544248][ T5783] ? bis_list+0x290/0x290 [ 76.548579][ T5783] ? kcov_remote_start+0x513/0x810 [ 76.553694][ T5783] ? lockdep_hardirqs_on+0x98/0x150 [ 76.558888][ T5783] ? hci_send_to_monitor+0xd7/0x4f0 [ 76.564092][ T5783] hci_rx_work+0x43a/0xd60 [ 76.568512][ T5783] ? process_scheduled_works+0x975/0x1600 [ 76.574232][ T5783] process_scheduled_works+0xa60/0x1600 [ 76.579798][ T5783] ? worker_attach_to_pool+0x370/0x370 [ 76.585260][ T5783] ? assign_work+0x3cc/0x5d0 [ 76.589853][ T5783] worker_thread+0xa5e/0xfe0 [ 76.594458][ T5783] kthread+0x2fa/0x390 [ 76.598523][ T5783] ? pr_cont_work+0x550/0x550 [ 76.603198][ T5783] ? kthread_blkcg+0xd0/0xd0 [ 76.607787][ T5783] ret_from_fork+0x48/0x80 [ 76.612206][ T5783] ? kthread_blkcg+0xd0/0xd0 [ 76.616793][ T5783] ret_from_fork_asm+0x11/0x20 [ 76.621565][ T5783] [ 76.634628][ T5783] kobject: kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 76.652775][ T5783] Bluetooth: hci1: failed to register connection device [ 76.655105][ T5773] Bluetooth: hci3: command tx timeout [ 76.660422][ T51] Bluetooth: hci2: command tx timeout [ 76.673274][ T5783] Bluetooth: hci1: command tx timeout [ 77.556361][ T5851] loop1: detected capacity change from 0 to 40427 [ 77.599568][ T5851] F2FS-fs (loop1): heap/no_heap options were deprecated [ 77.652825][ T5866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.671610][ T5851] F2FS-fs (loop1): Found nat_bits in checkpoint [ 77.717937][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 77.830319][ T5851] F2FS-fs (loop1): Start checkpoint disabled! [ 77.854893][ T5851] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 77.903724][ T5874] loop3: detected capacity change from 0 to 256 [ 78.042784][ T5874] exFAT-fs (loop3): bogus fat length [ 78.349704][ T5874] exFAT-fs (loop3): failed to read boot sector [ 78.374703][ T51] Bluetooth: hci0: command tx timeout [ 78.498876][ T5874] exFAT-fs (loop3): failed to recognize exfat type [ 78.746494][ T5773] Bluetooth: hci2: command tx timeout [ 78.752033][ T5773] Bluetooth: hci3: command tx timeout [ 78.758249][ T51] Bluetooth: hci1: command tx timeout [ 80.836556][ T5783] Bluetooth: hci1: command 0x0409 tx timeout [ 81.275739][ T5829] IPVS: starting estimator thread 0... [ 81.282353][ T5912] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 81.425156][ T5911] IPVS: using max 18 ests per chain, 43200 per kthread [ 82.431295][ T5919] Bluetooth: MGMT ver 1.22 [ 82.829016][ T5923] xt_socket: unknown flags 0x4c [ 82.904757][ T5783] Bluetooth: hci1: command 0x0409 tx timeout [ 83.323636][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 83.662304][ T5943] netlink: 'syz.0.32': attribute type 1 has an invalid length. [ 83.724958][ T5943] bond1 (unregistering): Released all slaves [ 83.787871][ T5945] gretap1: entered promiscuous mode [ 84.128915][ T5947] netlink: 144 bytes leftover after parsing attributes in process `syz.0.33'. [ 84.235914][ T5951] loop2: detected capacity change from 0 to 512 [ 84.243256][ T5951] ======================================================= [ 84.243256][ T5951] WARNING: The mand mount option has been deprecated and [ 84.243256][ T5951] and is ignored by this kernel. Remove the mand [ 84.243256][ T5951] option from the mount to silence this warning. [ 84.243256][ T5951] ======================================================= [ 85.757891][ T5957] loop3: detected capacity change from 0 to 512 [ 85.888329][ T5957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.901134][ T5957] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.518294][ T5972] Device name cannot be null; rc = [-22] [ 86.886270][ T23] cfg80211: failed to load regulatory.db [ 87.081245][ T5974] jffs2: notice: (5974) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 87.369151][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.459344][ T5987] syzkaller0: entered promiscuous mode [ 88.474686][ T5978] mmap: syz.1.40 (5978) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.496340][ T5987] syzkaller0: entered allmulticast mode [ 89.700738][ T5998] loop3: detected capacity change from 0 to 1024 [ 89.787154][ T5998] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.814880][ T5998] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.083177][ T5998] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 90.776379][ T5998] EXT4-fs (loop3): orphan cleanup on readonly fs [ 90.846318][ T5998] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #3: block 3: comm syz.3.45: lblock 3 mapped to illegal pblock 3 (length 1) [ 90.901390][ T5998] Quota error (device loop3): write_blk: dquota write failed [ 90.936911][ T5998] Quota error (device loop3): find_free_dqentry: Can't write quota data block 3 [ 90.973364][ T5998] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 91.016718][ T5998] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.45: Failed to acquire dquot type 0 [ 91.059346][ T5998] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 3: comm syz.3.45: lblock 3 mapped to illegal pblock 3 (length 1) [ 91.135455][ T5998] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 91.179988][ T5998] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.45: Failed to acquire dquot type 0 [ 91.233952][ T5998] EXT4-fs error (device loop3): ext4_free_blocks:6694: comm syz.3.45: Freeing blocks not in datazone - block = 0, count = 4096 [ 91.293317][ T5998] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 3: comm syz.3.45: lblock 3 mapped to illegal pblock 3 (length 1) [ 91.361081][ T5998] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 91.404695][ T5998] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.45: Failed to acquire dquot type 0 [ 91.442401][ T5998] EXT4-fs (loop3): 1 orphan inode deleted [ 91.734572][ C0] sched: RT throttling activated [ 91.755042][ T5998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.959519][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.004749][ T6010] syz.2.49 (6010) used greatest stack depth: 20824 bytes left [ 92.176291][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'. [ 92.191047][ T6014] vlan1: entered promiscuous mode [ 92.196684][ T6014] vlan1: entered allmulticast mode [ 92.209267][ T6014] veth0_vlan: entered allmulticast mode [ 92.219923][ T6012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.237593][ T6012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.254459][ T6012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.262620][ T6012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.347548][ T6014] vlan1: left promiscuous mode [ 92.362892][ T6014] vlan1: left allmulticast mode [ 92.386052][ T6014] veth0_vlan: left allmulticast mode [ 92.456135][ T6019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.767630][ T6035] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.770496][ T6034] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 93.881290][ T6036] Zero length message leads to an empty skb [ 94.089180][ T6040] netlink: 180 bytes leftover after parsing attributes in process `syz.2.55'. [ 94.098504][ T6040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.55'. [ 94.832041][ T6042] tipc: Failed to remove unknown binding: 66,0,0/0:231698319/231698321 [ 94.854124][ T6039] tipc: Failed to remove unknown binding: 66,0,0/0:3731773390/3731773391 [ 94.892746][ T6039] tipc: Failed to remove unknown binding: 66,0,0/0:3731773390/3731773391 [ 94.972449][ T6046] loop3: detected capacity change from 0 to 2048 [ 95.216542][ T6046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.323927][ T6064] loop1: detected capacity change from 0 to 512 [ 96.425314][ T6064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.276789][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.297470][ T6070] syzkaller0: entered promiscuous mode [ 97.302972][ T6070] syzkaller0: entered allmulticast mode [ 97.582936][ T6072] netlink: 'syz.3.67': attribute type 1 has an invalid length. [ 97.629180][ T6073] bond1 (unregistering): Released all slaves [ 98.352942][ T5829] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.375417][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.448487][ T27] audit: type=1326 audit(1790918340.180:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.71" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 98.474163][ T6088] loop3: detected capacity change from 0 to 164 [ 98.506792][ T27] audit: type=1326 audit(1790918340.180:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.71" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 98.544677][ T5829] usb 1-1: Using ep0 maxpacket: 16 [ 98.563872][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.587955][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.606254][ T27] audit: type=1326 audit(1790918340.180:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.71" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 98.621612][ T5829] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 98.661055][ T27] audit: type=1326 audit(1790918340.190:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.71" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 98.711982][ T5829] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 98.719729][ T27] audit: type=1326 audit(1790918340.190:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.71" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 98.742654][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.755778][ T27] audit: type=1326 audit(1790918340.190:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.71" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 98.842469][ T27] audit: type=1326 audit(1790918340.190:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.71" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 98.937708][ T27] audit: type=1326 audit(1790918340.190:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.71" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 98.985795][ T5829] usb 1-1: config 0 descriptor?? [ 99.031085][ T27] audit: type=1326 audit(1790918340.190:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.71" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 99.058482][ T27] audit: type=1326 audit(1790918340.190:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.71" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 99.826061][ T5829] usbhid 1-1:0.0: can't add hid device: -71 [ 99.832319][ T5829] usbhid: probe of 1-1:0.0 failed with error -71 [ 99.845126][ T5829] usb 1-1: USB disconnect, device number 2 [ 100.012835][ T6104] FAULT_INJECTION: forcing a failure. [ 100.012835][ T6104] name failslab, interval 1, probability 0, space 0, times 1 [ 100.029383][ T5783] Bluetooth: Unexpected continuation frame (len 10) [ 100.093057][ T6104] CPU: 0 PID: 6104 Comm: syz.0.75 Not tainted syzkaller #0 [ 100.100319][ T6104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.110400][ T6104] Call Trace: [ 100.113702][ T6104] [ 100.116659][ T6104] dump_stack_lvl+0x18c/0x250 [ 100.121380][ T6104] ? show_regs_print_info+0x20/0x20 [ 100.126606][ T6104] ? load_image+0x420/0x420 [ 100.131107][ T6104] ? __might_sleep+0xe0/0xe0 [ 100.135693][ T6104] ? __lock_acquire+0x7d80/0x7d80 [ 100.140713][ T6104] should_fail_ex+0x394/0x4c0 [ 100.145408][ T6104] should_failslab+0x9/0x20 [ 100.149927][ T6104] slab_pre_alloc_hook+0x59/0x300 [ 100.154947][ T6104] ? kvmalloc_node+0x70/0x180 [ 100.159637][ T6104] ? kvmalloc_node+0x70/0x180 [ 100.164318][ T6104] __kmem_cache_alloc_node+0x53/0x250 [ 100.169706][ T6104] ? kvmalloc_node+0x70/0x180 [ 100.174373][ T6104] __kmalloc_node+0xa6/0x240 [ 100.178958][ T6104] kvmalloc_node+0x70/0x180 [ 100.183453][ T6104] nf_hook_entries_grow+0x27c/0x710 [ 100.188664][ T6104] __nf_register_net_hook+0x2c9/0x910 [ 100.194054][ T6104] nf_register_net_hook+0xb2/0x190 [ 100.199171][ T6104] nf_register_net_hooks+0x44/0x1b0 [ 100.204376][ T6104] ipt_register_table+0x51a/0x7b0 [ 100.209401][ T6104] ? trace_packet+0x4a0/0x4a0 [ 100.214077][ T6104] ? ipt_alloc_initial_table+0x4ff/0x610 [ 100.219707][ T6104] iptable_mangle_table_init+0x41/0x60 [ 100.225162][ T6104] xt_find_table_lock+0x304/0x3e0 [ 100.230183][ T6104] do_ipt_set_ctl+0x2c0/0xe00 [ 100.234863][ T6104] ? ipt_unregister_table_exit+0x230/0x230 [ 100.240665][ T6104] ? trace_contention_end+0x39/0xe0 [ 100.245858][ T6104] ? __mutex_lock+0x30d/0xc80 [ 100.250532][ T6104] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 100.256162][ T6104] ? mutex_unlock+0x10/0x10 [ 100.260666][ T6104] ? aa_af_perm+0x330/0x330 [ 100.265180][ T6104] nf_setsockopt+0x263/0x280 [ 100.269767][ T6104] ? sock_common_recvmsg+0x190/0x190 [ 100.275048][ T6104] do_sock_setsockopt+0x175/0x1a0 [ 100.280069][ T6104] ? __fdget+0x180/0x210 [ 100.284316][ T6104] __x64_sys_setsockopt+0x182/0x200 [ 100.289518][ T6104] do_syscall_64+0x55/0xb0 [ 100.293937][ T6104] ? clear_bhb_loop+0x40/0x90 [ 100.298620][ T6104] ? clear_bhb_loop+0x40/0x90 [ 100.303298][ T6104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.309189][ T6104] RIP: 0033:0x7f679af9e159 [ 100.313616][ T6104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.333218][ T6104] RSP: 002b:00007f679bde6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 100.341629][ T6104] RAX: ffffffffffffffda RBX: 00007f679b226090 RCX: 00007f679af9e159 [ 100.349597][ T6104] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000006 [ 100.357559][ T6104] RBP: 00007f679b03506b R08: 0000000000000078 R09: 0000000000000000 [ 100.365530][ T6104] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 100.373493][ T6104] R13: 00007f679b226128 R14: 00007f679b226090 R15: 00007fffe3e4c8d8 [ 100.381474][ T6104] [ 102.074710][ T6126] capability: warning: `syz.3.83' uses 32-bit capabilities (legacy support in use) [ 104.394933][ T6141] loop3: detected capacity change from 0 to 1024 [ 104.435059][ T6143] process 'syz.0.88' launched './file0' with NULL argv: empty string added [ 104.609550][ T6141] hfsplus: bad catalog entry type [ 104.679769][ T6141] hfsplus: unknown catalog record type 9 [ 104.803021][ T11] hfsplus: b-tree write err: -5, ino 25 [ 104.835392][ T11] hfsplus: b-tree write err: -5, ino 4 [ 104.841153][ T11] hfsplus: b-tree write err: -5, ino 2 [ 105.019625][ T6149] loop3: detected capacity change from 0 to 1024 [ 106.336666][ T6149] hfsplus: invalid length 32517 has been corrected to 255 [ 106.550028][ T12] hfsplus: b-tree write err: -5, ino 25 [ 106.559230][ T12] hfsplus: b-tree write err: -5, ino 4 [ 106.590659][ T6157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.94'. [ 106.607761][ T12] hfsplus: b-tree write err: -5, ino 2 [ 106.726259][ T6159] syzkaller0: entered promiscuous mode [ 106.744978][ T6159] syzkaller0: entered allmulticast mode [ 107.531726][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 107.531741][ T27] audit: type=1800 audit(1790918349.250:70): pid=6173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.97" name="file1" dev="sda1" ino=2043 res=0 errno=0 [ 107.571199][ T6171] bond1: entered allmulticast mode [ 107.576723][ T6171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.643744][ T6174] bond_slave_0: entered promiscuous mode [ 107.649836][ T6174] bond_slave_1: entered promiscuous mode [ 107.727451][ T6174] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 107.749162][ T6174] macvlan2: entered allmulticast mode [ 107.774645][ T6174] bond0: entered allmulticast mode [ 107.820478][ T6174] bond_slave_0: entered allmulticast mode [ 107.831370][ T6174] bond_slave_1: entered allmulticast mode [ 107.859324][ T6174] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 109.232193][ T6187] smc: net device team0 applied user defined pnetid SYZ2 [ 109.323891][ T6191] loop2: detected capacity change from 0 to 512 [ 109.413979][ T6187] smc: removing net device team0 with user defined pnetid SYZ2 [ 109.480986][ T6191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.493804][ T6191] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.516914][ T6187] team0 (unregistering): Port device team_slave_0 removed [ 109.608470][ T6187] team0 (unregistering): Port device team_slave_1 removed [ 110.037280][ T6212] netlink: 'syz.3.108': attribute type 1 has an invalid length. [ 110.968375][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.012040][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.108'. [ 111.082918][ T6212] bond1: (slave bridge1): making interface the new active one [ 111.119947][ T6212] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 113.491594][ T6253] syzkaller0: entered promiscuous mode [ 113.544885][ T6253] syzkaller0: entered allmulticast mode [ 115.058167][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 115.398254][ T6274] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.377363][ T6299] loop3: detected capacity change from 0 to 512 [ 120.937159][ T6299] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 121.574690][ T6299] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.671905][ T6299] EXT4-fs (loop3): 1 truncate cleaned up [ 122.012495][ T6299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.498345][ T6322] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 123.910511][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.480932][ T6331] autofs4:pid:6331:autofs_fill_super: called with bogus options [ 125.368360][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.143'. [ 125.616118][ T6337] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.624839][ T6337] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.732791][ T6337] bond_slave_0: left promiscuous mode [ 125.755265][ T6337] bond_slave_1: left promiscuous mode [ 126.044685][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 126.224744][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 126.240424][ T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.248561][ T6337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.264931][ T9] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.294629][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.310756][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 126.331658][ T6337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.358315][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.384173][ T9] usb 4-1: config 0 descriptor?? [ 126.419764][ T6361] futex_wake_op: syz.0.146 tries to shift op by 144; fix this program [ 126.832120][ T9] magicmouse 0003:05AC:0269.0001: unknown main item tag 0x0 [ 126.860507][ T9] magicmouse 0003:05AC:0269.0001: unknown main item tag 0x0 [ 126.877764][ T9] magicmouse 0003:05AC:0269.0001: unknown main item tag 0x0 [ 126.900538][ T9] magicmouse 0003:05AC:0269.0001: unknown main item tag 0x0 [ 126.919396][ T9] magicmouse 0003:05AC:0269.0001: unknown main item tag 0x0 [ 126.934612][ T9] magicmouse 0003:05AC:0269.0001: unknown main item tag 0x0 [ 126.954844][ T9] magicmouse 0003:05AC:0269.0001: unknown main item tag 0x0 [ 126.962248][ T9] magicmouse 0003:05AC:0269.0001: unknown main item tag 0x0 [ 127.001002][ T9] magicmouse 0003:05AC:0269.0001: unknown main item tag 0x0 [ 127.028044][ T9] magicmouse 0003:05AC:0269.0001: unknown main item tag 0x0 [ 127.038008][ T9] magicmouse 0003:05AC:0269.0001: unknown main item tag 0x0 [ 127.047972][ T9] magicmouse 0003:05AC:0269.0001: unknown main item tag 0x0 [ 127.057381][ T6337] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.058039][ T9] magicmouse 0003:05AC:0269.0001: unbalanced collection at end of report description [ 127.075237][ T6337] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.092165][ T6337] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.093854][ T9] magicmouse 0003:05AC:0269.0001: magicmouse hid parse failed [ 127.111657][ T6337] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.115111][ T9] magicmouse: probe of 0003:05AC:0269.0001 failed with error -22 [ 127.366984][ T6337] bond0: left allmulticast mode [ 127.375979][ T6337] bond_slave_0: left allmulticast mode [ 127.385927][ T6337] bond_slave_1: left allmulticast mode [ 127.414796][ T6340] tipc: Started in network mode [ 127.427098][ T6340] tipc: Node identity ac14140f, cluster identity 4711 [ 127.458566][ T6340] tipc: New replicast peer: 255.255.255.255 [ 127.497417][ T6340] tipc: Enabled bearer , priority 10 [ 127.659367][ T789] usb 4-1: USB disconnect, device number 2 [ 127.693298][ T6372] loop2: detected capacity change from 0 to 512 [ 127.751003][ T6372] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 127.771689][ T6372] System zones: 1-12 [ 127.786407][ T6372] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.149: missing EA_INODE flag [ 127.799532][ T6372] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.149: error while reading EA inode 12 err=-117 [ 127.814224][ T6372] EXT4-fs (loop2): 1 orphan inode deleted [ 127.821465][ T6372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.616493][ T5776] tipc: Node number set to 2886997007 [ 128.798486][ T6386] loop3: detected capacity change from 0 to 256 [ 128.999564][ T6386] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 129.801847][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.748647][ T6403] loop6: detected capacity change from 0 to 6 [ 131.123776][ T6403] Dev loop6: unable to read RDB block 6 [ 131.148296][ T6403] loop6: unable to read partition table [ 131.201272][ T6403] loop6: partition table beyond EOD, truncated [ 131.227612][ T6403] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 131.637603][ T6418] netlink: 'syz.2.160': attribute type 1 has an invalid length. [ 131.743477][ T6418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.918953][ T6420] bond1: (slave veth3): Enslaving as an active interface with a down link [ 132.086769][ T6423] veth5: entered allmulticast mode [ 132.108124][ T6423] bond1: (slave veth5): Enslaving as an active interface with a down link [ 132.173374][ T6433] loop3: detected capacity change from 0 to 512 [ 132.192688][ T6433] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.215375][ T6433] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 132.250987][ T6433] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 132.271592][ T6433] EXT4-fs (loop3): group descriptors corrupted! [ 133.224194][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.230687][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.481649][ T27] audit: type=1804 audit(1790918377.210:71): pid=6482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.181" name="file1" dev="ramfs" ino=9090 res=1 errno=0 [ 136.966548][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'. [ 136.975630][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'. [ 137.077444][ T6497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.128061][ T6497] bond1: (slave bond0): making interface the new active one [ 137.145697][ T6497] bond1: (slave bond0): Enslaving as an active interface with an up link [ 137.159489][ T6499] netlink: 'syz.0.186': attribute type 4 has an invalid length. [ 137.181908][ T6499] netlink: 152 bytes leftover after parsing attributes in process `syz.0.186'. [ 137.235438][ T6499] .`: renamed from bond0 (while UP) [ 137.374639][ T6497] syz.0.186 (6497) used greatest stack depth: 19944 bytes left [ 139.586075][ T6537] xfrm0: entered allmulticast mode [ 140.930638][ T6554] syz.1.204 uses obsolete (PF_INET,SOCK_PACKET) [ 141.586447][ T6564] netlink: 'syz.1.204': attribute type 12 has an invalid length. [ 142.506192][ T6588] syzkaller0: entered promiscuous mode [ 142.511841][ T6588] syzkaller0: entered allmulticast mode [ 150.767178][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.227'. [ 150.925036][ T6659] loop6: detected capacity change from 0 to 6 [ 150.971052][ T6659] Dev loop6: unable to read RDB block 6 [ 150.994306][ T6659] loop6: unable to read partition table [ 151.025955][ T6659] loop6: partition table beyond EOD, truncated [ 151.054605][ T6659] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 151.252854][ T6665] loop3: detected capacity change from 0 to 16 [ 151.278697][ T6665] erofs: (device loop3): mounted with root inode @ nid 36. [ 151.762484][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'. [ 151.830689][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'. [ 156.442082][ T6712] netlink: 'syz.0.244': attribute type 1 has an invalid length. [ 156.529682][ T6712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.559955][ T6714] loop3: detected capacity change from 0 to 512 [ 156.601009][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 156.634915][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'. [ 156.716040][ T6709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.748507][ T6709] bond2: (slave bond0): making interface the new active one [ 156.786049][ T6709] bond2: (slave bond0): Enslaving as an active interface with an up link [ 156.939139][ T6716] bond0: (slave veth3): Enslaving as an active interface with a down link [ 157.106875][ T6717] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 157.118052][ T6717] bond0: (slave batadv1): making interface the new active one [ 157.128832][ T6717] batadv1: entered promiscuous mode [ 157.138605][ T6717] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 157.148821][ T6718] netlink: 'syz.2.245': attribute type 4 has an invalid length. [ 157.203540][ T6718] netlink: 152 bytes leftover after parsing attributes in process `syz.2.245'. [ 157.227411][ T6718] .`: renamed from bond0 (while UP) [ 157.311357][ T6712] veth5: entered allmulticast mode [ 157.347226][ T6712] bond0: (slave veth5): Enslaving as an active interface with a down link [ 157.367020][ T6724] bridge0: port 3(vxlan0) entered blocking state [ 157.396452][ T6724] bridge0: port 3(vxlan0) entered disabled state [ 157.403640][ T6724] vxlan0: entered allmulticast mode [ 157.416178][ T6724] vxlan0: entered promiscuous mode [ 160.593029][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'. [ 160.603191][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 160.628187][ T6764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.654979][ T6764] bond4: (slave bond0): making interface the new active one [ 160.663179][ T6764] bond4: (slave bond0): Enslaving as an active interface with an up link [ 160.686255][ T6766] netlink: 'syz.3.260': attribute type 4 has an invalid length. [ 160.705207][ T6766] netlink: 152 bytes leftover after parsing attributes in process `syz.3.260'. [ 160.721672][ T6766] .`: renamed from bond0 (while UP) [ 160.738948][ T6770] netlink: 'syz.1.261': attribute type 1 has an invalid length. [ 160.770819][ T6770] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.852499][ T6773] bond2: (slave veth3): Enslaving as an active interface with a down link [ 160.865754][ T6775] futex_wake_op: syz.3.263 tries to shift op by 144; fix this program [ 161.018087][ T6770] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 161.044471][ T6770] bond2: (slave batadv1): making interface the new active one [ 161.072995][ T6770] batadv1: entered promiscuous mode [ 161.078892][ T6770] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 161.166615][ T6780] loop3: detected capacity change from 0 to 8192 [ 161.200869][ T6773] veth5: entered allmulticast mode [ 161.250410][ T6773] bond2: (slave veth5): Enslaving as an active interface with a down link [ 161.255542][ T6780] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 161.309947][ T6780] loop3: partition table partially beyond EOD, truncated [ 161.347464][ T6780] loop3: p1 start 100663296 is beyond EOD, truncated [ 161.384904][ T6780] loop3: p2 size 134217732 extends beyond EOD, truncated [ 161.440162][ T6780] loop3: p4 size 14876672 extends beyond EOD, truncated [ 161.478103][ T6780] loop3: p5 size 134217732 extends beyond EOD, truncated [ 161.491994][ T6780] loop3: p6 size 14876672 extends beyond EOD, truncated [ 162.657236][ T6783] udevd[6783]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 162.754640][ T6800] udevd[6800]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 162.774008][ T6801] udevd[6801]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 162.799986][ T6803] udevd[6803]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 162.833694][ T6799] udevd[6799]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 165.824328][ T6831] netlink: 'syz.3.277': attribute type 1 has an invalid length. [ 165.834990][ T6827] loop2: detected capacity change from 0 to 512 [ 165.870346][ T6827] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 165.893024][ T6831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.955536][ T6827] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 165.984973][ T6827] Quota error (device loop2): write_blk: dquota write failed [ 166.011613][ T6827] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 166.034178][ T6827] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.278: Failed to acquire dquot type 0 [ 166.050186][ T6833] bond0: (slave veth3): Enslaving as an active interface with a down link [ 166.065459][ T6827] EXT4-fs (loop2): 1 truncate cleaned up [ 166.082203][ T6831] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 166.098248][ T6827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.147972][ T6831] bond0: (slave batadv1): making interface the new active one [ 166.164362][ T6831] batadv1: entered promiscuous mode [ 166.172799][ T6831] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 166.399067][ T6831] veth5: entered allmulticast mode [ 166.422074][ T6831] bond0: (slave veth5): Enslaving as an active interface with a down link [ 166.452982][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.446199][ T6846] netlink: 64 bytes leftover after parsing attributes in process `syz.1.282'. [ 167.580792][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 167.598026][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 169.059654][ T6866] autofs4:pid:6866:autofs_fill_super: called with bogus options [ 169.111181][ T6866] loop2: detected capacity change from 0 to 1024 [ 169.194816][ T6866] EXT4-fs: Ignoring removed bh option [ 169.508685][ T6866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.804297][ T6873] loop3: detected capacity change from 0 to 512 [ 169.885730][ T6873] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.916637][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.009613][ T6873] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 170.030062][ T6873] Quota error (device loop3): write_blk: dquota write failed [ 170.041737][ T6873] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 170.059525][ T6873] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.291: Failed to acquire dquot type 0 [ 170.083226][ T6873] EXT4-fs (loop3): 1 truncate cleaned up [ 170.093079][ T6873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.360422][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.014946][ T1114] batadv1: left promiscuous mode [ 172.365928][ T6903] loop3: detected capacity change from 0 to 256 [ 172.523281][ T6903] FAT-fs (loop3): bogus number of FAT sectors [ 172.602561][ T6903] FAT-fs (loop3): Can't find a valid FAT filesystem [ 172.712013][ T6900] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 173.140274][ T6913] bridge0: port 4(syz_tun) entered blocking state [ 173.327199][ T6913] bridge0: port 4(syz_tun) entered disabled state [ 173.652103][ T6913] syz_tun: entered allmulticast mode [ 173.776097][ T6913] syz_tun: entered promiscuous mode [ 174.769188][ T6930] netlink: 'syz.1.305': attribute type 3 has an invalid length. [ 174.804079][ T6930] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.305'. [ 174.864766][ T42] batadv1: left promiscuous mode [ 178.114674][ T6960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.315'. [ 178.818275][ T6960] syz.2.315 (6960) used greatest stack depth: 17896 bytes left [ 179.205826][ T6964] loop2: detected capacity change from 0 to 1024 [ 179.306949][ T5776] IPVS: starting estimator thread 0... [ 179.316815][ T6972] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 179.341607][ T6969] IPVS: stopping master sync thread 6972 ... [ 179.495237][ T6970] IPVS: using max 19 ests per chain, 45600 per kthread [ 179.585890][ T42] batadv1: left promiscuous mode [ 182.038324][ T7002] ip_tables: iptables: counters copy to user failed while replacing table [ 183.189146][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'. [ 183.223230][ T7017] overlayfs: failed to resolve './file0': -2 [ 184.948381][ T5776] IPVS: starting estimator thread 0... [ 185.125065][ T7044] IPVS: using max 18 ests per chain, 43200 per kthread [ 185.140696][ T7047] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 185.211117][ T7041] IPVS: stopping master sync thread 7047 ... [ 185.537558][ T7054] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 186.689952][ T5783] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 187.676331][ T7085] netlink: 'syz.2.354': attribute type 1 has an invalid length. [ 187.816477][ T7085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.863328][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 188.033338][ T7093] bond0: (slave bridge1): making interface the new active one [ 188.095425][ T7093] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 189.483361][ T27] audit: type=1326 audit(1790918431.210:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 189.531585][ T27] audit: type=1326 audit(1790918431.240:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 189.604856][ T27] audit: type=1326 audit(1790918431.240:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 189.640481][ T27] audit: type=1326 audit(1790918431.240:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 189.694660][ T27] audit: type=1326 audit(1790918431.240:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 189.757930][ T27] audit: type=1326 audit(1790918431.240:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 189.784601][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 189.827758][ T27] audit: type=1326 audit(1790918431.240:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 189.874175][ T27] audit: type=1326 audit(1790918431.240:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45fdb5e98e code=0x7ffc0000 [ 189.934695][ T27] audit: type=1326 audit(1790918431.250:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45fdb9ddeb code=0x7ffc0000 [ 190.006756][ T27] audit: type=1326 audit(1790918431.250:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz.3.360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45fdb9ddeb code=0x7ffc0000 [ 190.042000][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.072529][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 190.122264][ T9] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 190.134625][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.482886][ T9] usb 4-1: Product: syz [ 191.487526][ T9] usb 4-1: Manufacturer: syz [ 191.492144][ T9] usb 4-1: SerialNumber: syz [ 191.511283][ T9] usb 4-1: config 0 descriptor?? [ 192.240884][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 192.265136][ T7136] vlan3: entered promiscuous mode [ 192.279887][ T7136] bond0: entered promiscuous mode [ 192.294640][ T7136] bridge1: entered promiscuous mode [ 192.350880][ T7136] netlink: 'syz.2.367': attribute type 10 has an invalid length. [ 192.377252][ T5830] usb 4-1: USB disconnect, device number 3 [ 192.437322][ T7136] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 193.454444][ T7149] IPVS: Error connecting to the multicast addr [ 194.071450][ T7167] ip_tables: iptables: counters copy to user failed while replacing table [ 194.212571][ T7169] netlink: 64 bytes leftover after parsing attributes in process `syz.3.373'. [ 194.223439][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'. [ 194.233609][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'. [ 194.459409][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.469737][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.155941][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 196.584782][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 196.591863][ T5782] Bluetooth: hci1: command 0x0409 tx timeout [ 196.599095][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 196.601944][ T5773] Bluetooth: hci0: command 0x0406 tx timeout [ 196.981327][ T28] IPVS: starting estimator thread 0... [ 197.114867][ T7208] IPVS: using max 17 ests per chain, 40800 per kthread [ 197.137776][ T7211] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 197.212193][ T7206] IPVS: stopping master sync thread 7211 ... [ 197.344012][ T7212] bond1: left allmulticast mode [ 197.412598][ T7212] macvlan2: left allmulticast mode [ 197.744789][ T7212] veth5: left allmulticast mode [ 200.506331][ T5773] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 203.971651][ T7253] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 203.995781][ T7252] IPVS: stopping master sync thread 7253 ... [ 206.720094][ T7272] Driver unsupported XDP return value 0 on prog (id 45) dev N/A, expect packet loss! [ 206.746621][ T7276] xt_ipcomp: unknown flags 1D [ 206.969560][ T7281] loop3: detected capacity change from 0 to 1024 [ 207.183689][ T7281] hfsplus: request for non-existent node 33423360 in B*Tree [ 207.233373][ T7281] hfsplus: request for non-existent node 33423360 in B*Tree [ 207.253029][ T7283] hfsplus: request for non-existent node 33423360 in B*Tree [ 207.260499][ T7283] hfsplus: request for non-existent node 33423360 in B*Tree [ 207.439793][ T7283] hfsplus: request for non-existent node 33423360 in B*Tree [ 207.541938][ T7283] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.150467][ T7281] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.164642][ T7281] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.192726][ T7285] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.225722][ T7285] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.303923][ T7286] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.331535][ T7286] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.352470][ T7281] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.379433][ T7281] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.407614][ T7283] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.465104][ T7283] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.485630][ T7281] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.505502][ T7281] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.532311][ T7281] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.554973][ T7281] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.574989][ T7283] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.582298][ T7283] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.654812][ T7281] hfsplus: request for non-existent node 33423360 in B*Tree [ 208.669612][ T7281] hfsplus: request for non-existent node 33423360 in B*Tree [ 209.299078][ T5773] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 210.874078][ T7316] xt_CT: You must specify a L4 protocol and not use inversions on it [ 214.434656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 216.791541][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 217.124854][ T7343] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 4 (only 8 groups) [ 217.577463][ T7356] CIFS: Attempting to mount //127.0.0.1/share [ 217.666013][ T7358] CIFS: VFS: Invalid response size 0 for command 0 [ 217.672964][ T7358] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x20 [ 218.454996][ T7356] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)' [ 218.492089][ T7356] CIFS: VFS: cifs_mount failed w/return code = -5 [ 220.117062][ T7400] loop3: detected capacity change from 0 to 128 [ 221.529207][ T7409] fuse: Bad value for 'fd' [ 222.147742][ T7416] netlink: 'syz.1.439': attribute type 1 has an invalid length. [ 222.194751][ T789] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 222.247289][ T7416] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.334691][ T7416] macvtap1: entered allmulticast mode [ 222.365668][ T7416] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.374926][ T7416] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.383654][ T7416] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.392836][ T7416] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.408482][ T789] usb 4-1: config 0 has no interfaces? [ 222.411917][ T7416] bond3: (slave geneve2): making interface the new active one [ 222.435689][ T789] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.436904][ T7416] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 222.456415][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.491599][ T789] usb 4-1: Product: syz [ 222.500119][ T789] usb 4-1: Manufacturer: syz [ 222.509341][ T789] usb 4-1: SerialNumber: syz [ 222.529393][ T789] usb 4-1: config 0 descriptor?? [ 223.354202][ T5830] usb 4-1: USB disconnect, device number 4 [ 224.284032][ T7451] "syz.1.449" (7451) uses obsolete ecb(arc4) skcipher [ 225.359014][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 225.370062][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 225.380004][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 225.390099][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 225.399944][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 227.198450][ T7473] loop3: detected capacity change from 0 to 256 [ 229.055772][ T5773] Bluetooth: hci1: unexpected event for opcode 0x0c1b [ 229.087393][ T7492] loop3: detected capacity change from 0 to 128 [ 229.161295][ T7492] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 229.259705][ T7492] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 229.412015][ T27] kauditd_printk_skb: 49 callbacks suppressed [ 229.412029][ T27] audit: type=1326 audit(1790918471.140:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.0.461" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f679af9e159 code=0x0 [ 230.047022][ T7507] overlayfs: failed to clone lowerpath [ 230.918645][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 230.979167][ T7511] loop2: detected capacity change from 0 to 128 [ 232.708133][ T7531] xt_CT: You must specify a L4 protocol and not use inversions on it [ 234.022761][ T7542] loop3: detected capacity change from 0 to 128 [ 236.518956][ T7552] "syz.0.474" (7552) uses obsolete ecb(arc4) skcipher [ 236.665183][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 236.892206][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.477'. [ 236.914172][ T7554] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.923351][ T7554] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.932208][ T7554] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.941008][ T7554] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.970257][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.477'. [ 236.987736][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.477'. [ 237.173490][ T27] audit: type=1800 audit(1790918478.900:132): pid=7566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.480" name=08 dev="sda1" ino=1262 res=0 errno=0 [ 239.624783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 240.018326][ T27] audit: type=1326 audit(1790918481.750:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.0.493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679af9e159 code=0x7ffc0000 [ 240.091524][ T27] audit: type=1326 audit(1790918481.750:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.0.493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679af9e159 code=0x7ffc0000 [ 240.171991][ T27] audit: type=1326 audit(1790918481.750:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.0.493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679af9e159 code=0x7ffc0000 [ 240.243319][ T27] audit: type=1326 audit(1790918481.750:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.0.493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f679af9e159 code=0x7ffc0000 [ 240.319330][ T27] audit: type=1326 audit(1790918481.810:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.0.493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679af9e159 code=0x7ffc0000 [ 240.403617][ T27] audit: type=1326 audit(1790918481.810:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.0.493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f679af9dec2 code=0x7ffc0000 [ 240.452505][ T27] audit: type=1326 audit(1790918481.810:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.0.493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f679af9df57 code=0x7ffc0000 [ 240.509248][ T27] audit: type=1326 audit(1790918481.810:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.0.493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f679af5ae51 code=0x7ffc0000 [ 240.561944][ T27] audit: type=1326 audit(1790918481.810:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.0.493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f679af9ef49 code=0x7ffc0000 [ 240.592278][ T7597] loop2: detected capacity change from 0 to 1024 [ 240.660882][ T7476] udevd[7476]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 240.672890][ T7597] EXT4-fs: inline encryption not supported [ 240.725153][ T7597] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 240.787203][ T7597] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #3: block 1: comm syz.2.488: lblock 1 mapped to illegal pblock 1 (length 1) [ 240.815345][ T7597] EXT4-fs (loop2): Remounting filesystem read-only [ 240.822077][ T7597] EXT4-fs (loop2): 1 orphan inode deleted [ 240.893940][ T7597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.656544][ T7609] loop3: detected capacity change from 0 to 512 [ 241.945643][ T7476] udevd[7476]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 241.998645][ T7476] udevd[7476]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 242.008306][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.060246][ T7611] udevd[7611]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 242.097724][ T7611] udevd[7611]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 242.139659][ T7609] EXT4-fs (loop3): Test dummy encryption mode enabled [ 242.146852][ T7609] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 242.161751][ T7609] EXT4-fs (loop3): 1 truncate cleaned up [ 242.162413][ T7609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.513942][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.521985][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.556398][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.605723][ T7611] udevd[7611]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 242.662047][ T7611] udevd[7611]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 242.913295][ T7601] bond1: (slave .`): Releasing active interface [ 243.749011][ T7601] bridge_slave_0: left allmulticast mode [ 243.754981][ T7601] bridge_slave_0: left promiscuous mode [ 243.760864][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.821126][ T7601] bridge_slave_1: left allmulticast mode [ 243.834584][ T7601] bridge_slave_1: left promiscuous mode [ 243.842266][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.921424][ T7601] .`: (slave bond_slave_0): Releasing backup interface [ 243.946240][ T7601] .`: (slave bond_slave_1): Releasing backup interface [ 244.298550][ T7601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.512354][ T7601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.587178][ T7601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.626458][ T7601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.151410][ T7601] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.166480][ T7601] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.178920][ T7601] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.188338][ T7635] cgroup: fork rejected by pids controller in /syz3 [ 245.203923][ T7601] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.422787][ T7601] bond0: (slave veth3): Releasing active interface [ 245.434594][ T7601] bond0: (slave veth3): the permanent HWaddr of slave - 12:b6:d6:f7:c4:10 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 245.461796][ T7601] batadv1: entered promiscuous mode [ 245.482906][ T7601] bond0: (slave batadv1): Releasing active interface [ 245.490053][ T7601] batadv1: left promiscuous mode [ 245.497096][ T7601] veth5: left allmulticast mode [ 245.509317][ T7601] bond0: (slave veth5): Releasing active interface [ 245.628015][ T7619] 8021q: adding VLAN 0 to HW filter on device .` [ 245.653492][ T7619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.812014][ T7709] loop2: detected capacity change from 0 to 128 [ 246.864215][ T7711] udevd[7711]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 246.881523][ T7711] udevd[7711]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 247.302139][ T7714] syz.2.504 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 247.714020][ T7711] udevd[7711]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 249.723837][ T3523] syzkaller0: tun_net_xmit 76 [ 249.724361][ T7745] syzkaller0: create flow: hash 3556484754 index 1 [ 249.735854][ T3523] syzkaller0: tun_net_xmit 48 [ 249.745563][ T28] syzkaller0: tun_net_xmit 76 [ 250.170338][ T7744] syzkaller0: delete flow: hash 3556484754 index 1 [ 255.791396][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.798036][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.874684][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.518'. [ 255.884910][ T7774] warning: `syz.1.520' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 256.097815][ T7779] netlink: 'syz.0.521': attribute type 1 has an invalid length. [ 256.210174][ T7787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.233044][ T7787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.242403][ T7787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.254536][ T7787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.267080][ T7787] bond2: (slave geneve2): making interface the new active one [ 256.276398][ T7787] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 256.312842][ T7796] lo: entered promiscuous mode [ 256.339376][ T7796] tunl0: entered promiscuous mode [ 256.359577][ T7796] gre0: entered promiscuous mode [ 256.442725][ T7796] gretap0: entered promiscuous mode [ 256.478181][ T7796] erspan0: entered promiscuous mode [ 256.513502][ T7796] ip_vti0: entered promiscuous mode [ 256.538348][ T7796] ip6_vti0: entered promiscuous mode [ 256.574751][ T7796] sit0: entered promiscuous mode [ 256.645264][ T7796] ip6tnl0: entered promiscuous mode [ 256.684021][ T7796] ip6gre0: entered promiscuous mode [ 256.709109][ T7796] syz_tun: entered promiscuous mode [ 256.746438][ T7796] ip6gretap0: entered promiscuous mode [ 256.791225][ T7796] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.799519][ T7796] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.817462][ T7796] bridge0: entered promiscuous mode [ 256.873147][ T7796] vcan0: entered promiscuous mode [ 256.892087][ T7796] .`: entered promiscuous mode [ 256.904634][ T7796] bond_slave_0: entered promiscuous mode [ 256.916285][ T7796] bond_slave_1: entered promiscuous mode [ 256.934961][ T7796] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 256.958815][ T7796] team0: entered promiscuous mode [ 256.965885][ T7796] team_slave_0: entered promiscuous mode [ 256.971825][ T7796] team_slave_1: entered promiscuous mode [ 256.985917][ T7808] loop3: detected capacity change from 0 to 1024 [ 257.028578][ T7777] udevd[7777]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 257.547360][ T7808] hfsplus: invalid length 32517 has been corrected to 255 [ 257.668410][ T7796] dummy0: entered promiscuous mode [ 257.748874][ T7796] nlmon0: entered promiscuous mode [ 257.766033][ T7796] caif0: entered promiscuous mode [ 257.785853][ T7796] batadv0: entered promiscuous mode [ 257.825356][ T7796] veth0: entered promiscuous mode [ 257.850794][ T7796] veth1: entered promiscuous mode [ 257.888772][ T7796] wg0: entered promiscuous mode [ 257.941700][ T7796] wg1: entered promiscuous mode [ 257.971192][ T7796] wg2: entered promiscuous mode [ 257.994819][ T7796] veth0_to_bridge: entered promiscuous mode [ 258.000836][ T7808] hfsplus: invalid length 32517 has been corrected to 255 [ 258.020101][ T7808] hfsplus: invalid length 32517 has been corrected to 255 [ 258.033105][ T7796] veth1_to_bridge: entered promiscuous mode [ 258.040617][ T7808] hfsplus: invalid length 32517 has been corrected to 255 [ 258.079705][ T7796] veth0_to_bond: entered promiscuous mode [ 258.107947][ T7796] veth1_to_bond: entered promiscuous mode [ 258.126236][ T7820] hfsplus: invalid length 32517 has been corrected to 255 [ 258.144344][ T7796] veth0_to_team: entered promiscuous mode [ 258.175563][ T7796] veth1_to_team: entered promiscuous mode [ 258.209791][ T7796] veth0_to_batadv: entered promiscuous mode [ 258.225869][ T7796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.239477][ T7796] batadv_slave_0: entered promiscuous mode [ 258.260537][ T7796] veth1_to_batadv: entered promiscuous mode [ 258.271813][ T7796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.287635][ T7796] batadv_slave_1: entered promiscuous mode [ 258.300697][ T7796] xfrm0: entered promiscuous mode [ 258.313566][ T7796] veth0_to_hsr: entered promiscuous mode [ 258.342234][ T7796] veth1_to_hsr: entered promiscuous mode [ 258.373157][ T7796] hsr0: entered promiscuous mode [ 258.391557][ T7796] veth1_virt_wifi: entered promiscuous mode [ 258.411524][ T7796] veth0_virt_wifi: entered promiscuous mode [ 258.423195][ T7796] virt_wifi0: entered promiscuous mode [ 258.472052][ T7796] vlan0: entered promiscuous mode [ 258.485190][ T7796] vlan1: entered promiscuous mode [ 258.491371][ T7796] macvlan0: entered promiscuous mode [ 258.511041][ T7796] macvlan1: entered promiscuous mode [ 258.525388][ T7796] ipvlan0: entered promiscuous mode [ 258.530738][ T7796] ipvlan1: entered promiscuous mode [ 258.575992][ T7796] macvtap0: entered promiscuous mode [ 258.593885][ T7796] macsec0: entered promiscuous mode [ 258.612302][ T7796] geneve0: entered promiscuous mode [ 258.631035][ T7796] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.640460][ T7796] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.649941][ T7796] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.658882][ T7796] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.668258][ T7796] geneve1: entered promiscuous mode [ 258.692124][ T7796] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 258.708730][ T7796] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 258.729778][ T7796] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 258.755877][ T7796] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 258.774939][ T7796] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 258.791185][ T7796] bond1: entered promiscuous mode [ 258.802726][ T7796] veth2: entered promiscuous mode [ 258.808253][ T7796] veth3: entered promiscuous mode [ 258.818258][ T7796] veth4: entered promiscuous mode [ 258.823589][ T7796] veth5: entered promiscuous mode [ 258.833930][ T7796] macvlan2: entered promiscuous mode [ 258.847677][ T7796] bond2: entered promiscuous mode [ 258.868512][ T7796] vlan2: entered promiscuous mode [ 258.888020][ T7796] gre1: entered promiscuous mode [ 258.938574][ T7796] syztnl2: entered promiscuous mode [ 258.954597][ T7779] netlink: 28 bytes leftover after parsing attributes in process `syz.0.521'. [ 258.976473][ T7779] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.061095][ T146] hfsplus: b-tree write err: -5, ino 25 [ 259.081889][ T146] hfsplus: b-tree write err: -5, ino 4 [ 259.095421][ T146] hfsplus: b-tree write err: -5, ino 2 [ 259.116968][ T7822] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 259.118197][ T7777] udevd[7777]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 259.130761][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 259.173592][ T7777] udevd[7777]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 261.281682][ T7857] lo: entered promiscuous mode [ 261.294765][ T7857] tunl0: entered promiscuous mode [ 261.300440][ T7857] gre0: entered promiscuous mode [ 261.313144][ T7857] gretap0: entered promiscuous mode [ 261.319188][ T7857] erspan0: entered promiscuous mode [ 261.389530][ T7857] ip_vti0: entered promiscuous mode [ 261.405016][ T7857] ip6_vti0: entered promiscuous mode [ 261.420771][ T7857] sit0: entered promiscuous mode [ 261.434774][ T7857] ip6tnl0: entered promiscuous mode [ 261.444970][ T7857] ip6gre0: entered promiscuous mode [ 261.461770][ T7857] syz_tun: entered promiscuous mode [ 261.504880][ T7857] ip6gretap0: entered promiscuous mode [ 261.560518][ T7857] bridge0: entered promiscuous mode [ 261.587314][ T7857] vcan0: entered promiscuous mode [ 261.652964][ T7857] .`: entered promiscuous mode [ 261.729677][ T7857] dummy0: entered promiscuous mode [ 261.831847][ T7857] nlmon0: entered promiscuous mode [ 261.930217][ T7857] caif0: entered promiscuous mode [ 262.003799][ T7857] batadv0: entered promiscuous mode [ 262.167128][ T7857] vxcan0: entered promiscuous mode [ 262.220880][ T7857] vxcan1: entered promiscuous mode [ 262.247028][ T7857] veth0: entered promiscuous mode [ 262.252254][ T7857] veth1: entered promiscuous mode [ 262.260965][ T7857] wg0: entered promiscuous mode [ 262.273008][ T7857] wg1: entered promiscuous mode [ 262.288736][ T7857] wg2: entered promiscuous mode [ 262.293777][ T7857] veth0_to_bridge: entered promiscuous mode [ 262.340242][ T7857] bridge_slave_0: entered promiscuous mode [ 262.711913][ T7857] veth1_to_bridge: entered promiscuous mode [ 262.806937][ T7857] bridge_slave_1: entered promiscuous mode [ 262.902489][ T7857] veth0_to_bond: entered promiscuous mode [ 263.058567][ T7857] bond_slave_0: entered promiscuous mode [ 263.064442][ T7857] veth1_to_bond: entered promiscuous mode [ 263.077414][ T7857] bond_slave_1: entered promiscuous mode [ 263.083290][ T7857] veth0_to_team: entered promiscuous mode [ 263.089347][ T7857] team_slave_0: entered promiscuous mode [ 263.095287][ T7857] veth1_to_team: entered promiscuous mode [ 263.101166][ T7857] team_slave_1: entered promiscuous mode [ 263.107193][ T7857] veth0_to_batadv: entered promiscuous mode [ 263.113238][ T7857] batadv_slave_0: entered promiscuous mode [ 263.120079][ T7857] veth1_to_batadv: entered promiscuous mode [ 263.127836][ T7857] batadv_slave_1: entered promiscuous mode [ 263.133943][ T7857] xfrm0: entered promiscuous mode [ 263.140545][ T7857] veth0_to_hsr: entered promiscuous mode [ 263.165431][ T7857] veth1_to_hsr: entered promiscuous mode [ 263.171410][ T7857] hsr0: entered promiscuous mode [ 263.194986][ T7857] veth1_virt_wifi: entered promiscuous mode [ 263.218161][ T7857] veth0_virt_wifi: entered promiscuous mode [ 263.224297][ T7857] virt_wifi0: entered promiscuous mode [ 263.244951][ T7857] vlan0: entered promiscuous mode [ 263.252923][ T7857] vlan1: entered promiscuous mode [ 263.265796][ T7857] macvlan0: entered promiscuous mode [ 263.271299][ T7857] macvlan1: entered promiscuous mode [ 263.278905][ T7857] ipvlan0: entered promiscuous mode [ 263.284281][ T7857] ipvlan1: entered promiscuous mode [ 263.292229][ T7857] macvtap0: entered promiscuous mode [ 263.299583][ T7857] macsec0: entered promiscuous mode [ 263.305973][ T7857] geneve0: entered promiscuous mode [ 263.311380][ T7857] geneve1: entered promiscuous mode [ 263.316898][ T7857] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 263.324391][ T7857] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 263.332082][ T7857] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 263.339655][ T7857] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 263.348135][ T7857] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 263.373244][ T7857] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 263.380471][ T7857] gtp0: entered promiscuous mode [ 263.392031][ T7857] bond1: entered promiscuous mode [ 263.402097][ T7857] bond0: entered promiscuous mode [ 263.421197][ T7874] loop2: detected capacity change from 0 to 512 [ 263.424713][ T7857] veth2: entered promiscuous mode [ 263.449898][ T7875] udevd[7875]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 263.469985][ T7857] veth3: entered promiscuous mode [ 263.483093][ T7857] batadv1: entered promiscuous mode [ 263.489150][ T7857] veth4: entered promiscuous mode [ 263.495029][ T7857] veth5: entered promiscuous mode [ 263.500215][ T7857] ip6gretap1: entered promiscuous mode [ 263.517256][ T7857] erspan1: entered promiscuous mode [ 263.537109][ T7857] bond2: entered promiscuous mode [ 263.542169][ T7857] geneve2: entered promiscuous mode [ 263.574931][ T7857] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 263.592286][ T7857] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 263.601983][ T7857] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 263.615298][ T7857] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 263.623350][ T7874] EXT4-fs error (device loop2): ext4_quota_enable:7144: inode #4: comm syz.2.545: casefold flag without casefold feature [ 263.649057][ T7874] EXT4-fs (loop2): Remounting filesystem read-only [ 263.658430][ T7857] gre1: entered promiscuous mode [ 263.671346][ T7874] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 263.686780][ T7874] EXT4-fs (loop2): mount failed [ 263.776676][ T7881] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7881] [ 264.627569][ T7875] udevd[7875]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 265.112706][ T7875] udevd[7875]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 265.888610][ T7898] bond3: Removing last arp target with arp_interval on [ 265.973091][ T7906] capability: warning: `syz.0.555' uses deprecated v2 capabilities in a way that may be insecure [ 266.109854][ T7911] loop3: detected capacity change from 0 to 256 [ 266.117198][ T7898] netlink: 'syz.2.551': attribute type 1 has an invalid length. [ 266.150374][ T7898] netlink: 'syz.2.551': attribute type 2 has an invalid length. [ 266.177140][ T7875] udevd[7875]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 267.360698][ T7875] udevd[7875]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 267.447490][ T7875] udevd[7875]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 271.272369][ T7953] netlink: 48 bytes leftover after parsing attributes in process `syz.2.567'. [ 271.362755][ T7953] netlink: 'syz.2.567': attribute type 4 has an invalid length. [ 271.382446][ T7953] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.567'. [ 272.604644][ T7631] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 273.533125][ T7631] usb 4-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 273.542301][ T7631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.550733][ T7631] usb 4-1: Product: syz [ 273.564681][ T7631] usb 4-1: Manufacturer: syz [ 273.569313][ T7631] usb 4-1: SerialNumber: syz [ 274.712808][ T7631] usb 4-1: unable to issue vendor read request (ret = -71) [ 274.759838][ T7631] usb 4-1: unable to issue vendor read request (ret = -71) [ 274.810765][ T7631] usb 4-1: unable to issue vendor read request (ret = -71) [ 275.731654][ T7997] Set syz1 is full, maxelem 2 reached [ 275.783093][ T7631] usb 4-1: unable to issue vendor read request (ret = -71) [ 275.791638][ T7631] usb 4-1: unable to issue vendor read request (ret = -71) [ 275.799424][ T7631] usb 4-1: unable to issue vendor read request (ret = -71) [ 275.828768][ T7631] usb 4-1: unable to issue vendor read request (ret = -71) [ 276.020832][ T7631] usb 4-1: unable to issue vendor read request (ret = -71) [ 276.489480][ T7631] usb 4-1: USB disconnect, device number 5 [ 277.285656][ T7968] udevd[7968]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.526621][ T8011] netlink: 20 bytes leftover after parsing attributes in process `syz.3.582'. [ 277.553550][ T8011] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 277.575050][ T8011] bridge2: entered promiscuous mode [ 277.586611][ T8018] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.594442][ T8018] IPv6: NLM_F_CREATE should be set when creating new route [ 277.793212][ T8021] netlink: 20 bytes leftover after parsing attributes in process `syz.3.582'. [ 279.137149][ T8021] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 279.150228][ T8021] bridge3: entered promiscuous mode [ 281.674641][ T8057] veth0_to_team: left promiscuous mode [ 283.155154][ T8077] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 283.470342][ T8088] netlink: 'syz.1.604': attribute type 4 has an invalid length. [ 283.620935][ T8088] netlink: 'syz.1.604': attribute type 4 has an invalid length. [ 284.062228][ T8107] loop3: detected capacity change from 0 to 128 [ 284.072974][ T8066] udevd[8066]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 285.133959][ T8066] udevd[8066]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 285.189514][ T8066] udevd[8066]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 285.250627][ T8118] tipc: Failed to remove unknown binding: 66,0,0/0:2976386318/2976386320 [ 285.261802][ T8114] netlink: 'syz.2.614': attribute type 1 has an invalid length. [ 285.269907][ T8118] tipc: Failed to remove unknown binding: 66,0,0/0:2976386318/2976386319 [ 285.282090][ T8118] tipc: Failed to remove unknown binding: 66,0,0/0:2976386318/2976386320 [ 285.328535][ T8118] tipc: Failed to remove unknown binding: 66,0,0/0:2976386318/2976386319 [ 286.065050][ T8122] veth7: entered allmulticast mode [ 286.079795][ T8122] bond4: (slave veth7): Enslaving as an active interface with a down link [ 286.184706][ T8123] veth0_to_bond: left promiscuous mode [ 286.230325][ T8123] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 286.355094][ T8125] netlink: 'syz.1.618': attribute type 322 has an invalid length. [ 289.122167][ T8167] syz.2.630 (8167): attempted to duplicate a private mapping with mremap. This is not supported. [ 290.106189][ T789] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 290.319094][ T789] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 290.328362][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.337426][ T789] usb 1-1: Product: syz [ 290.341601][ T789] usb 1-1: Manufacturer: syz [ 290.346611][ T789] usb 1-1: SerialNumber: syz [ 290.424162][ T8185] syz_tun (unregistering): left allmulticast mode [ 290.430828][ T8185] syz_tun (unregistering): left promiscuous mode [ 290.437611][ T8185] bridge0: port 4(syz_tun) entered disabled state [ 291.274503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 291.436507][ T8196] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5775] was attempted by " [ 292.226055][ T789] rtl8150 1-1:1.0: couldn't reset the device [ 293.034286][ T789] rtl8150: probe of 1-1:1.0 failed with error -5 [ 293.097298][ T789] usb 1-1: USB disconnect, device number 3 [ 300.545703][ T8280] netlink: 'syz.0.662': attribute type 1 has an invalid length. [ 300.622734][ T8280] 8021q: adding VLAN 0 to HW filter on device bond3 [ 300.769894][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.662'. [ 300.868702][ T8280] bond3: (slave bridge1): making interface the new active one [ 300.898740][ T8280] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 301.301177][ T5773] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 301.310369][ T5773] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 302.038262][ T8300] netlink: 'syz.2.665': attribute type 8 has an invalid length. [ 303.683675][ T8305] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 303.706674][ T8305] bond1: (slave macvlan2): Enslaving as an active interface with a down link [ 303.746976][ T8323] syzkaller0: entered promiscuous mode [ 303.759157][ T8323] syzkaller0: entered allmulticast mode [ 305.417439][ T5773] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 305.427322][ T5773] Bluetooth: hci2: Injecting HCI hardware error event [ 305.439907][ T5781] Bluetooth: hci2: hardware error 0x00 [ 306.425056][ T8356] netlink: 'syz.1.686': attribute type 4 has an invalid length. [ 307.395892][ T8362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.434116][ T8362] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.492899][ T8362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.540891][ T8368] netlink: 'syz.2.688': attribute type 2 has an invalid length. [ 307.635691][ T5781] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 308.180566][ T8377] netlink: 550 bytes leftover after parsing attributes in process `syz.0.691'. [ 309.519457][ T8388] fuse: Bad value for 'fd' [ 310.658095][ T8399] loop3: detected capacity change from 0 to 1024 [ 310.700074][ T8399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.710281][ T8400] udevd[8400]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 311.738677][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.928554][ T8400] udevd[8400]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 312.024926][ T8417] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 312.191170][ T8400] udevd[8400]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 316.039731][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'. [ 317.364210][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.378599][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.956906][ T8510] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 322.196349][ T8534] xt_l2tp: invalid flags combination: 0 [ 323.053094][ T8542] netlink: 64 bytes leftover after parsing attributes in process `syz.3.737'. [ 325.875134][ T8574] bond1: (slave macvlan2): Releasing active interface [ 325.889885][ T8574] bond0 (unregistering): Released all slaves [ 325.914799][ T8576] macvtap1: entered promiscuous mode [ 327.376926][ T8594] syzkaller0: entered promiscuous mode [ 327.382859][ T8594] syzkaller0: entered allmulticast mode [ 330.236927][ T27] kauditd_printk_skb: 64 callbacks suppressed [ 330.236941][ T27] audit: type=1326 audit(1790919088.964:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.3.771" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 330.300991][ T27] audit: type=1326 audit(1790919088.994:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.3.771" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 330.350736][ T27] audit: type=1326 audit(1790919089.004:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.3.771" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 330.414257][ T27] audit: type=1326 audit(1790919089.004:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.3.771" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 330.468459][ T27] audit: type=1326 audit(1790919089.004:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.3.771" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 330.500650][ T27] audit: type=1326 audit(1790919089.004:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.3.771" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 330.525134][ T27] audit: type=1326 audit(1790919089.004:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.3.771" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 330.720096][ T27] audit: type=1326 audit(1790919089.004:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.3.771" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 330.789453][ T27] audit: type=1326 audit(1790919089.004:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.3.771" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 331.267128][ T8650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.775'. [ 331.705861][ T27] audit: type=1326 audit(1790919089.004:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.3.771" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 332.413311][ T8672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.911001][ T8707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.787'. [ 338.120569][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 338.836820][ T8742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.591498][ T8746] loop3: detected capacity change from 0 to 131072 [ 340.606254][ T8746] F2FS-fs (loop3): Test dummy encryption mode enabled [ 340.620142][ T8746] F2FS-fs (loop3): invalid crc value [ 340.655582][ T8752] udevd[8752]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 340.667082][ T8746] F2FS-fs (loop3): Found nat_bits in checkpoint [ 340.715137][ T8746] F2FS-fs (loop3): access invalid blkaddr:0 [ 340.722142][ T8746] CPU: 0 PID: 8746 Comm: syz.3.801 Not tainted syzkaller #0 [ 340.729454][ T8746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 340.739535][ T8746] Call Trace: [ 340.742808][ T8746] [ 340.745731][ T8746] dump_stack_lvl+0x18c/0x250 [ 340.750425][ T8746] ? show_regs_print_info+0x20/0x20 [ 340.755632][ T8746] ? __up_read+0x2b8/0x6b0 [ 340.760044][ T8746] ? __lock_acquire+0x7d80/0x7d80 [ 340.765064][ T8746] f2fs_is_valid_blkaddr+0xe6c/0x15c0 [ 340.770439][ T8746] sanity_check_extent_cache+0xfc/0x1f0 [ 340.775984][ T8746] f2fs_iget+0x336f/0x47d0 [ 340.780413][ T8746] f2fs_fill_super+0x4853/0x6b60 [ 340.785381][ T8746] ? kill_f2fs_super+0x3f0/0x3f0 [ 340.790315][ T8746] ? down_write+0x16e/0x200 [ 340.794813][ T8746] ? down_read_killable+0x340/0x340 [ 340.800008][ T8746] ? setup_bdev_super+0x56b/0x660 [ 340.805025][ T8746] mount_bdev+0x21c/0x2c0 [ 340.809347][ T8746] ? kfree+0x31/0x1a0 [ 340.813326][ T8746] ? kill_f2fs_super+0x3f0/0x3f0 [ 340.818263][ T8746] ? get_tree_bdev+0x520/0x520 [ 340.823018][ T8746] ? vfs_parse_fs_param+0x420/0x420 [ 340.828217][ T8746] legacy_get_tree+0xea/0x180 [ 340.832898][ T8746] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 340.839053][ T8746] vfs_get_tree+0x8c/0x280 [ 340.843466][ T8746] do_new_mount+0x24a/0xa40 [ 340.847971][ T8746] __se_sys_mount+0x2e7/0x3d0 [ 340.852655][ T8746] ? __x64_sys_mount+0xc0/0xc0 [ 340.857414][ T8746] ? lockdep_hardirqs_on+0x98/0x150 [ 340.862609][ T8746] ? __x64_sys_mount+0x20/0xc0 [ 340.867367][ T8746] do_syscall_64+0x55/0xb0 [ 340.871783][ T8746] ? clear_bhb_loop+0x40/0x90 [ 340.876455][ T8746] ? clear_bhb_loop+0x40/0x90 [ 340.881134][ T8746] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.887031][ T8746] RIP: 0033:0x7f45fdb9f3ca [ 340.891446][ T8746] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.911046][ T8746] RSP: 002b:00007f45fbdf5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 340.919458][ T8746] RAX: ffffffffffffffda RBX: 00007f45fbdf5ee0 RCX: 00007f45fdb9f3ca [ 340.927424][ T8746] RDX: 0000200000000100 RSI: 0000200000010600 RDI: 00007f45fbdf5ea0 [ 340.935390][ T8746] RBP: 0000200000000100 R08: 00007f45fbdf5ee0 R09: 0000000000000010 [ 340.943354][ T8746] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000010600 [ 340.951320][ T8746] R13: 00007f45fbdf5ea0 R14: 00000000000105d6 R15: 00002000000003c0 [ 340.959299][ T8746] [ 340.962728][ T8746] F2FS-fs (loop3): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 4128768] is incorrect, run fsck to fix [ 340.976392][ T8746] F2FS-fs (loop3): Failed to read root inode [ 341.107196][ T8752] udevd[8752]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 341.166012][ T8752] udevd[8752]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 341.578502][ T8744] bond0 (unregistering): (slave bridge1): Releasing active interface [ 341.598730][ T8744] bond0 (unregistering): Released all slaves [ 345.628588][ T8777] bond0: Removing last arp target with arp_interval on [ 345.670429][ T8773] wg1: entered promiscuous mode [ 345.675443][ T8773] wg1: entered allmulticast mode [ 346.268041][ T8783] netlink: 'syz.0.809': attribute type 1 has an invalid length. [ 346.403648][ T8783] netlink: 'syz.0.809': attribute type 2 has an invalid length. [ 346.748029][ T27] kauditd_printk_skb: 77 callbacks suppressed [ 346.748043][ T27] audit: type=1326 audit(1790919105.472:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8797 comm="syz.3.815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x0 [ 347.401008][ T8810] netlink: 59 bytes leftover after parsing attributes in process `syz.1.816'. [ 348.866953][ T8835] netlink: 20 bytes leftover after parsing attributes in process `syz.2.819'. [ 352.524536][ T8855] netlink: 59 bytes leftover after parsing attributes in process `syz.3.829'. [ 352.540141][ T8857] netlink: 20 bytes leftover after parsing attributes in process `syz.0.836'. [ 352.897337][ T27] audit: type=1326 audit(1790919111.621:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.0.830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f679af9e159 code=0x0 [ 354.775640][ T8871] Set syz1 is full, maxelem 2 reached [ 354.814136][ T8873] netlink: 27 bytes leftover after parsing attributes in process `syz.0.843'. [ 355.110069][ T8878] bond5: Removing last arp target with arp_interval on [ 355.426264][ T8887] netlink: 'syz.3.835': attribute type 1 has an invalid length. [ 355.434461][ T8887] netlink: 'syz.3.835': attribute type 2 has an invalid length. [ 356.834142][ T8899] xt_CT: You must specify a L4 protocol and not use inversions on it [ 356.958089][ T8901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.841'. [ 357.237614][ T8901] bond6: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 357.262232][ T8901] bond6: (slave ip_vti0): Error -95 calling set_mac_address [ 357.308777][ T8901] bond6 (unregistering): Released all slaves [ 360.136065][ T8928] loop3: detected capacity change from 0 to 512 [ 360.180200][ T8929] udevd[8929]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 360.374635][ T8929] udevd[8929]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 360.423124][ T8929] udevd[8929]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 360.470534][ T8936] netlink: 6 bytes leftover after parsing attributes in process `syz.0.850'. [ 360.671336][ T8943] lo: Caught tx_queue_len zero misconfig [ 360.824339][ T8946] netlink: 20 bytes leftover after parsing attributes in process `syz.3.852'. [ 362.171709][ T8959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.862'. [ 364.398739][ T8973] xt_CT: You must specify a L4 protocol and not use inversions on it [ 365.212910][ T8979] bond0: option use_carrier: invalid value (5) [ 365.239454][ T8979] bond0 (unregistering): Released all slaves [ 368.056020][ T9020] netlink: 20 bytes leftover after parsing attributes in process `syz.1.869'. [ 369.010673][ T9028] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.142855][ T27] audit: type=1326 audit(1790919128.829:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9039 comm="syz.3.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 370.488732][ T27] audit: type=1326 audit(1790919128.839:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9039 comm="syz.3.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 370.513064][ T27] audit: type=1326 audit(1790919128.849:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9039 comm="syz.3.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 370.542913][ T27] audit: type=1326 audit(1790919128.849:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9039 comm="syz.3.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 370.567514][ T9044] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4250702800/4250702802 [ 370.571523][ T27] audit: type=1326 audit(1790919128.849:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9039 comm="syz.3.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 370.588521][ T9044] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4250702800/4250702801 [ 370.618096][ T27] audit: type=1326 audit(1790919128.859:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9039 comm="syz.3.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 370.623029][ T9044] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4250702800/4250702802 [ 370.649475][ T27] audit: type=1326 audit(1790919128.859:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9039 comm="syz.3.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 370.651746][ T9044] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4250702800/4250702801 [ 370.682902][ T27] audit: type=1326 audit(1790919129.189:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9039 comm="syz.3.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 370.738238][ T27] audit: type=1326 audit(1790919129.199:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9039 comm="syz.3.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 370.771279][ T27] audit: type=1326 audit(1790919129.199:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9039 comm="syz.3.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fdb9e159 code=0x7ffc0000 [ 370.819854][ T9050] netlink: 27 bytes leftover after parsing attributes in process `syz.1.881'. [ 370.852172][ T9053] netlink: 'syz.2.882': attribute type 322 has an invalid length. [ 371.641901][ T9058] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 371.654612][ T9058] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 371.948685][ T9063] veth0_to_team: left promiscuous mode [ 372.336360][ T9071] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.366179][ T9068] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 373.296428][ T9078] netlink: 'syz.2.888': attribute type 10 has an invalid length. [ 373.357886][ T9078] team0 (unregistering): Port device team_slave_0 removed [ 373.394566][ T9078] team0 (unregistering): Port device team_slave_1 removed [ 373.505550][ T9083] netlink: 'syz.3.889': attribute type 1 has an invalid length. [ 373.919746][ T9081] veth9: entered allmulticast mode [ 374.514570][ T9081] bond6: (slave veth9): Enslaving as an active interface with a down link [ 374.562958][ T9083] bond6: (slave veth0_to_bond): making interface the new active one [ 374.598815][ T9083] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 375.578474][ T9109] xt_CT: You must specify a L4 protocol and not use inversions on it [ 378.682975][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.692590][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.763258][ T9146] xt_CT: You must specify a L4 protocol and not use inversions on it [ 381.890991][ T9178] xt_CT: You must specify a L4 protocol and not use inversions on it [ 383.042163][ T9188] unsupported nlmsg_type 40 [ 383.126096][ T9191] syzkaller0: entered promiscuous mode [ 383.131798][ T9191] syzkaller0: entered allmulticast mode [ 383.148976][ T9191] tipc: Started in network mode [ 383.154018][ T9191] tipc: Node identity e2c6c5495e3e, cluster identity 4711 [ 383.161999][ T9191] tipc: Enabled bearer , priority 0 [ 383.172671][ T9190] tipc: Resetting bearer [ 383.202967][ T9190] tipc: Disabling bearer [ 383.311109][ T9195] netlink: 'syz.2.925': attribute type 1 has an invalid length. [ 383.348131][ T9195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.383012][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.925'. [ 383.418593][ T9195] bond0: (slave bridge2): making interface the new active one [ 383.428030][ T9195] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 386.646274][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 386.646288][ T27] audit: type=1326 audit(1790919145.347:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9229 comm="syz.3.935" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f45fdb9e159 code=0x0 [ 387.357063][ T9246] netlink: 'syz.1.938': attribute type 1 has an invalid length. [ 387.411548][ T9246] 8021q: adding VLAN 0 to HW filter on device bond4 [ 387.452492][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'. [ 387.568959][ T9246] bond4: (slave bridge2): making interface the new active one [ 387.668411][ T9246] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 387.726252][ T9253] netlink: 'syz.0.941': attribute type 1 has an invalid length. [ 388.508733][ T9253] bridge2: entered promiscuous mode [ 388.527710][ T9253] bond4: (slave bridge2): making interface the new active one [ 388.546093][ T9253] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 388.572693][ T9254] bridge3: entered promiscuous mode [ 388.589864][ T9254] bond4: (slave bridge3): Enslaving as a backup interface with an up link [ 390.381078][ T9281] loop3: detected capacity change from 0 to 4096 [ 390.396626][ T9281] EXT4-fs: inline encryption not supported [ 390.409038][ T9277] udevd[9277]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 390.436070][ T9281] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 390.444832][ T9281] EXT4-fs (loop3): Test dummy encryption mode enabled [ 390.494255][ T9281] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 390.502604][ T9281] System zones: 0-5 [ 390.545781][ T9281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.877122][ T27] audit: type=1326 audit(1790919149.597:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.2.945" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6939e159 code=0x7ffc0000 [ 390.936109][ T27] audit: type=1326 audit(1790919149.597:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.2.945" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6939e159 code=0x7ffc0000 [ 390.979992][ T27] audit: type=1326 audit(1790919149.597:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.2.945" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0b6939e159 code=0x7ffc0000 [ 391.034646][ T27] audit: type=1326 audit(1790919149.597:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.2.945" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6939e159 code=0x7ffc0000 [ 391.085470][ T27] audit: type=1326 audit(1790919149.597:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.2.945" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b6939e159 code=0x7ffc0000 [ 391.116297][ T27] audit: type=1326 audit(1790919149.597:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.2.945" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6939e159 code=0x7ffc0000 [ 391.140661][ T27] audit: type=1326 audit(1790919149.597:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.2.945" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6939e159 code=0x7ffc0000 [ 391.175039][ T27] audit: type=1326 audit(1790919149.597:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.2.945" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0b6939e159 code=0x7ffc0000 [ 391.255465][ T27] audit: type=1326 audit(1790919149.597:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.2.945" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6939e159 code=0x7ffc0000 [ 391.559273][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.808531][ T9277] udevd[9277]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 392.157916][ T9277] udevd[9277]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 393.890198][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.962'. [ 393.998564][ T9325] bond5: entered promiscuous mode [ 394.003669][ T9325] bond5: entered allmulticast mode [ 394.890556][ T9353] tipc: Enabling of bearer rejected, failed to enable media [ 394.893326][ T5781] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 394.909141][ T5781] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 396.615517][ T9371] loop3: detected capacity change from 0 to 256 [ 396.650828][ T9373] udevd[9373]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 396.826965][ T9371] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 398.162882][ T9373] udevd[9373]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 398.248681][ T9373] udevd[9373]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 398.918041][ T5781] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 398.928177][ T5781] Bluetooth: hci1: Injecting HCI hardware error event [ 398.943487][ T5773] Bluetooth: hci1: hardware error 0x00 [ 399.912124][ T9403] syzkaller0: entered promiscuous mode [ 399.931514][ T9403] syzkaller0: entered allmulticast mode [ 401.637395][ T5773] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 402.085533][ T9416] netlink: 'syz.3.991': attribute type 1 has an invalid length. [ 402.422761][ T5773] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 402.432267][ T5773] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 402.479855][ T9416] bridge4: entered promiscuous mode [ 402.527129][ T9416] bond7: (slave bridge4): making interface the new active one [ 402.535605][ T9416] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 402.560733][ T9421] bridge5: entered promiscuous mode [ 402.580015][ T9421] bond7: (slave bridge5): Enslaving as a backup interface with an up link [ 405.197117][ T9452] xt_CT: You must specify a L4 protocol and not use inversions on it [ 406.447713][ T5773] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 406.457255][ T5773] Bluetooth: hci3: Injecting HCI hardware error event [ 406.467587][ T5781] Bluetooth: hci3: hardware error 0x00 [ 408.517569][ T5781] Bluetooth: hci3: Opcode 0x0c03 failed: -110 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=950 state=3 status=67 (errno 9: Bad file descriptor) [ 429.904203][ T3508] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.102433][ T3508] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.203796][ T3508] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.320138][ T3508] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.467808][ T3508] tipc: Left network mode [ 431.545079][ T3508] hsr_slave_0: left promiscuous mode [ 431.552000][ T3508] hsr_slave_1: left promiscuous mode [ 431.557947][ T3508] bridge_slave_1: left allmulticast mode [ 431.563695][ T3508] bridge_slave_1: left promiscuous mode [ 431.570914][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.584097][ T3508] bridge_slave_0: left allmulticast mode [ 431.589747][ T3508] bridge_slave_0: left promiscuous mode [ 431.596238][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.628747][ T3508] veth1_macvtap: left promiscuous mode [ 431.634627][ T3508] veth0_macvtap: left promiscuous mode [ 431.641213][ T3508] veth1_vlan: left promiscuous mode [ 431.646646][ T3508] veth0_vlan: left promiscuous mode [ 431.766560][ T3508] bond7 (unregistering): (slave bridge5): Releasing backup interface [ 431.821790][ T3508] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 431.874580][ T3508] bond8 (unregistering): Released all slaves [ 431.889591][ T3508] bond7 (unregistering): Released all slaves [ 431.916441][ T3508] bond6 (unregistering): (slave veth9): Releasing active interface [ 431.933794][ T3508] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 431.944531][ T3508] bond6 (unregistering): Released all slaves [ 431.960891][ T3508] bond5 (unregistering): Released all slaves [ 432.107511][ T3508] bond0 (unregistering): (slave veth5): Releasing active interface [ 432.115514][ T3508] batadv1 (unregistering): entered promiscuous mode [ 432.136020][ T3508] bond0 (unregistering): (slave batadv1): Releasing active interface [ 432.144425][ T3508] batadv1 (unregistering): left promiscuous mode [ 432.168552][ T3508] bond0 (unregistering): (slave veth3): Releasing active interface [ 432.281086][ T3508] bond0 (unregistering): Released all slaves [ 432.296404][ T3508] bond4 (unregistering): (slave .`): Releasing active interface [ 432.306425][ T3508] bond4 (unregistering): Released all slaves [ 432.324637][ T3508] bond3 (unregistering): Released all slaves [ 432.347578][ T3508] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 432.395003][ T3508] bond2 (unregistering): Released all slaves [ 432.407003][ T3508] bond1 (unregistering): Released all slaves [ 432.828375][ T3508] team0 (unregistering): Port device team_slave_1 removed [ 432.872311][ T3508] team0 (unregistering): Port device team_slave_0 removed [ 432.909775][ T3508] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.954756][ T3508] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.223615][ T3508] .` (unregistering): Released all slaves [ 433.737837][ T3508] IPVS: stop unused estimator thread 0... [ 434.072216][ T3508] .`: (slave netdevsim0): Releasing backup interface [ 434.278591][ T3508] tipc: Disabling bearer [ 434.300021][ T3508] tipc: Left network mode [ 435.084671][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.099178][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.107077][ T3508] bridge_slave_1: left allmulticast mode [ 435.119166][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.129428][ T3508] bridge_slave_0: left allmulticast mode [ 435.140839][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.181537][ T3508] bond5 (unregistering): Released all slaves [ 435.220063][ T3508] bond0 (unregistering): (slave bridge2): Releasing active interface [ 435.336069][ T3508] bond0 (unregistering): Released all slaves [ 435.363089][ T3508] bond4 (unregistering): (slave veth7): Releasing active interface [ 435.378480][ T3508] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 435.387916][ T3508] bond4 (unregistering): Released all slaves [ 435.404626][ T3508] bond3 (unregistering): Released all slaves [ 435.449562][ T3508] bond2 (unregistering): (slave .`): Releasing active interface [ 435.459524][ T3508] bond2 (unregistering): Released all slaves [ 435.486597][ T3508] bond1 (unregistering): (slave veth5): Releasing active interface [ 435.513359][ T3508] bond1 (unregistering): (slave veth3): Releasing active interface [ 435.624092][ T3508] bond1 (unregistering): Released all slaves [ 436.094750][ T3508] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.139772][ T3508] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.363889][ T3508] .` (unregistering): Released all slaves [ 436.777757][ T3508] IPVS: stop unused estimator thread 0...