last executing test programs: 2m22.870960301s ago: executing program 3 (id=4): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000020000000800000001"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000000), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) 2m22.740447115s ago: executing program 3 (id=5): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@bh}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x803}}]}, 0xfb, 0x46f, &(0x7f0000000480)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2859052, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) 2m22.335652357s ago: executing program 3 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x82000, 0xa1) getdents64(r1, 0x0, 0x0) close(0x3) 2m20.04153688s ago: executing program 3 (id=16): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x2e8}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m19.751584969s ago: executing program 32 (id=16): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x2e8}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m18.347577823s ago: executing program 0 (id=26): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x80, &(0x7f0000000080), 0x1, 0x4cf, &(0x7f0000000500)="$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") open_tree(0xffffffffffffff9c, 0x0, 0x81000) socket$inet6_udp(0xa, 0x2, 0x0) setxattr$security_ima(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sync() sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) rename(&(0x7f0000000280)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') 2m17.447140822s ago: executing program 0 (id=27): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 2m16.052297626s ago: executing program 0 (id=28): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5", 0x44}], 0x1) timer_create(0x0, &(0x7f0000000200)={0x0, 0x31, 0xfffffffffffffffe, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = semget$private(0x0, 0x7, 0x195) semtimedop(r0, &(0x7f0000000200)=[{0x4, 0x3, 0x1800}, {0x0, 0xffbf, 0x2000}], 0x2, 0x0) semop(r0, &(0x7f0000000180)=[{0x1, 0x9346}, {0x4, 0x0, 0x1000}], 0x2) semop(r0, &(0x7f0000000000)=[{0x4, 0xfffe, 0x800}], 0x1) semop(r0, &(0x7f0000000240)=[{0x1, 0xce95}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 2m15.649296179s ago: executing program 0 (id=30): syz_mount_image$exfat(&(0x7f0000000a00), &(0x7f0000001540)='./file0\x00', 0x2010c00, &(0x7f00000003c0)=ANY=[], 0x1, 0x150f, &(0x7f0000001c00)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x87}, 0x20) 2m15.084858106s ago: executing program 0 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0xc0404d1a, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x0}) 2m13.845596496s ago: executing program 0 (id=37): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) r2 = io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0xeec2, 0x800, 0x2, 0x116}) close_range(r2, r2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0xc, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) 2m13.328307362s ago: executing program 33 (id=37): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) r2 = io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0xeec2, 0x800, 0x2, 0x116}) close_range(r2, r2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0xc, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) 2m0.036844711s ago: executing program 5 (id=99): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000040), &(0x7f00000000c0)=@udp6=r2, 0x1}, 0x20) recvfrom(r2, &(0x7f00000004c0)=""/182, 0xb6, 0x0, 0x0, 0x0) close(0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1m59.007658193s ago: executing program 5 (id=104): socket$can_bcm(0x1d, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001780)={r0, &(0x7f0000000740), &(0x7f0000001740)=@udp=r1}, 0x20) syz_emit_ethernet(0x1a, &(0x7f0000000340)=ANY=[], 0x0) 1m58.696125754s ago: executing program 5 (id=106): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x2000) 1m58.462121261s ago: executing program 5 (id=108): syz_mount_image$exfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[], 0x7f, 0x1519, &(0x7f00000021c0)="$eJzs3AucTtX6OPDnWWvtMSbpbZLLsNZ6Nm9yWSZJckmSSJIkSXJLSJrkSEJiyC1pSEJyGZJ7SC4Tk8b9fpeEJGmSJLfckvX/TPg5nTr/0/mdfsf5nHm+n8/+WM+797P22u/z7nevvc3Md50GV29Yo2p9IoJ/CV74JxkAYgGgPwBcAwABAJSNLxuftT6nxOR/bSfsz/Xw1Cs9AnYlcf2zN65/9sb1z964/tkb1z974/pnb1z/7I3rz1h2tmlagWt5yb4LP//Pzvj6/9/h4skHX60pdX1ngJg/msf1/++V4w9sw/X/rxX8kY24/tkb1z+7ir3SA2D/Afj8zw7+/kyQ65+9cf0Zy86u9PPnK71AJHu/B1f688cYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjLHs47S9TAHCpfaXHxRhjjDHGGGOMsT+Pz3GlR8AYY4wxxhhjjLH/ewgCJCgIIAZyQCzkhDgQAHA15IZrIALXQjxcB3ngesgL+SA/FIAEKAiFQIOBGCAIoTAUgSjcAEXhRigGxaEElAQHpSARboLScDOUgVugLNwK5eA2KA8VoCJUgtuhMtwBVeBOqAp3QTW4G6pDDbgHasK9UAvug9pwP9SBB6AuPAj14CGoDw9DA3gEGsKj0Ageg8bQBJpCM2j+v8p/EbrBS9AdekAy9IRe8DL0hj7QF/pBf3gFBsCrMBBegxQYBIPhdRgCb8BQeBOGwXAYAW/BSHgbRsFoGANjIRXGwXh4BybAuzARJsFkmAJTYRpMh/dgBsyEWfA+zIYPYA7MhXkwH9LgQ1gACyEdPoJF8DFkwGJYAkthGSyHFbASVsFqWANrYR2shw2wETbBZtgCW2EbfALb4VPYAZ/BTtgFu+Fz2ANf/JP5p/4mvzMCAgoUqFBhDMZgLMZiHMZhLsyFuTE3RjCC8RiPeTAP5sW8mB/zYwImYCEshAYNEhIWxsIYxSgWxaJYDIthCSyBDh0mYiKWxpuxDJbBslgWy2E5LI8VsAJWwkpYGStjFayCVbEqVsNqWB2r4z14D/bEWlgLa2NtrIN1Lj2ewvpYHxtgA2yIDbERNsLG2BibYlNsjs2xBbbAltgSW2NrbINtsC22xSRMwnbYDttje+yAHbAjdsRO2Ak7YxfskvliDsCX8CXsgdVET+yFvbA3puToi/2wH76CA/BVfBVfwxQchIPxdXwd38CheBKH4XAcgSOwsngbR+FoJDEWUzEVx+N4nIATcCJOwkk4BafiNJyO03EGzsSZ+D7Oxg/wA5yLc3E+pmEaLsCFmI7puAhPYQYuxiW4FJfhclyGK3EVrsQ1uBbX4HpcjxtxI27GzbgVt+In+Al+igoAP8NduAtTcA/uwb24F/fhPtyP+zETM/EAHsCDeBAP4SE8jIfxCB7FY3gUT+AJPImn8DSexrN4Fs/h8wnfNPi0+OoUEFmUUCJGxIhYESviRJzIJXKJ3CK3iIiIiBfxIo/II/KKvCK/yC8SRIIoJAoJI4wgEcYAgIiKqCgqiopiopgoIUoIJ5xIFImitCgtyogyoqy4VZQTt4nyooJo5SqJSqKyaO2qiDtFVVFVVBN3i+qihqghaoqaopaoJWqL2qKOqCPqigdFPdET++LDIqsyDcUgbCQGY2PRRMiL32AtxFBsKVqJ1uJJMRyHYVvRwiWJZ0Q7MQrbi7+I0fic6CjGYifxgugsuoiu4kXRTbR03UUPMRF7il5iCvYWfURf0U/MwLvF+zg7Z3XxmkgRg8Rg8bqYj2+IoeJNMUwMFyPEW2KkeFuMEqPFGDFWpIpxYrx4R0wQ74qJYpKY7CWAmCami/fEDDFTzBLvi9niAzFHzBXzxHyRJj4UC8RCkS4+EovExyJDLBZLxFKxTCwXK8RKsUqsFmvEWrFOrBcbxEaxSWwWW8RWsU18IraLTyH2wiGL3eJzsUd8IfaKL8U+8ZXYL74WmeIbcUB8Kw6K78Qh8b04LH4QR8RRcUwcFyfEj+KkOCVOizPirPhJnBM/i/PCC5AohZRSyUDGyBwyVuaUcfIqmUsGF9/da2W8vE7mkdfLvDKfzC8LyARZUBaSWhppJclQFpZFZFTeIIvKG2UxWVyWkCWlk6VkorxJlpY3yzLyFllW3irLydtkeVlBVpSV5O2ysrxDQuTCPqrJu2V1WUPeI5PhXllL3idry/tlHfmArCsflPXkQ7K+fFg2kI/IhvJR2Ug+JhvLJrKpbCaby8dlC/mEbClbydbySdlGPiXbyqdlknxGtpP+4kfkOdlRPi87yRdkZ9lFdpU/y/PSy+6yh4SeIHvJl2Vv2Uf2lf1kf/mKHCBflQPlazJFDpKD5etyiHxDDpVvymFyuBwh35Ij5dtylBwtx8ixMlWOk+PlO3KCfFdOlJPkZDlFTpXTZN+LPc2S8h/mv/M7+QN/2ftGuUlullvwYinkp3KH3CF3yp1yt9wt98g9cq/cK/fJfXK/3C8zZaY8IA/Ig/KgPCQPycPysDwij8oz8rg8IX+UJ+UpeUqekWflWXnu4nsACpVQUikVqBiVQ8WqnCpOXaVyqatVbnWNiqhrVby6TuVR16u8Kp/KrwqoBFVQFVJaGWUVqVAVVkVUVN1waZSqhCqpnCqlEtVN/0y+KqpuVMVU8V/lXxpf8t8ZX3PVXLVQLVRL1VK1Vq1VG9VGtVVtVZJKUu1UO9VetVcdVAfVUXVUnVQn1Vl1Vl1VV9VNdVPdVXeVrJJVL/Wy6q36qL6qn+qvXlED1AA1UA1UKSpFDVaD1RA1RA1VQ9UwNUyNUCPUSDVSjVKj1Bg1RqWqVDVejVcT1AQ1UU1Uk9VkNVVNVdPVdDVDzVCz1Cw1W81Wc9QcNU/NU2kqTS1QC1S6SleL1CKVoRarxWqpWqqWq+VqpVqpVqvVaq1aq9ar9SpDbVKb1Ba1RW1T29R2tV3tUDvUTrVT7Va71R61R+1Ve9U+tU/tV/tVpspUB9QBdVAdVIfUIXVYHVZH1BF1TB1TJ9QJdVKdVKfVaXVWnVXn1Dl1Xp3PmvYFIhCBCrKutDFBbBAbxAVxQa4gV5A7yB1EgkgQH8QHeYLrg7xBviB/UCBICAoGhQIdmMAG4mLRo8ENQdHgxqBYUDwoEZQMXFAqSAxuCkoHNwdlgluCssGtQbngtqB8UCGoGFQKbg8qB3cEVYI7g6rBXUG14O6gelAjuCeoGdwb1AruC2oH9wd1ggeCusGDQb3goaB+8HDQIHgkaBg8GjQKHgsaB02CpkGzoPmf2r/3J/M94TbqHjpZ99S99Mu6t+6j++p+ur9+RQ/Qr+qB+jWdogfpwfp1PUS/oYfqN/UwPVyP0G/pkfptPUqP1mP0WJ2qx+nx+h09Qb+rJ+pJerKeoqfqaXq6fk/P0DP1LP2+nq0/0HP0XD1Pz9dp+kO9QC/U6fojvUh/rDP0Yr1EL9XL9HK9Qq/Uq/RqvUav1ev0er1Bb9Sb9Ga9RW/V2/Qnerv+VO/Qn+mdepferT/Xe/QXeq/+Uu/TX+n9+mudqb/RB/S3+qD+Th/S3+vD+gd9RB/Vx/RxfUL/qE/qU/q0PqPP6p/0Of2zPq991uQ+6/JulFEmxsSYWBNr4kycyWVymdwmt4mYiIk38SaPyWPymrwmv8lvEkyCKWQKmSxkyBQ2hU3URE1RU9QUM8VMCVPCOONMokk0pU1pU8aUMWVNWVPOlDPlTXlT0VQ0t5vbzR3mDnOnudPcZe4yd5u7TQ1Tw9Q0NU0tU8vUNrVNHVPH1DV1TT1Tz9Q39U0D08A0NA1NI9PINDaNTVPT1DQ3zU0L08K0NC1Na9PatDFtTFvT1iSZJNPOtDPtTXvTwXQwHU1H08l0Mp1NZ9PVdDXdTDfT3XQ3ySbZ9DK9TG/T2/Q1fU1/098MMAPMQDPQpJgUM9gMNkPMEDPUDDXDzHAzIuv0MW+bUWa0GWPGmlSTasab8WaCmWAmmolmsplsppqpZrqZbmaYGWaWmWVmm9lmjplj5pl5Js2kmQVmgUk36WaRWWQyTIZZYpaYZWaZWWFWmFVmlVlj1ph1sM5sMBvMJrPJbDFbzDazzWw3280Os8PsNDvNbrPb7DF7zF6z1+wz+8x+s99kmkxzwBwwB81Bc8gcMofNYXPEHDHHzDFzwpwwJ81Jc9qcNmdNvovXS29ibU4bZ6+yuezVNre9xv5tnN8WsAm2oC1ktc1r8/0qNtbaYra4LWFLWmdL2UR702/i8raCrWgr2dttZXuHrfKbuKa919ay99na9n5bw97zq7iOfcDWtY/aeogAtoltYJvZhvZR28g+ZhvbJrapbWbb2KdsW/u0TbLP2Hb22d/EC+xCu8qutmvsWrvT7rKn7Rl70H5nz9qfbHfbw/a3r9gB9lU70L5mU+yg38Qj7Ft2pH3bjrKj7Rg79jfxZDvFTrXT7HT7np1hZ/4mTrMf2tk23c6xc+08O/+XOGtM6fYju8h+bDNsAEvsUrvMLrcr7Mr/GetSu95usBvtDvuZ3WK32m32E7v90kTY7rK77ed2j/3CHrDf2n32K7vfHrKZ9ptf4qzjO2S/t4ftD/aIPWqP2eP2hP1RXcrOOvbj9md73noLhAQkSVFAMZSDYiknxdFVlIuuptx0DUXoWoqn6ygPXU95KR/lpwKUQAWpEGkyZIkopMJUhKJ0A10aXgkqSY5KUSLdRKXpZipDt1BZupXK0W1UnipQRapEt1NluoOq0J1Ule6iav+TW5PupVp0H9WG+6kOPUB16UGqRw9RfXqYGtAj1DBrqkePUWNqQk2pGTWnx6kFPUEtqRW1piepDT1FbelpSqJnqB09S+3pL9SBnqOO9Dx1oheoM3WhrvQidaOXqDv1oGTqSb3oZepNfagv9aP+9AoNoFdpIL1GKTSIBtPrNITeoKH0Jg2j4TSC3qKR9DaNotE0hsZSKo2j8fQOTaB3aSJNosk0habSNJpO79EMmkmz6H2aTR/QHJpL82g+pdGHtIAWUjp9RIvoY8qgxbSEltIyWk4raCWtotW0htbSOlpPG2gjbaLNtIW20jb6hLbTp7SDPqOdtIt20+e0h76gvfQl7aOvaD99TZn0DR2gb+kgfUeH6Hvfg36gI3SUjtFxOkE/0kk6RafpDJ2ln+gc/UznyROEGIpQhioMwpgwRxgb5gzjwqvCXOHVYe7wmjASXhvGh9eFecLrw7xhvjB/WCBMCAuGhUIdmtCGFIZh4bBIGA1vCIuGN4bFwuJhibBk6MJSYWJ4U1g6vDksE94Slg1vDcuFt4Xlwwrho/dXCm8PK4d3hFXCO8Oq4V1htfDusHpYI7wnrBneG9YK7wtrh/eHZcIHwrrhg2G98KGwfvhw2CB8JGwYPho2Ch8LG4dNwqZhs7B5+HjYInwibBm2CluHT4ZtwqfCtuHTYVL4TNgufPaX9Q8s/Pvrk8OeYa/w5fDl0Pv75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3NXKAQyecdMoFLsblcLEup4tzV7lc7mqX213jIu5aF++uc3nc9S6vy+fyuwIuwRV0hZx2xllHLnSFXREXdTe4ou5GV8wVdyVcSedcKZfomrnmrrlr4Z5wLV0r19o96Z50T7mn3NPuafeMa+eede3dX1wH95zr6J53z7sXXGfXxXV1L7publzuC+dVsuvlernerrfr6/q6/q6/G+AGuIFuoEtxKW6wG+yGuCFuqBvqhrlhboQb4Ua6kW6UG+XGuDEu1aW68W68m+AmuIluopvsJrupbqqb7qa7GW6Gqzzzwl7muDlunpvn0lyaW+Cy5ozpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+62ux1uh9vpr7nQqdvj9rq9bp/b5/a7r12m+8YdcN+6g+47d8h97w67H9wRd9Qdc8fdCfejO+lOudPujDvrfnLn3M/uvPMuNTIuMj7yTmRC5N3IxMikyOTIlMjUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvuCX0hX0RH/U3+KL+Rl/MF/clfEnvfCmf6G/ypf3Nvoy/xZf1t/py/jZf3lfwFf1jvrFv4pv6Zr65f9y38E/4lr6Vb+2f9G38U76tf9on+Wd8O/+sb+//4jv453xH/7zv5F/wnX0X39W/6Lv5l3x338Mn+56+l3/Z9/Z9fF/fz/f3r/gB/lU/0L/mU/wgP9i/7of4N/xQ/6Yf5of7ETFv+ZGXbpFhrE/14/x4/46f4N+FO/0kP9lP8VP9ND/dv+dn+Jl+ln/fz/Yf+Dl+rp/n5/s0/6Ff4Bf6dP+RX+Q/9hl+8aWHyn6FX+lX+dV+jV/r1/n1foPf6Df5zX6L3+q3+U/8dv+p3+E/8zv9Lr/bf+73+C/8Xv+l3+e/8vv91z7Tf+MP+G/9Qf+dP+S/94f9D/6IP+qP+eP+hP/Rn/Sn/Gl/xp/1P/lz/md/nn9njTHGGGPsDxl3uSl+vebC4/yev5Mj/mrjXgBw9dYCmX+9PmtGuS7vhXYfkdAmAgDP9Oj08KWlWrXk5OSL22ZICIrMBbj0P0FZYuByvBhaw1OQBK2g9O+Ov4/ocpb+Qf/RWwHi/ionFi7Hl/v/EgCTf6f/x58csaBceDr+/9P/XIBiRS7n5ITL8WJo/cvzlVZQ5u+MP1+LfzD+nF+lArT8q5xccDm+PP5EeAKehaRfbckYY4wxxhhjjF3QR1TscOn+89JPfP7e/XmCupyTAy7H/+j+nDHGGGOMMcYYY1fec126Pv14UlKrDv98o8r/KusPNxrB/1XP3PjdhvcAl15RAPAvdgiQ1ZD/zqPY/G/ZV8rFU+dvVy074wP4zyjln9G4wl9MjDHGGGOMsT/d5Un/r19XV2pAjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZYNvTv+HNiV/oYGWOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsSvt/wUAAP//YyL3jA==") mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mlock(&(0x7f000068d000/0x1000)=nil, 0x1000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m57.489554772s ago: executing program 5 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1m57.041433636s ago: executing program 5 (id=113): syz_pidfd_open(0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x358, 0xffffffff, 0x108, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xa8, 0xd0, 0x8502, {0x700}}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x800fe, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 1m56.641682518s ago: executing program 34 (id=113): syz_pidfd_open(0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x358, 0xffffffff, 0x108, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xa8, 0xd0, 0x8502, {0x700}}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x800fe, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 1m51.927196127s ago: executing program 1 (id=139): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000004c0)=ANY=[], 0x0, 0xb, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="387a06002b9205003c0012800b000100697036746e6c00002c0002801400020000000000000000000000ffff6401010214000300ff"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1m51.252421078s ago: executing program 1 (id=140): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000a6f000/0x2000)=nil, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f00000002c0)=""/153, 0x99) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, r0, 0xd0fbb000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000003c0)={{&(0x7f0000c67000/0x4000)=nil, 0x4000}}) pipe2(0x0, 0x0) 1m49.724168526s ago: executing program 1 (id=145): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1132e88, 0x4) 1m48.845211994s ago: executing program 1 (id=148): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x98d0d9, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f000001a100)='./file0\x00', 0x0) 1m48.614994502s ago: executing program 1 (id=150): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) 1m48.249594583s ago: executing program 1 (id=152): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r5, @ANYBLOB="140006005d756d6d79300000000000000000000014000400"], 0x54}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1m47.742216659s ago: executing program 35 (id=152): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r5, @ANYBLOB="140006005d756d6d79300000000000000000000014000400"], 0x54}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 52.206619582s ago: executing program 6 (id=456): getrandom(&(0x7f0000000380)=""/300, 0xcebaa945, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000140), &(0x7f0000000240)}}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 51.593284161s ago: executing program 6 (id=458): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x899, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) read$FUSE(r0, &(0x7f00000083c0)={0x2020}, 0x2020) 51.428370526s ago: executing program 6 (id=460): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047459, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r0, 0x40047459, &(0x7f0000001200)) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) 51.211686924s ago: executing program 6 (id=462): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000180)='./file0/file0\x00', 0xa50888, 0x0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0x1a1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000002240)='./file0\x00', 0xc800, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0x1, 0x2c2, &(0x7f00000006c0)="$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") 50.938589262s ago: executing program 6 (id=463): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 50.68159875s ago: executing program 6 (id=464): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) tee(r3, r2, 0x6, 0x0) 50.176188756s ago: executing program 36 (id=464): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) tee(r3, r2, 0x6, 0x0) 6.115580987s ago: executing program 7 (id=721): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x1ffc9380, 0x1000000000, 0x8, 0x41, 0x10000, 0x2000000, 0x2004cb, 0xffffffffeffffffd, 0xa1d, 0x2, 0x4, 0x0, 0x3, 0x2, 0x2, 0xfffffffffffffffd], 0xffe9c000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000400)=@x86={0x7f, 0xb, 0x0, 0x0, 0xe284, 0x4, 0x7, 0x3, 0x7c, 0x1, 0x5, 0x6, 0x0, 0x9, 0x4, 0x6, 0x3, 0x93, 0x3, '\x00', 0x6b, 0xfffffffffffffff9}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x0, 0x8080000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xb000, 0xc, 0x0, 0xfc, 0x1, 0x0, 0x0, 0x3, 0x7}, {0x200000, 0x5000, 0x1f, 0x0, 0x7, 0x4, 0x0, 0xfd, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0xe, 0x0, 0x0, 0xfe, 0x1, 0x0, 0x8, 0xfc, 0x6, 0x10}, {0xeeee8000, 0x8000000, 0x4, 0x0, 0x4, 0x8, 0x1, 0x3, 0xfc, 0x3c}, {0x0, 0x0, 0xf, 0xfd, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x17}, {0x3000, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x4, 0x0, 0x0, 0x3}, {0x80a0000}, {0xdddd1000}, 0xddf8fffb, 0x0, 0x7000, 0x50, 0x0, 0xf801, 0x0, [0x80000000, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.829873005s ago: executing program 7 (id=723): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/192, 0xc0}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 4.311242404s ago: executing program 8 (id=728): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 4.310846893s ago: executing program 7 (id=729): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d59e5ac2d704fa2595b5d36400d0b2d119796726a223", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000025c0)="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", 0x1b0}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.929554976s ago: executing program 7 (id=732): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000200)="ca", 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000007b80)=ANY=[@ANYBLOB="12010000000000106a058400000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac3(0x4, 0xa3, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4248, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x8, 0x30, 0x43, {0x8, 0xb, 0x0, 0x2, 0x1, 0x23, 0x30, 0xfa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x26, 0x24, 0x9}, [@input_terminal={0x14, 0x24, 0x2, 0x4, 0x404, 0x5, 0x2, 0x1, 0x212, 0xe, 0x9, 0x2}, @cluster_info_segment={0x6, 0x20, 0x6, 0xa3, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0x7, 0x5, 'm'}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0x4, 0xc7, {0xa, 0x25, 0x25, 0x2, 0xc, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2, 0x40, 0x6, {0xa, 0x25, 0x25, 0x1, 0x6, 0x7}}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x6, "6f16a67f"}, @local=@item_4={0x3, 0x2, 0xa, "3159ad7b"}, @global=@item_012={0x0, 0x1, 0x5}]}}, 0x0}, 0x0) 3.792547949s ago: executing program 2 (id=733): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000200)="ebcec280898a", 0x6}, {&(0x7f0000000640)="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", 0xb7b}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.268579918s ago: executing program 2 (id=735): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) unshare(0x22020600) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r1, 0x2) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0xb378, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1.617330219s ago: executing program 4 (id=738): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0), 0x1, 0x560, &(0x7f0000000c00)="$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") r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES64=r2], 0x38}}, 0x40) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x4) 1.328846698s ago: executing program 4 (id=739): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000380)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) fdatasync(r0) mkdir(0x0, 0x0) close(0x3) 1.233636061s ago: executing program 8 (id=740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7f, 0x5, 0x6, 0x2, 0x7, 0x400, 0x3, 0x10}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x804c}, 0x24044804) 985.581798ms ago: executing program 4 (id=741): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 985.280969ms ago: executing program 2 (id=742): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x400, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000000), 0x220000c, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x8000, 0x5) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) 884.959372ms ago: executing program 8 (id=743): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840), 0x0) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) io_uring_enter(r1, 0x788, 0x6a29, 0x1, 0x0, 0xfffffffffffffd04) 816.866644ms ago: executing program 4 (id=744): socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 669.841738ms ago: executing program 2 (id=745): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0xfffffe4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 669.581768ms ago: executing program 4 (id=746): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x42, 0x5}, 'syz1\x00', 0x53}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000100)={0x9, {"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", 0x1000}}, 0x1006) 457.170215ms ago: executing program 2 (id=747): r0 = creat(&(0x7f0000000040)='./file0\x00', 0xe2) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000000c0)={r3, 0x1ff, 0x10, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x7fdfffff, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0x3f4f, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, r5, 0x0, r5], [0x2b8], [0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000240)=r6) 402.768397ms ago: executing program 8 (id=748): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x82042, 0x19d) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) symlink(&(0x7f00000012c0)='.\x00', &(0x7f0000001300)='./bus\x00') fanotify_mark(r1, 0x1, 0x10001043, r0, 0x0) r2 = fanotify_init(0x10, 0x1000) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x641, 0x8001018, r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x2) 280.534ms ago: executing program 7 (id=749): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 273.838001ms ago: executing program 8 (id=750): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 222.047182ms ago: executing program 2 (id=751): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 19.865869ms ago: executing program 7 (id=752): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 19.597829ms ago: executing program 4 (id=753): r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x2003, @local, 0x2}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet(0x2, 0x2, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f00000001c0)=0x3, 0x4) 0s ago: executing program 8 (id=754): socket$inet(0x2, 0x3, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) r0 = io_uring_setup(0xd6b, &(0x7f0000000040)={0x0, 0x3bd0, 0xc000, 0x8, 0xc5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000500"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): bridge0: port 2(bridge_slave_1) entered blocking state [ 70.174418][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.181809][ T5776] bridge_slave_1: entered allmulticast mode [ 70.188474][ T5776] bridge_slave_1: entered promiscuous mode [ 70.243072][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.254272][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.266066][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.292488][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.300516][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.308050][ T5780] bridge_slave_0: entered allmulticast mode [ 70.314702][ T5780] bridge_slave_0: entered promiscuous mode [ 70.323818][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.346537][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.353728][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.361348][ T5780] bridge_slave_1: entered allmulticast mode [ 70.368758][ T5780] bridge_slave_1: entered promiscuous mode [ 70.429533][ T5776] team0: Port device team_slave_0 added [ 70.445196][ T5776] team0: Port device team_slave_1 added [ 70.455091][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.466786][ T5773] team0: Port device team_slave_0 added [ 70.490719][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.501153][ T5773] team0: Port device team_slave_1 added [ 70.518054][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.525018][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.550987][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.563334][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.570559][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.577935][ T5782] bridge_slave_0: entered allmulticast mode [ 70.585113][ T5782] bridge_slave_0: entered promiscuous mode [ 70.609113][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.618426][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.644778][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.656528][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.663670][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.671131][ T5782] bridge_slave_1: entered allmulticast mode [ 70.678081][ T5782] bridge_slave_1: entered promiscuous mode [ 70.742504][ T5780] team0: Port device team_slave_0 added [ 70.750884][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.758234][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.784191][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.796685][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.803643][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.829596][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.853626][ T5776] hsr_slave_0: entered promiscuous mode [ 70.860498][ T5776] hsr_slave_1: entered promiscuous mode [ 70.870907][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.883063][ T5780] team0: Port device team_slave_1 added [ 70.890673][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.988079][ T5773] hsr_slave_0: entered promiscuous mode [ 70.994290][ T5773] hsr_slave_1: entered promiscuous mode [ 71.000582][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.008498][ T5773] Cannot create hsr debugfs directory [ 71.024247][ T5782] team0: Port device team_slave_0 added [ 71.033743][ T5782] team0: Port device team_slave_1 added [ 71.052128][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.059148][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.085073][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.097630][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.104579][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.130546][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.207439][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.214391][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.240687][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.272704][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.279857][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.305819][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.366267][ T5086] Bluetooth: hci0: command tx timeout [ 71.376593][ T5780] hsr_slave_0: entered promiscuous mode [ 71.382851][ T5780] hsr_slave_1: entered promiscuous mode [ 71.389555][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.397228][ T5780] Cannot create hsr debugfs directory [ 71.445559][ T5086] Bluetooth: hci1: command tx timeout [ 71.467432][ T5782] hsr_slave_0: entered promiscuous mode [ 71.473725][ T5782] hsr_slave_1: entered promiscuous mode [ 71.479806][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.487468][ T5782] Cannot create hsr debugfs directory [ 71.525711][ T5086] Bluetooth: hci2: command tx timeout [ 71.533742][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.540351][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.606196][ T5086] Bluetooth: hci3: command tx timeout [ 71.683834][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.716299][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.742341][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.768783][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.805023][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.815928][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.829134][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.844209][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.927823][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.955864][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.966844][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.979935][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.048159][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.059553][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.070291][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.080962][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.178698][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.195251][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.239189][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.263570][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.288422][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.295767][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.312362][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.319480][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.343861][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.350991][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.374024][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.382509][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.389646][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.463677][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.473024][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.520796][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.527999][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.543868][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.551079][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.630241][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.681125][ T4502] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.688287][ T4502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.740845][ T4502] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.748081][ T4502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.787643][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.858303][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.955182][ T5776] veth0_vlan: entered promiscuous mode [ 72.991366][ T5776] veth1_vlan: entered promiscuous mode [ 73.009452][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.073277][ T5776] veth0_macvtap: entered promiscuous mode [ 73.101569][ T5776] veth1_macvtap: entered promiscuous mode [ 73.139828][ T5773] veth0_vlan: entered promiscuous mode [ 73.155863][ T5773] veth1_vlan: entered promiscuous mode [ 73.182210][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.203813][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.231055][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.244713][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.254555][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.263647][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.283362][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.360672][ T5773] veth0_macvtap: entered promiscuous mode [ 73.393137][ T5773] veth1_macvtap: entered promiscuous mode [ 73.409657][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.440028][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.449771][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.451552][ T5086] Bluetooth: hci0: command tx timeout [ 73.489638][ T5782] veth0_vlan: entered promiscuous mode [ 73.517341][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.525834][ T5086] Bluetooth: hci1: command tx timeout [ 73.534083][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.550483][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.568052][ T5782] veth1_vlan: entered promiscuous mode [ 73.575865][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.585895][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.588327][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.604514][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.605764][ T5086] Bluetooth: hci2: command tx timeout [ 73.619211][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.652368][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.663296][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.674353][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.684492][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.685835][ T5086] Bluetooth: hci3: command tx timeout [ 73.744162][ T5780] veth0_vlan: entered promiscuous mode [ 73.762742][ T5780] veth1_vlan: entered promiscuous mode [ 73.841932][ T5782] veth0_macvtap: entered promiscuous mode [ 73.860773][ T5782] veth1_macvtap: entered promiscuous mode [ 73.930733][ T5780] veth0_macvtap: entered promiscuous mode [ 73.964151][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.988216][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.999512][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.010753][ T5833] syz.3.5[5833]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 74.021286][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.038689][ T5833] loop3: detected capacity change from 0 to 512 [ 74.040418][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.047625][ T5833] ======================================================= [ 74.047625][ T5833] WARNING: The mand mount option has been deprecated and [ 74.047625][ T5833] and is ignored by this kernel. Remove the mand [ 74.047625][ T5833] option from the mount to silence this warning. [ 74.047625][ T5833] ======================================================= [ 74.104193][ T5780] veth1_macvtap: entered promiscuous mode [ 74.114908][ T5833] EXT4-fs: Ignoring removed bh option [ 74.122764][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.128478][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.141081][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.164756][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.175862][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.180819][ T5833] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 74.186878][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.200884][ T5833] EXT4-fs (loop3): 1 truncate cleaned up [ 74.217330][ T5833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.218651][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.293447][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.303815][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.320721][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.332011][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.367852][ T5776] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /1/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 74.379754][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.404585][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.404747][ T5776] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz-executor: bg 0: block 7: invalid block bitmap [ 74.423865][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.433222][ T5776] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 74.441987][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.449031][ T5776] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /1/bus/file0: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 74.460040][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.487423][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.499331][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.534400][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.548038][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.591766][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.603366][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.614191][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.624715][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.634877][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.646928][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.658987][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.707883][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.734349][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.744461][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.753570][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.779321][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.787540][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.935007][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.948302][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.959662][ T3478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.969432][ T3478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.992924][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.008641][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.050900][ T5838] netlink: 'syz.1.2': attribute type 16 has an invalid length. [ 75.079599][ T5838] netlink: 'syz.1.2': attribute type 17 has an invalid length. [ 75.104008][ T5838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.157640][ T742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.175585][ T742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.412318][ T5844] loop0: detected capacity change from 0 to 256 [ 75.437628][ T5840] loop2: detected capacity change from 0 to 8192 [ 75.474017][ T5840] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 75.489470][ T5840] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 75.509660][ T5844] FAT-fs (loop0): Directory bread(block 1285) failed [ 75.515693][ T5840] REISERFS (device loop2): using ordered data mode [ 75.523274][ T5840] reiserfs: using flush barriers [ 75.532069][ T5086] Bluetooth: hci0: command tx timeout [ 75.532104][ T5840] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.586704][ T5844] FAT-fs (loop0): Directory bread(block 1285) failed [ 75.589188][ T5840] REISERFS (device loop2): checking transaction log (loop2) [ 75.605199][ T5840] REISERFS (device loop2): Using rupasov hash to sort names [ 75.616149][ T5840] REISERFS (device loop2): using 3.5.x disk format [ 75.623884][ T5840] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 75.636766][ T5840] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 75.637016][ T5844] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 75.649338][ T5840] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 75.665870][ T5840] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 75.687481][ T5086] Bluetooth: hci2: command tx timeout [ 75.706959][ T5840] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 75.766509][ T5086] Bluetooth: hci3: command tx timeout [ 75.797978][ T5844] FAT-fs (loop0): Directory bread(block 1285) failed [ 75.806479][ T5844] FAT-fs (loop0): Directory bread(block 1285) failed [ 75.813675][ T5844] FAT-fs (loop0): Directory bread(block 1285) failed [ 75.824051][ T5844] FAT-fs (loop0): Directory bread(block 1285) failed [ 75.833506][ T5844] FAT-fs (loop0): Directory bread(block 1285) failed [ 75.840452][ T5844] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 75.850518][ T5844] FAT-fs (loop0): Directory bread(block 1285) failed [ 75.880875][ T5840] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 75.917027][ T5840] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 75.950540][ T5840] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.351785][ T5857] overlayfs: failed to verify origin (4/file1, ino=47, err=-116) [ 76.383249][ T5857] overlayfs: failed to look up (file2) for ino (-116) [ 76.449603][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.752526][ T3478] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.001825][ T5871] (null): rxe_set_mtu: Set mtu to 4096 [ 77.025229][ T5871] lo speed is unknown, defaulting to 1000 [ 77.036271][ T5871] lo speed is unknown, defaulting to 1000 [ 77.049009][ T5871] lo speed is unknown, defaulting to 1000 [ 77.370821][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.384992][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.393251][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.396956][ T5828] lo speed is unknown, defaulting to 1000 [ 77.408597][ T5871] infiniband sz1: set active [ 77.414050][ T5871] infiniband sz1: added lo [ 77.415700][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.430375][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.438292][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.490068][ T5877] lo speed is unknown, defaulting to 1000 [ 77.518187][ T5871] RDS/IB: sz1: added [ 77.530101][ T5871] smc: adding ib device sz1 with port count 1 [ 77.543531][ T5871] smc: ib device sz1 port 1 has pnetid [ 77.567156][ T5828] lo speed is unknown, defaulting to 1000 [ 77.607150][ T5086] Bluetooth: hci0: command tx timeout [ 77.683973][ T5871] lo speed is unknown, defaulting to 1000 [ 77.765576][ T5086] Bluetooth: hci2: command tx timeout [ 77.856283][ T5086] Bluetooth: hci3: command tx timeout [ 78.003968][ T3478] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.060528][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 78.113524][ T3478] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.281144][ T3478] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.310767][ T5871] lo speed is unknown, defaulting to 1000 [ 78.434587][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.472498][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.473938][ T5902] loop0: detected capacity change from 0 to 512 [ 78.502836][ T5877] bridge_slave_0: entered allmulticast mode [ 78.528385][ T5877] bridge_slave_0: entered promiscuous mode [ 78.551614][ T5902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.606931][ T5902] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.607150][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.624518][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.635754][ T5877] bridge_slave_1: entered allmulticast mode [ 78.643036][ T5877] bridge_slave_1: entered promiscuous mode [ 78.770799][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.828621][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.950715][ T5877] team0: Port device team_slave_0 added [ 78.978756][ T5871] lo speed is unknown, defaulting to 1000 [ 78.991594][ T5877] team0: Port device team_slave_1 added [ 79.241345][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.325659][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.332658][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.425560][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.512511][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.527182][ T5086] Bluetooth: hci1: command tx timeout [ 79.545715][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.626308][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.681227][ T5871] lo speed is unknown, defaulting to 1000 [ 79.874410][ T5877] hsr_slave_0: entered promiscuous mode [ 79.906547][ T5877] hsr_slave_1: entered promiscuous mode [ 79.930169][ T5877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.954146][ T5877] Cannot create hsr debugfs directory [ 80.025091][ T5897] syz.1.25: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 80.078794][ T5897] CPU: 0 PID: 5897 Comm: syz.1.25 Not tainted syzkaller #0 [ 80.086047][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 80.096144][ T5897] Call Trace: [ 80.099445][ T5897] [ 80.102384][ T5897] dump_stack_lvl+0x18c/0x250 [ 80.107102][ T5897] ? show_regs_print_info+0x20/0x20 [ 80.112343][ T5897] ? load_image+0x420/0x420 [ 80.116878][ T5897] ? __rcu_read_unlock+0x7c/0xd0 [ 80.121848][ T5897] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 80.128299][ T5897] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 80.134829][ T5897] warn_alloc+0x246/0x340 [ 80.139191][ T5897] ? zone_watermark_ok_safe+0x230/0x230 [ 80.144770][ T5897] ? _raw_spin_unlock+0x28/0x40 [ 80.149649][ T5897] ? netlink_rcv_skb+0x241/0x4d0 [ 80.154633][ T5897] __vmalloc_node_range+0x662/0x1330 [ 80.159952][ T5897] ? __asan_memset+0x22/0x40 [ 80.164595][ T5897] ? free_vm_area+0x50/0x50 [ 80.169128][ T5897] ? kvmalloc_node+0x70/0x180 [ 80.173836][ T5897] ? rcu_is_watching+0x15/0xb0 [ 80.178631][ T5897] ? kvmalloc_node+0x70/0x180 [ 80.183330][ T5897] ? trace_kmalloc+0x1f/0x90 [ 80.187947][ T5897] kvmalloc_node+0x13f/0x180 [ 80.192571][ T5897] ? hash_netport4_resize+0x232/0x1b40 [ 80.198067][ T5897] hash_netport4_resize+0x232/0x1b40 [ 80.203387][ T5897] ? hash_netport4_uadt+0xc99/0xf30 [ 80.208627][ T5897] ? hash_netport4_uadt+0xf30/0xf30 [ 80.213869][ T5897] ? hash_netport4_kadt+0x590/0x590 [ 80.219106][ T5897] ? _local_bh_enable+0xa0/0xa0 [ 80.224254][ T5897] call_ad+0x454/0xb40 [ 80.228362][ T5897] ? ip_set_ad+0x9c0/0x9c0 [ 80.232812][ T5897] ? __nla_parse+0x40/0x50 [ 80.237250][ T5897] ip_set_ad+0x81a/0x9c0 [ 80.241532][ T5897] ? ip_set_dump_done+0x1e0/0x1e0 [ 80.246591][ T5897] ? rcu_is_watching+0x15/0xb0 [ 80.251417][ T5897] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 80.256468][ T5897] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.262572][ T5897] ? nfnetlink_rcv_msg+0x22a/0x12b0 [ 80.267810][ T5897] ? nfnetlink_unbind+0x160/0x160 [ 80.272879][ T5897] ? __dev_queue_xmit+0x19a3/0x3660 [ 80.278101][ T5897] ? __netlink_deliver_tap+0x5ab/0x830 [ 80.283584][ T5897] ? netlink_deliver_tap+0x19c/0x1b0 [ 80.288894][ T5897] ? netlink_unicast+0x72c/0x8d0 [ 80.293854][ T5897] ? netlink_sendmsg+0x8d0/0xbf0 [ 80.298816][ T5897] ? ____sys_sendmsg+0x5ba/0x960 [ 80.303775][ T5897] ? ___sys_sendmsg+0x2a6/0x360 [ 80.308649][ T5897] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 80.313702][ T5897] ? do_syscall_64+0x55/0xb0 [ 80.318332][ T5897] netlink_rcv_skb+0x241/0x4d0 [ 80.323121][ T5897] ? nfnetlink_unbind+0x160/0x160 [ 80.328174][ T5897] ? netlink_ack+0x1180/0x1180 [ 80.332976][ T5897] ? apparmor_capable+0x137/0x1a0 [ 80.338031][ T5897] ? bpf_lsm_capable+0x9/0x10 [ 80.342738][ T5897] ? security_capable+0x89/0xb0 [ 80.347622][ T5897] nfnetlink_rcv+0x2c9/0x24a0 [ 80.352330][ T5897] ? __local_bh_enable_ip+0x13a/0x1c0 [ 80.357725][ T5897] ? lockdep_hardirqs_on+0x98/0x150 [ 80.362956][ T5897] ? __local_bh_enable_ip+0x13a/0x1c0 [ 80.368353][ T5897] ? _local_bh_enable+0xa0/0xa0 [ 80.373238][ T5897] ? __dev_queue_xmit+0x265/0x3660 [ 80.378382][ T5897] ? __dev_queue_xmit+0x265/0x3660 [ 80.383532][ T5897] ? __dev_queue_xmit+0x1b2c/0x3660 [ 80.388764][ T5897] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 80.394360][ T5897] ? __dev_queue_xmit+0x265/0x3660 [ 80.399519][ T5897] ? ref_tracker_free+0x690/0x840 [ 80.404575][ T5897] ? refcount_inc+0x70/0x70 [ 80.409106][ T5897] ? __asan_memcpy+0x40/0x70 [ 80.413725][ T5897] ? __skb_clone+0x63/0x790 [ 80.418262][ T5897] ? __skb_clone+0x480/0x790 [ 80.422912][ T5897] ? __netlink_deliver_tap+0x7e8/0x830 [ 80.428410][ T5897] ? netlink_deliver_tap+0x2e/0x1b0 [ 80.433640][ T5897] ? __lock_acquire+0x7d40/0x7d40 [ 80.438699][ T5897] ? netlink_deliver_tap+0x2e/0x1b0 [ 80.443935][ T5897] netlink_unicast+0x751/0x8d0 [ 80.448726][ T5897] netlink_sendmsg+0x8d0/0xbf0 [ 80.453520][ T5897] ? netlink_getsockopt+0x590/0x590 [ 80.458746][ T5897] ? aa_sock_msg_perm+0x94/0x150 [ 80.463718][ T5897] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 80.469026][ T5897] ? security_socket_sendmsg+0x80/0xa0 [ 80.474513][ T5897] ? netlink_getsockopt+0x590/0x590 [ 80.479742][ T5897] ____sys_sendmsg+0x5ba/0x960 [ 80.484535][ T5897] ? __asan_memset+0x22/0x40 [ 80.489152][ T5897] ? __sys_sendmsg_sock+0x30/0x30 [ 80.494199][ T5897] ? __import_iovec+0x5f2/0x850 [ 80.499076][ T5897] ? import_iovec+0x73/0xa0 [ 80.503608][ T5897] ___sys_sendmsg+0x2a6/0x360 [ 80.508317][ T5897] ? __sys_sendmsg+0x2a0/0x2a0 [ 80.513148][ T5897] __se_sys_sendmsg+0x1c2/0x2b0 [ 80.518027][ T5897] ? __x64_sys_sendmsg+0x80/0x80 [ 80.523008][ T5897] ? lockdep_hardirqs_on+0x98/0x150 [ 80.528237][ T5897] do_syscall_64+0x55/0xb0 [ 80.532685][ T5897] ? clear_bhb_loop+0x40/0x90 [ 80.537382][ T5897] ? clear_bhb_loop+0x40/0x90 [ 80.542081][ T5897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.548090][ T5897] RIP: 0033:0x7f813059ce59 [ 80.552538][ T5897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.572167][ T5897] RSP: 002b:00007f81313b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.580610][ T5897] RAX: ffffffffffffffda RBX: 00007f8130815fa0 RCX: 00007f813059ce59 [ 80.588608][ T5897] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000005 [ 80.596605][ T5897] RBP: 00007f8130632d6f R08: 0000000000000000 R09: 0000000000000000 [ 80.604599][ T5897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.612591][ T5897] R13: 00007f8130816038 R14: 00007f8130815fa0 R15: 00007fff9f8ceb58 [ 80.620600][ T5897] [ 80.646548][ T5897] Mem-Info: [ 80.649729][ T5897] active_anon:5888 inactive_anon:0 isolated_anon:0 [ 80.649729][ T5897] active_file:1031 inactive_file:39949 isolated_file:0 [ 80.649729][ T5897] unevictable:768 dirty:48 writeback:0 [ 80.649729][ T5897] slab_reclaimable:10212 slab_unreclaimable:95996 [ 80.649729][ T5897] mapped:24160 shmem:1382 pagetables:570 [ 80.649729][ T5897] sec_pagetables:0 bounce:0 [ 80.649729][ T5897] kernel_misc_reclaimable:0 [ 80.649729][ T5897] free:1361672 free_pcp:10464 free_cma:0 [ 80.659677][ T5932] loop2: detected capacity change from 0 to 256 [ 80.753294][ T5932] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.780997][ T5897] Node 0 active_anon:23752kB inactive_anon:0kB active_file:4124kB inactive_file:159592kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96740kB dirty:292kB writeback:0kB shmem:4092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10688kB pagetables:2280kB sec_pagetables:0kB all_unreclaimable? no [ 80.805649][ T5932] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 80.822345][ T5877] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.844049][ T5932] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 80.853772][ T5877] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.889956][ T5897] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 80.929962][ T5877] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.971167][ T5897] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 81.025820][ T5897] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 81.046066][ T5897] Node 0 DMA32 free:1539084kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:23848kB inactive_anon:0kB active_file:4124kB inactive_file:158820kB unevictable:1536kB writepending:360kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:21124kB local_pcp:14588kB free_cma:0kB [ 81.105618][ T5877] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.134828][ T5897] lowmem_reserve[]: 0 0 0 0 0 [ 81.152919][ T5942] loop0: detected capacity change from 0 to 256 [ 81.166199][ T5897] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 81.214923][ T5942] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8277d129, utbl_chksum : 0xe619d30d) [ 81.215491][ T5897] lowmem_reserve[]: 0 0 0 0 0 [ 81.261520][ T5897] Node 1 Normal free:3891012kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22084kB local_pcp:10720kB free_cma:0kB [ 81.339346][ T5897] lowmem_reserve[]: 0 0 0 0 0 [ 81.353525][ T5897] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 81.406330][ T5897] Node 0 DMA32: 1*4kB (E) 1*8kB (U) 9*16kB (UM) 35*32kB (UME) 3*64kB (ME) 3*128kB (UM) 1*256kB (M) 1*512kB (U) 4*1024kB (ME) 6*2048kB (UME) 371*4096kB (M) = 1538620kB [ 81.452630][ T5897] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 81.485488][ T5897] Node 1 Normal: 219*4kB (UME) 71*8kB (UME) 34*16kB (UME) 44*32kB (UME) 16*64kB (UME) 10*128kB (UME) 3*256kB (UME) 1*512kB (E) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3891012kB [ 81.525973][ T5897] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 81.549124][ T5897] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 81.581889][ T5897] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 81.612702][ T5086] Bluetooth: hci1: command tx timeout [ 81.623864][ T5897] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 81.646294][ T5897] 43292 total pagecache pages [ 81.651388][ T5897] 0 pages in swap cache [ 81.702999][ T5897] Free swap = 124996kB [ 81.712355][ T5897] Total swap = 124996kB [ 81.733135][ T5897] 2097051 pages RAM [ 81.748429][ T5897] 0 pages HighMem/MovableOnly [ 81.792749][ T5897] 416933 pages reserved [ 81.818469][ T5897] 0 pages cma reserved [ 82.228930][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.285982][ T5960] 0x000000000001-0x000000020000 : "" [ 82.312180][ T5960] ftl_cs: FTL header corrupt! [ 82.463074][ T5965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.34'. [ 82.496103][ T5962] lo speed is unknown, defaulting to 1000 [ 82.537073][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.578210][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.585391][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.649459][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.656651][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.761784][ T5969] netlink: 'syz.2.36': attribute type 1 has an invalid length. [ 82.880394][ T5969] vlan2: entered allmulticast mode [ 82.889021][ T5969] veth0_to_bond: entered allmulticast mode [ 83.501420][ T3478] hsr_slave_0: left promiscuous mode [ 83.516457][ T3478] hsr_slave_1: left promiscuous mode [ 83.528165][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.545778][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.554386][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.568826][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.584824][ T3478] bridge_slave_1: left allmulticast mode [ 83.590922][ T3478] bridge_slave_1: left promiscuous mode [ 83.614464][ T3478] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.645230][ T3478] bridge_slave_0: left allmulticast mode [ 83.654881][ T3478] bridge_slave_0: left promiscuous mode [ 83.663240][ T3478] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.689893][ T5086] Bluetooth: hci1: command tx timeout [ 83.714589][ T3478] veth1_macvtap: left promiscuous mode [ 83.722491][ T3478] veth0_macvtap: left promiscuous mode [ 83.728186][ T3478] veth1_vlan: left promiscuous mode [ 83.734015][ T3478] veth0_vlan: left promiscuous mode [ 84.083458][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.103134][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.119222][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.139959][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.161575][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.178011][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.615127][ T3478] team0 (unregistering): Port device team_slave_1 removed [ 84.653293][ T3478] team0 (unregistering): Port device team_slave_0 removed [ 84.687929][ T3478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.727887][ T3478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.982716][ T3478] bond0 (unregistering): Released all slaves [ 85.081077][ T6006] ipip0: entered promiscuous mode [ 85.087125][ T6006] ipip0: entered allmulticast mode [ 85.173837][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.254788][ T5996] lo speed is unknown, defaulting to 1000 [ 85.766498][ T5086] Bluetooth: hci1: command tx timeout [ 85.878485][ T3478] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.005135][ T3478] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.088432][ T3478] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.163352][ T3478] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.254753][ T5877] veth0_vlan: entered promiscuous mode [ 86.270619][ T5086] Bluetooth: hci2: command tx timeout [ 86.308724][ T5877] veth1_vlan: entered promiscuous mode [ 86.387533][ T5877] veth0_macvtap: entered promiscuous mode [ 86.419730][ T5877] veth1_macvtap: entered promiscuous mode [ 86.492337][ T5996] chnl_net:caif_netlink_parms(): no params data found [ 86.595958][ T5877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.612501][ T5877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.623203][ T5877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.634120][ T5877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.644759][ T5877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.658914][ T5877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.672957][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.828302][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.857056][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.864395][ T5996] bridge_slave_0: entered allmulticast mode [ 86.892315][ T5996] bridge_slave_0: entered promiscuous mode [ 86.900746][ T28] cfg80211: failed to load regulatory.db [ 86.910664][ T5877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.929352][ T5877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.939323][ T5877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.955078][ T5877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.965030][ T5877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.984223][ T5877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.996310][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.031213][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.043566][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.051889][ T5996] bridge_slave_1: entered allmulticast mode [ 87.065319][ T5996] bridge_slave_1: entered promiscuous mode [ 87.137742][ T5996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.150780][ T5877] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.160752][ T5877] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.169500][ T5877] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.178613][ T5877] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.191378][ T5996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.244833][ T5996] team0: Port device team_slave_0 added [ 87.284719][ T5996] team0: Port device team_slave_1 added [ 87.368628][ T5996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.383862][ T5996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.425547][ T5996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.443129][ T5996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.454004][ T5996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.481200][ T5996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.679805][ T6071] tipc: Started in network mode [ 87.703619][ T6071] tipc: Node identity 4, cluster identity 4711 [ 87.725888][ T6071] tipc: Node number set to 4 [ 87.826642][ T5996] hsr_slave_0: entered promiscuous mode [ 87.854215][ T5996] hsr_slave_1: entered promiscuous mode [ 88.125784][ T742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.154764][ T742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.337625][ T5086] Bluetooth: hci2: command tx timeout [ 88.446855][ T4502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.474148][ T4502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.946524][ T3478] hsr_slave_0: left promiscuous mode [ 88.952606][ T3478] hsr_slave_1: left promiscuous mode [ 88.959371][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.967541][ T6110] process 'syz.4.17' launched './file0' with NULL argv: empty string added [ 88.977294][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.988422][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.996205][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.004330][ T3478] bridge_slave_1: left allmulticast mode [ 89.010504][ T3478] bridge_slave_1: left promiscuous mode [ 89.019510][ T3478] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.030195][ T3478] bridge_slave_0: left allmulticast mode [ 89.036303][ T3478] bridge_slave_0: left promiscuous mode [ 89.042164][ T3478] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.081898][ T3478] veth1_macvtap: left promiscuous mode [ 89.087643][ T3478] veth0_macvtap: left promiscuous mode [ 89.104241][ T3478] veth1_vlan: left promiscuous mode [ 89.112200][ T3478] veth0_vlan: left promiscuous mode [ 89.684358][ T27] audit: type=1800 audit(1780668797.171:2): pid=6110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.17" name="/" dev="fuse" ino=4 res=0 errno=0 [ 90.406794][ T5086] Bluetooth: hci2: command tx timeout [ 90.476266][ T3478] team0 (unregistering): Port device team_slave_1 removed [ 90.542251][ T3478] team0 (unregistering): Port device team_slave_0 removed [ 90.602114][ T3478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.668015][ T3478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.070998][ T3478] bond0 (unregistering): Released all slaves [ 91.189128][ T5996] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 91.200027][ T5996] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 91.210869][ T5996] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 91.269465][ T6147] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.301941][ T6148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.309212][ T6148] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 91.319732][ T6148] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 91.331575][ T6148] bond1: (slave xfrm1): making interface the new active one [ 91.340080][ T6148] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 91.369922][ T5996] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 91.388675][ T6136] Zero length message leads to an empty skb [ 91.693273][ T5996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.730557][ T5996] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.753926][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.761067][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.868550][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.875760][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.393643][ T5996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.488424][ T5086] Bluetooth: hci2: command tx timeout [ 92.509410][ T6180] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.292180][ T5996] veth0_vlan: entered promiscuous mode [ 93.333890][ T5996] veth1_vlan: entered promiscuous mode [ 93.415454][ T5996] veth0_macvtap: entered promiscuous mode [ 93.449750][ T5996] veth1_macvtap: entered promiscuous mode [ 93.514845][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.545016][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.565265][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.600861][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.619229][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.632690][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.682381][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.720429][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.751755][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.793176][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.804939][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.844655][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.877145][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.901648][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.963958][ T5996] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.996923][ T5996] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.033113][ T5996] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.060640][ T5996] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.198226][ T27] audit: type=1326 audit(1780668801.691:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.4.82" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f654739ce59 code=0x0 [ 94.283525][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.318840][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.390580][ T742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.415240][ T742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.582853][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 94.600143][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 94.619984][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 94.633176][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 94.684945][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 94.723008][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 94.747362][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 94.770812][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 94.824945][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.38'. [ 94.911208][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 94.922054][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 94.987404][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 95.008853][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 95.046254][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 95.064196][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 95.436149][ T5808] libceph: connect (1)[c::]:6789 error -101 [ 95.442567][ T6231] ceph: No mds server is up or the cluster is laggy [ 95.442681][ T6227] ceph: No mds server is up or the cluster is laggy [ 95.465663][ T5808] libceph: mon0 (1)[c::]:6789 connect error [ 95.468686][ T6235] ceph: No mds server is up or the cluster is laggy [ 97.808009][ T6308] loop4: detected capacity change from 0 to 32768 [ 97.962995][ T6308] JBD2: Ignoring recovery information on journal [ 98.073068][ T6308] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 98.350116][ T27] audit: type=1800 audit(1780668805.831:4): pid=6338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.101" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 98.401088][ T6342] loop5: detected capacity change from 0 to 256 [ 98.428971][ T27] audit: type=1800 audit(1780668805.841:5): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.101" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 98.524020][ T6342] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4f516b14, utbl_chksum : 0xe619d30d) [ 98.616050][ T5828] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.732772][ T6308] syz.4.101 (6308) used greatest stack depth: 18512 bytes left [ 98.810474][ T5828] usb 3-1: Using ep0 maxpacket: 32 [ 98.828601][ T5828] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.862624][ T5828] usb 3-1: config 0 has no interfaces? [ 98.879409][ T5828] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 98.920563][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.936664][ T5877] ocfs2: Unmounting device (7,4) on (node local) [ 98.971767][ T5828] usb 3-1: config 0 descriptor?? [ 99.722638][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.829170][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.939096][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.093510][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.187520][ T6382] netlink: 'syz.1.115': attribute type 1 has an invalid length. [ 100.353925][ T6382] ip6gretap1: entered promiscuous mode [ 100.359699][ T6382] ip6gretap1: entered allmulticast mode [ 100.371719][ T6382] bond2: (slave ip6gretap1): making interface the new active one [ 100.382349][ T6382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 100.392021][ T6382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 100.412345][ T6382] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 100.768688][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.788289][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.810038][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.818481][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.830391][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 100.840815][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.031731][ T6390] lo speed is unknown, defaulting to 1000 [ 101.046620][ T6396] netlink: 164 bytes leftover after parsing attributes in process `syz.4.117'. [ 101.205999][ T6398] syz_tun: entered allmulticast mode [ 101.352547][ T9] usb 3-1: USB disconnect, device number 2 [ 101.663579][ T6408] loop1: detected capacity change from 0 to 1764 [ 101.718605][ T6408] ISOFS: Unable to identify CD-ROM format. [ 102.614922][ T59] hsr_slave_0: left promiscuous mode [ 102.645170][ T59] hsr_slave_1: left promiscuous mode [ 102.667300][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.714978][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.734523][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.767409][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.802563][ T59] bridge_slave_1: left allmulticast mode [ 102.816348][ T59] bridge_slave_1: left promiscuous mode [ 102.822141][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.843328][ T59] bridge_slave_0: left allmulticast mode [ 102.859835][ T59] bridge_slave_0: left promiscuous mode [ 102.870135][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.899244][ T5775] Bluetooth: hci2: command tx timeout [ 102.959250][ T59] veth1_macvtap: left promiscuous mode [ 102.964830][ T59] veth0_macvtap: left promiscuous mode [ 102.985603][ T59] veth1_vlan: left promiscuous mode [ 103.013152][ T59] veth0_vlan: left promiscuous mode [ 103.283812][ T6449] loop4: detected capacity change from 0 to 512 [ 103.411358][ T6449] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.132: iget: bad extra_isize 50264 (inode size 256) [ 103.501036][ T6449] EXT4-fs (loop4): Remounting filesystem read-only [ 103.550945][ T6449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.689826][ T5877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.694273][ T6451] loop1: detected capacity change from 0 to 32768 [ 103.799223][ T6451] JBD2: Ignoring recovery information on journal [ 103.873284][ T6451] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 103.945692][ T787] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.025506][ T27] audit: type=1800 audit(1780669067.506:6): pid=6451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.133" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 104.063975][ T27] audit: type=1800 audit(1780669067.546:7): pid=6451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.133" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 104.181018][ T787] usb 3-1: unable to get BOS descriptor or descriptor too short [ 104.213928][ T787] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 104.248198][ T787] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 104.263618][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.296050][ T787] usb 3-1: Product: syz [ 104.300270][ T787] usb 3-1: Manufacturer: syz [ 104.322465][ T787] usb 3-1: SerialNumber: syz [ 104.464280][ T59] team0 (unregistering): Port device team_slave_1 removed [ 104.473594][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 104.531968][ T59] team0 (unregistering): Port device team_slave_0 removed [ 104.593491][ T787] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 104.635180][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.742550][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.976390][ T5775] Bluetooth: hci2: command tx timeout [ 105.102694][ T59] bond0 (unregistering): Released all slaves [ 105.198954][ T6390] chnl_net:caif_netlink_parms(): no params data found [ 105.219893][ T6464] netlink: 'syz.4.137': attribute type 1 has an invalid length. [ 105.255159][ T6468] netlink: 'syz.4.137': attribute type 10 has an invalid length. [ 105.286831][ T6468] netlink: 40 bytes leftover after parsing attributes in process `syz.4.137'. [ 105.300523][ T6468] dummy0: entered promiscuous mode [ 105.321673][ T6472] ip6tnl1: entered allmulticast mode [ 105.343648][ T787] usb 3-1: invalid uac2 rates [ 105.363962][ T787] usb 3-1: invalid uac2 rates [ 105.555329][ T787] usb 3-1: failed to enable PITCH for EP 0x82 [ 105.593305][ T6390] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.615627][ T787] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 105.624288][ T787] usb 3-1: clock source 0 is not valid, cannot use [ 105.637993][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.645246][ T6390] bridge_slave_0: entered allmulticast mode [ 105.678518][ T787] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 105.702822][ T6390] bridge_slave_0: entered promiscuous mode [ 105.708961][ T787] usb 3-1: 2:1: cannot set freq 1342912 (v2/v3): err -71 [ 105.735890][ T6390] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.743061][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.793738][ T6390] bridge_slave_1: entered allmulticast mode [ 105.826918][ T6390] bridge_slave_1: entered promiscuous mode [ 105.865705][ T787] usb 3-1: USB disconnect, device number 3 [ 105.966862][ T5766] udevd[5766]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.007039][ T6390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.061879][ T6390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.219482][ T6390] team0: Port device team_slave_0 added [ 106.231669][ T6390] team0: Port device team_slave_1 added [ 106.301662][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.333580][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.413795][ T6390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.467702][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.474708][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.524666][ T6390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.597593][ T6390] hsr_slave_0: entered promiscuous mode [ 106.604833][ T6390] hsr_slave_1: entered promiscuous mode [ 106.978035][ T6390] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 107.018988][ T6390] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 107.047130][ T5775] Bluetooth: hci2: command tx timeout [ 107.050860][ T6390] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 107.086522][ T6390] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 107.228074][ T6509] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.277599][ T6390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.327967][ T6390] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.452942][ T1316] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.460159][ T1316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.482183][ T1316] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.489412][ T1316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.630669][ T6390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.673351][ T6526] loop4: detected capacity change from 0 to 512 [ 107.753579][ T6526] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.147: inode has both inline data and extents flags [ 107.791377][ T6526] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.147: couldn't read orphan inode 15 (err -117) [ 107.811014][ T6526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.122839][ T6537] loop2: detected capacity change from 0 to 1024 [ 108.275318][ T5773] syz_tun (unregistering): left allmulticast mode [ 108.313061][ T6537] Bluetooth: MGMT ver 1.22 [ 108.329953][ T5877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.376781][ T6390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.540571][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.628228][ T6547] bond1: entered promiscuous mode [ 108.699560][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.732077][ T6547] macvlan2: entered promiscuous mode [ 108.745844][ T6547] macvlan2: entered allmulticast mode [ 108.753414][ T6547] bond1: (slave macvlan2): Opening slave failed [ 108.860228][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.020125][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.125832][ T5775] Bluetooth: hci2: command tx timeout [ 109.443042][ T6390] veth0_vlan: entered promiscuous mode [ 109.492575][ T6390] veth1_vlan: entered promiscuous mode [ 109.649735][ T6390] veth0_macvtap: entered promiscuous mode [ 109.709027][ T6390] veth1_macvtap: entered promiscuous mode [ 109.901717][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.912535][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.922899][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.931565][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.939504][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 109.948484][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.950434][ T59] bond2: (slave ip6gretap1): Releasing active interface [ 110.024606][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.045473][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.055340][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.066373][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.080656][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.091861][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.104279][ T6390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.158397][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.205522][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.227455][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.255624][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.269044][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.280481][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.297409][ T6390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.355147][ T6390] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.386751][ T6390] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.429199][ T6390] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.442425][ T6390] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.591701][ T6579] lo speed is unknown, defaulting to 1000 [ 110.716225][ T59] bond1: (slave xfrm1): Releasing backup interface [ 110.734538][ T59] bond1: Destroying bond [ 111.035280][ T59] bond1 (unregistering): Released all slaves [ 111.254083][ T4502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.271781][ T4502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.356509][ T1316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.365041][ T1316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.710835][ T6579] chnl_net:caif_netlink_parms(): no params data found [ 112.005866][ T5775] Bluetooth: hci0: command tx timeout Pþÿÿÿ- ÿ [ 112.154259][ T6579] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.203733][ T6579] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.215179][ T6579] bridge_slave_0: entered allmulticast mode [ 112.276512][ T6579] bridge_slave_0: entered promiscuous mode [ 112.322037][ T6579] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.372140][ T6579] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.395653][ T6579] bridge_slave_1: entered allmulticast mode [ 112.414983][ T6579] bridge_slave_1: entered promiscuous mode [ 112.555682][ T59] hsr_slave_0: left promiscuous mode [ 112.585702][ T59] hsr_slave_1: left promiscuous mode [ 112.601039][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.616621][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.633862][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.658999][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.711249][ T59] bridge_slave_1: left allmulticast mode [ 112.756351][ T59] bridge_slave_1: left promiscuous mode [ 112.769074][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.792889][ T59] bridge_slave_0: left allmulticast mode [ 112.814357][ T59] bridge_slave_0: left promiscuous mode [ 112.831640][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.897723][ T59] veth1_macvtap: left promiscuous mode [ 112.903490][ T59] veth0_macvtap: left promiscuous mode [ 112.927822][ T59] veth1_vlan: left promiscuous mode [ 112.933179][ T59] veth0_vlan: left promiscuous mode [ 113.077072][ T5829] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 113.174033][ T59] bond2 (unregistering): Released all slaves [ 113.289746][ T5829] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 113.304061][ T5829] usb 3-1: config 0 has no interface number 0 [ 113.311888][ T5829] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 113.326108][ T5829] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 113.335336][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.346056][ T5829] usb 3-1: Product: syz [ 113.350255][ T5829] usb 3-1: Manufacturer: syz [ 113.354874][ T5829] usb 3-1: SerialNumber: syz [ 113.365008][ T5829] usb 3-1: config 0 descriptor?? [ 113.387992][ T6662] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.682253][ T59] team0 (unregistering): Port device team_slave_1 removed [ 113.722181][ T59] team0 (unregistering): Port device team_slave_0 removed [ 113.763009][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.807629][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.085902][ T5775] Bluetooth: hci0: command tx timeout [ 114.197754][ T59] bond0 (unregistering): Released all slaves [ 114.390906][ T5829] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 1a:0d:11:d1:c5:72 [ 114.390948][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 114.392582][ T6676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.178'. [ 114.499426][ T6677] bridge1: port 1(vlan2) entered blocking state [ 114.546249][ T6677] bridge1: port 1(vlan2) entered disabled state [ 114.552684][ T6677] vlan2: entered allmulticast mode [ 114.563957][ T6677] erspan0: entered allmulticast mode [ 114.571380][ T6677] vlan2: entered promiscuous mode [ 114.581518][ T6677] erspan0: entered promiscuous mode [ 114.609149][ T6579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.638336][ T6579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.781862][ T6579] team0: Port device team_slave_0 added [ 114.804671][ T6579] team0: Port device team_slave_1 added [ 114.918073][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.945208][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.025061][ T6579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.115983][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.124806][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.160808][ T6579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.290508][ T6579] hsr_slave_0: entered promiscuous mode [ 115.308322][ T6579] hsr_slave_1: entered promiscuous mode [ 115.315955][ T6579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.831251][ T5811] usb 3-1: USB disconnect, device number 4 [ 115.864452][ T6579] Cannot create hsr debugfs directory [ 115.881141][ T5811] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 116.166060][ T5775] Bluetooth: hci0: command tx timeout [ 116.317897][ T6691] syz.6.182 (6691) used greatest stack depth: 16872 bytes left [ 116.448844][ T5829] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.607307][ T6579] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 116.623128][ T6579] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 116.638857][ T6579] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 116.655731][ T6579] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 116.665753][ T5829] usb 5-1: Using ep0 maxpacket: 8 [ 116.677599][ T5829] usb 5-1: config 0 has no interfaces? [ 116.683578][ T5829] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 116.694000][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.733554][ T5829] usb 5-1: config 0 descriptor?? [ 116.960503][ T6579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.021887][ T5829] usb 5-1: USB disconnect, device number 2 [ 117.050605][ T6719] loop2: detected capacity change from 0 to 256 [ 117.087749][ T6579] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.139219][ T742] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.146387][ T742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.187370][ T742] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.194530][ T742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.202320][ T6719] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 117.724589][ T6579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.771195][ T6743] loop4: detected capacity change from 0 to 512 [ 117.844498][ T6743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.955012][ T6743] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.045005][ T27] audit: type=1800 audit(1780669081.526:8): pid=6743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.190" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 118.175287][ T5877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.252724][ T5775] Bluetooth: hci0: command tx timeout [ 118.763962][ T6579] veth0_vlan: entered promiscuous mode [ 118.800874][ T6579] veth1_vlan: entered promiscuous mode [ 118.923746][ T6579] veth0_macvtap: entered promiscuous mode [ 118.948261][ T6579] veth1_macvtap: entered promiscuous mode [ 119.001733][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.032919][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.063395][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.095790][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.130484][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.157646][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.205662][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.261362][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.324558][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.369048][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.389763][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.424927][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.454319][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.504546][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.612702][ T6579] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.638707][ T6579] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.656546][ T6579] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.665457][ T6579] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.908030][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.931208][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.944852][ T4502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.981880][ T4502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.131878][ T6821] loop7: detected capacity change from 0 to 128 [ 123.611097][ T27] audit: type=1326 audit(1780669087.086:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.6.221" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f19f9ce59 code=0x0 [ 123.787075][ T6904] netlink: 'syz.7.223': attribute type 2 has an invalid length. [ 123.814287][ T6904] netlink: 'syz.7.223': attribute type 1 has an invalid length. [ 124.235222][ T6912] syz.4.225 uses obsolete (PF_INET,SOCK_PACKET) [ 126.532156][ T6946] loop2: detected capacity change from 0 to 7 [ 126.547680][ T6948] loop7: detected capacity change from 0 to 512 [ 126.575629][ T6946] Dev loop2: unable to read RDB block 7 [ 126.586270][ T6946] loop2: unable to read partition table [ 126.599483][ T6948] EXT4-fs error (device loop7): ext4_orphan_get:1404: inode #15: comm syz.7.233: inode has both inline data and extents flags [ 126.624552][ T6946] loop2: partition table beyond EOD, truncated [ 126.646550][ T6948] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.233: couldn't read orphan inode 15 (err -117) [ 126.665945][ T6946] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 126.704384][ T6948] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.013879][ T6579] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.212617][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.7.236'. [ 127.399727][ T6972] team_slave_0: entered promiscuous mode [ 127.405887][ T6972] team_slave_1: entered promiscuous mode [ 127.460796][ T6972] geneve2: entered promiscuous mode [ 127.485572][ T6972] geneve2: entered allmulticast mode [ 127.495561][ T5811] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.593737][ T6969] team_slave_0: left promiscuous mode [ 127.599676][ T6969] team_slave_1: left promiscuous mode [ 127.726790][ T5811] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 127.745666][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.754175][ T5811] usb 3-1: Product: syz [ 127.775575][ T5811] usb 3-1: Manufacturer: syz [ 127.780237][ T5811] usb 3-1: SerialNumber: syz [ 127.823774][ T5811] usb 3-1: config 0 descriptor?? [ 127.925794][ T6989] loop7: detected capacity change from 0 to 512 [ 127.957145][ T6989] EXT4-fs (loop7): 1 truncate cleaned up [ 127.970916][ T6989] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.197825][ T6989] EXT4-fs error (device loop7): xattr_find_entry:337: inode #12: comm syz.7.244: corrupted xattr entries [ 128.263968][ T5811] usb 3-1: Firmware: major: 24, minor: 33, hardware type: HULUSB (4) [ 128.352585][ T6579] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.478861][ T5811] usb 3-1: failed to fetch extended address, random address set [ 128.596294][ T7006] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 128.602893][ T5811] usb 3-1: USB disconnect, device number 5 [ 129.656556][ T7037] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.370683][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.7.259'. [ 130.399848][ T7050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.535083][ T7050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.855256][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.7.262'. [ 131.671007][ T7083] loop7: detected capacity change from 0 to 512 [ 131.699517][ T7083] EXT4-fs: inline encryption not supported [ 131.737932][ T7083] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 131.775801][ T7083] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 131.791192][ T7085] netlink: 'syz.4.270': attribute type 11 has an invalid length. [ 131.814543][ T7083] EXT4-fs (loop7): 1 truncate cleaned up [ 131.835116][ T7083] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.003503][ T7093] EXT4-fs (loop7): shut down requested (2) [ 132.248746][ T6579] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.529515][ T7107] netlink: 228 bytes leftover after parsing attributes in process `syz.4.275'. [ 132.704661][ T7113] loop4: detected capacity change from 0 to 128 [ 132.715299][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.7.277'. [ 132.769575][ T7113] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.840125][ T7113] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.974137][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.981376][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.999765][ T7113] EXT4-fs (loop4): shut down requested (1) [ 133.027728][ T7113] fscrypt (loop4, inode 12): Error -5 getting encryption context [ 133.683377][ T5877] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.866546][ T7179] ip6gre1: entered promiscuous mode [ 134.875702][ T7179] ip6gre1: entered allmulticast mode [ 135.165613][ T788] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.229481][ T7189] loop7: detected capacity change from 0 to 1764 [ 138.305218][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 138.496285][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 138.514924][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 138.545690][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.584560][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 138.613746][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 138.645648][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 138.671173][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 138.705511][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.746989][ T9] usb 8-1: config 0 descriptor?? [ 138.822446][ T5775] Bluetooth: hci4: urb ffff8880246fa500 submission failed (90) [ 139.083125][ T9] usb 8-1: USB disconnect, device number 2 [ 139.897852][ T7286] warning: `syz.7.318' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 139.982447][ T7286] netlink: 'syz.7.318': attribute type 11 has an invalid length. [ 140.239044][ T7299] syz_tun: entered allmulticast mode [ 142.485843][ T5775] Bluetooth: hci3: command 0x0401 tx timeout [ 143.048795][ T7370] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.057298][ T7370] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.086776][ T7370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.200611][ T7370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.444703][ T7394] loop2: detected capacity change from 0 to 32768 [ 144.491649][ T7394] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.347 (7394) [ 144.560199][ T7394] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.570446][ T5767] udevd[5767]: incorrect btrfs checksum on /dev/loop2 [ 144.575020][ T7394] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 144.587351][ T7394] BTRFS error (device loop2): superblock checksum mismatch [ 144.601711][ T7394] BTRFS error (device loop2): open_ctree failed: -22 [ 144.689894][ T5767] udevd[5767]: incorrect btrfs checksum on /dev/loop2 [ 144.804903][ T7370] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.816704][ T7370] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.828773][ T7370] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.847754][ T7370] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.259410][ T7404] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 146.573394][ T7407] loop2: detected capacity change from 0 to 40427 [ 146.622151][ T7407] F2FS-fs (loop2): invalid crc value [ 146.643137][ T7407] F2FS-fs (loop2): Found nat_bits in checkpoint [ 146.822390][ T7407] F2FS-fs (loop2): Start checkpoint disabled! [ 146.895978][ T7407] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 147.472850][ T742] kworker/u4:5: attempt to access beyond end of device [ 147.472850][ T742] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 147.512592][ T742] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 147.540724][ T742] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 150.275496][ T5808] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 150.475504][ T5808] usb 8-1: Using ep0 maxpacket: 32 [ 150.483601][ T5808] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.505952][ T5808] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.539194][ T5808] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 150.539220][ T5808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.544232][ T5808] usb 8-1: config 0 descriptor?? [ 150.721325][ T7542] mmap: syz.6.379 (7542) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 150.968966][ T5808] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 150.982863][ T5808] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 151.168634][ T5808] ft260 0003:0403:6030.0001: chip code: 0000 0000 [ 151.370085][ T5808] ft260 0003:0403:6030.0001: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0 [ 151.565542][ T7557] netlink: 'syz.6.383': attribute type 1 has an invalid length. [ 151.573738][ T5808] ft260 0003:0403:6030.0001: failed to retrieve status: -32, no wakeup [ 151.633482][ T7557] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.641544][ T7561] bond1: entered promiscuous mode [ 151.695988][ T7557] bond1: (slave dummy0): making interface the new active one [ 151.704569][ T7557] dummy0: entered promiscuous mode [ 151.712524][ T7557] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 151.742947][ T7556] bond1: left promiscuous mode [ 151.748552][ T7556] dummy0: left promiscuous mode [ 151.898959][ T7564] loop4: detected capacity change from 0 to 8192 [ 151.900343][ T7519] ft260 0003:0403:6030.0001: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 152.014940][ T7566] netlink: 'syz.6.386': attribute type 2 has an invalid length. [ 152.114736][ T7568] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 152.145744][ T7519] ft260 0003:0403:6030.0001: failed to reset I2C controller: -108 [ 152.153653][ T7519] ft260 0003:0403:6030.0001: ft260_i2c_write: failed with -38 [ 152.286635][ T5808] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 152.728424][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 153.146890][ T5828] usb 8-1: USB disconnect, device number 3 [ 155.703168][ T7666] netlink: 216 bytes leftover after parsing attributes in process `syz.7.405'. [ 155.735505][ T7666] netlink: 40 bytes leftover after parsing attributes in process `syz.7.405'. [ 158.063326][ T7718] loop4: detected capacity change from 0 to 512 [ 158.086751][ T7718] EXT4-fs (loop4): invalid journal inode [ 158.110850][ T7718] EXT4-fs (loop4): can't get journal size [ 158.150883][ T7718] EXT4-fs (loop4): 1 truncate cleaned up [ 158.188295][ T7718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.532786][ T5877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.582928][ T7716] loop7: detected capacity change from 0 to 32768 [ 158.753709][ T7716] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 159.104804][ T7746] loop6: detected capacity change from 0 to 2048 [ 159.200100][ T7716] XFS (loop7): Ending clean mount [ 159.298475][ T7746] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.323529][ T7716] XFS (loop7): Quotacheck needed: Please wait. [ 159.559448][ T7716] XFS (loop7): Quotacheck: Done. [ 159.831009][ T7774] loop4: detected capacity change from 0 to 2048 [ 159.916941][ T7774] EXT4-fs error (device loop4): ext4_ext_check_inode:530: inode #2: comm syz.4.427: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 159.939214][ T7774] EXT4-fs (loop4): get root inode failed [ 159.944902][ T7774] EXT4-fs (loop4): mount failed [ 160.022330][ T6390] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.082003][ T27] audit: type=1326 audit(1780669123.566:10): auid=4294967295 uid=3171839 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f654739ce59 code=0x0 [ 160.179959][ T6579] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 161.016951][ T7810] 0x000000000008-0x00000000000c : "" [ 161.106389][ T7810] ftl_cs: FTL header corrupt! [ 162.094478][ T7852] capability: warning: `syz.2.441' uses deprecated v2 capabilities in a way that may be insecure [ 163.530687][ T7874] loop7: detected capacity change from 0 to 32768 [ 163.592426][ T7874] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 163.710528][ T7874] XFS (loop7): Ending clean mount [ 164.105103][ T6579] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 164.353789][ T7920] loop2: detected capacity change from 0 to 1024 [ 164.396478][ T7920] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.517069][ T7920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.897496][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.457'. [ 164.981676][ T7934] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.989620][ T7934] IPv6: NLM_F_CREATE should be set when creating new route [ 165.026137][ T7934] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.033398][ T7934] IPv6: NLM_F_CREATE should be set when creating new route [ 165.355143][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.587964][ T7957] loop6: detected capacity change from 0 to 256 [ 165.602132][ T7957] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.630559][ T7957] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.347596][ T7978] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 167.472133][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.496149][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.510626][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.555794][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.579052][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 167.589100][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.736177][ T7986] lo speed is unknown, defaulting to 1000 [ 168.956994][ T11] hsr_slave_0: left promiscuous mode [ 168.985655][ T11] hsr_slave_1: left promiscuous mode [ 168.997184][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.026444][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.048311][ T8029] 0x000000000001-0x000000020001 : "" [ 169.048372][ T11] bridge_slave_1: left allmulticast mode [ 169.053629][ T8029] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1ffff [ 169.079965][ T11] bridge_slave_1: left promiscuous mode [ 169.095813][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.118733][ T11] bridge_slave_0: left allmulticast mode [ 169.130544][ T11] bridge_slave_0: left promiscuous mode [ 169.137701][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.194098][ T8029] ftl_cs: FTL header corrupt! [ 169.268050][ T8038] loop7: detected capacity change from 0 to 128 [ 169.342220][ T8038] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 169.352105][ T8038] System zones: 1-3, 19-19, 35-36 [ 169.426896][ T8038] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 169.461145][ T8038] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 169.636433][ T8038] EXT4-fs warning (device loop7): verify_group_input:151: Cannot add at group 4294967075 (only 1 groups) [ 169.702682][ T5086] Bluetooth: hci2: command tx timeout [ 169.763679][ T6579] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.801996][ T11] bond1 (unregistering): (slave dummy0): Releasing active interface [ 169.852091][ T11] bond1 (unregistering): Released all slaves [ 169.863258][ T8046] loop7: detected capacity change from 0 to 1024 [ 169.979302][ T8046] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.134711][ T8046] EXT4-fs error (device loop7): __ext4_get_inode_loc:4496: comm syz.7.481: Invalid inode table block 0 in block_group 0 [ 170.186174][ T8050] loop4: detected capacity change from 0 to 256 [ 170.328845][ T6579] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.357973][ T8050] FAT-fs (loop4): Directory bread(block 64) failed [ 170.364561][ T8050] FAT-fs (loop4): Directory bread(block 65) failed [ 170.376320][ T8050] FAT-fs (loop4): Directory bread(block 66) failed [ 170.382895][ T8050] FAT-fs (loop4): Directory bread(block 67) failed [ 170.446814][ T8050] FAT-fs (loop4): Directory bread(block 68) failed [ 170.453410][ T8050] FAT-fs (loop4): Directory bread(block 69) failed [ 170.520444][ T8050] FAT-fs (loop4): Directory bread(block 70) failed [ 170.571798][ T8050] FAT-fs (loop4): Directory bread(block 71) failed [ 170.598990][ T8050] FAT-fs (loop4): Directory bread(block 72) failed [ 170.652776][ T8050] FAT-fs (loop4): Directory bread(block 73) failed [ 171.626538][ T11] team0 (unregistering): Port device team_slave_1 removed [ 171.754328][ T8068] loop7: detected capacity change from 0 to 32768 [ 171.766868][ T5086] Bluetooth: hci2: command tx timeout [ 171.820114][ T11] team0 (unregistering): Port device team_slave_0 removed [ 171.843437][ T8068] JBD2: Ignoring recovery information on journal [ 172.080747][ T8068] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 172.230925][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.405099][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.125187][ T6579] ocfs2: Unmounting device (7,7) on (node local) [ 173.139054][ T11] bond0 (unregistering): Released all slaves [ 173.318560][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'. [ 173.386476][ T8080] syz_tun (unregistering): left allmulticast mode [ 173.467480][ T7986] chnl_net:caif_netlink_parms(): no params data found [ 173.743538][ T7986] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.771541][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.786884][ T7986] bridge_slave_0: entered allmulticast mode [ 173.814612][ T7986] bridge_slave_0: entered promiscuous mode [ 173.840906][ T7986] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.845620][ T5086] Bluetooth: hci2: command tx timeout [ 173.862832][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.935884][ T7986] bridge_slave_1: entered allmulticast mode [ 173.962313][ T7986] bridge_slave_1: entered promiscuous mode [ 174.394277][ T7986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.548603][ T7986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.731670][ T7986] team0: Port device team_slave_0 added [ 174.770769][ T7986] team0: Port device team_slave_1 added [ 174.880772][ T7986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.896771][ T7986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.928636][ T7986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.970551][ T7986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.983294][ T7986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.071572][ T7986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.155484][ T7986] hsr_slave_0: entered promiscuous mode [ 175.161819][ T7986] hsr_slave_1: entered promiscuous mode [ 175.458471][ T7986] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 175.470552][ T7986] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 175.494160][ T7986] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 175.521142][ T7986] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 175.802685][ T7986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.872329][ T7986] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.904539][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.911752][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.925610][ T5086] Bluetooth: hci2: command tx timeout [ 175.961814][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.969020][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.714532][ T8168] sg_write: data in/out 952632161/1 bytes for SCSI command 0x70-- guessing data in; [ 176.714532][ T8168] program syz.4.508 not setting count and/or reply_len properly [ 176.733839][ T7986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.587377][ T7986] veth0_vlan: entered promiscuous mode [ 177.620591][ T7986] veth1_vlan: entered promiscuous mode [ 177.645217][ T8193] tipc: Started in network mode [ 177.651912][ T8193] tipc: Node identity 2d302c00000000002e2e, cluster identity 4711 [ 177.718048][ T7986] veth0_macvtap: entered promiscuous mode [ 177.788073][ T7986] veth1_macvtap: entered promiscuous mode [ 177.851957][ T7986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.902960][ T7986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.924680][ T7986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.937889][ T7986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.947810][ T7986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.965651][ T7986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.987040][ T7986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.015951][ T7986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.050291][ T7986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.083982][ T7986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.107211][ T7986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.137214][ T7986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.181696][ T7986] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.194420][ T7986] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.210646][ T7986] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.220689][ T7986] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.363190][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.388725][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.467196][ T1316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.484664][ T1316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.039017][ T8234] sg_write: data in/out 952632161/1 bytes for SCSI command 0x70-- guessing data in; [ 179.039017][ T8234] program syz.7.521 not setting count and/or reply_len properly [ 179.333341][ T8241] lo speed is unknown, defaulting to 1000 [ 180.428018][ T8270] overlayfs: upper fs does not support file handles, falling back to index=off. [ 183.924298][ T8354] lo speed is unknown, defaulting to 1000 [ 187.623662][ T8458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.567'. [ 188.475908][ T8490] ref_ctr_offset mismatch. inode: 0x35a offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 188.535851][ T5811] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 188.726961][ T5811] usb 5-1: Using ep0 maxpacket: 32 [ 188.741226][ T5811] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 188.757572][ T5811] usb 5-1: config 0 has no interface number 0 [ 188.779207][ T5811] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 188.805103][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.834091][ T5811] usb 5-1: Product: syz [ 188.850083][ T5811] usb 5-1: Manufacturer: syz [ 188.874690][ T5811] usb 5-1: SerialNumber: syz [ 188.906602][ T5811] usb 5-1: config 0 descriptor?? [ 188.930244][ T5811] smsc95xx v2.0.0 [ 189.332493][ T8518] loop8: detected capacity change from 0 to 128 [ 189.342164][ T5811] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 189.381562][ T5811] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 189.405762][ T5767] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 189.464850][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.7.582'. [ 189.671254][ T8518] loop8: detected capacity change from 0 to 32768 [ 189.738810][ T8518] Dev loop8 SGI disklabel: csum bad, label corrupted [ 190.271142][ T8535] loop8: detected capacity change from 0 to 2048 [ 190.328974][ T8540] netlink: 64 bytes leftover after parsing attributes in process `syz.2.587'. [ 190.365347][ T8535] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.416354][ T8540] syzkaller1: entered promiscuous mode [ 190.435228][ T8540] syzkaller1: entered allmulticast mode [ 190.630374][ T5811] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 190.683615][ T5811] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 190.729957][ T5811] usb 5-1: USB disconnect, device number 4 [ 190.904515][ T8550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'. [ 191.417795][ T8562] loop4: detected capacity change from 0 to 512 [ 191.484710][ T8562] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.591: invalid indirect mapped block 4294967295 (level 1) [ 191.569796][ T8562] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.591: invalid indirect mapped block 4294967295 (level 1) [ 191.599470][ T8562] EXT4-fs (loop4): 2 truncates cleaned up [ 191.616853][ T8562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.715586][ T8565] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 192.718848][ T8581] netlink: 32 bytes leftover after parsing attributes in process `syz.8.594'. [ 192.754892][ T27] audit: type=1800 audit(1780669156.226:11): pid=8562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.591" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 192.904146][ T5877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.109097][ T8591] loop4: detected capacity change from 0 to 736 [ 193.953828][ T27] audit: type=1326 audit(1780669157.436:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.7.595" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa9b9ce59 code=0x7ffc0000 [ 194.060479][ T27] audit: type=1326 audit(1780669157.476:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.7.595" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa9b9ce59 code=0x7ffc0000 [ 194.178388][ T8620] netlink: 64467 bytes leftover after parsing attributes in process `syz.4.602'. [ 194.210002][ T27] audit: type=1326 audit(1780669157.476:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.7.595" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa9b9ce59 code=0x7ffc0000 [ 194.302341][ T27] audit: type=1326 audit(1780669157.486:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.7.595" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa9b9ce59 code=0x7ffc0000 [ 194.415143][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.425252][ T27] audit: type=1326 audit(1780669157.486:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.7.595" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f2fa9b9ce59 code=0x7ffc0000 [ 194.440523][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.453796][ T8631] netlink: 'syz.4.605': attribute type 1 has an invalid length. [ 194.504655][ T27] audit: type=1326 audit(1780669157.486:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.7.595" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa9b9ce59 code=0x7ffc0000 [ 194.583752][ T27] audit: type=1326 audit(1780669157.486:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.7.595" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa9b9ce59 code=0x7ffc0000 [ 194.624049][ T8631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.653819][ T27] audit: type=1326 audit(1780669157.486:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.7.595" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2fa9b9ce59 code=0x7ffc0000 [ 194.721612][ T8636] vlan3: entered allmulticast mode [ 194.740311][ T27] audit: type=1326 audit(1780669157.486:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.7.595" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2fa9b9ce59 code=0x7ffc0000 [ 194.809690][ T8636] veth0_to_bond: entered allmulticast mode [ 194.849845][ T8636] bond1: (slave vlan3): making interface the new active one [ 194.882909][ T8636] bond1: (slave vlan3): Enslaving as an active interface with an up link [ 195.192715][ T8656] netlink: 'syz.4.610': attribute type 1 has an invalid length. [ 195.302522][ T8656] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.405032][ T8664] vlan4: entered allmulticast mode [ 195.455709][ T8664] bond2: entered allmulticast mode [ 195.630338][ T8656] bond2: (slave geneve2): making interface the new active one [ 195.671840][ T8656] geneve2: entered allmulticast mode [ 195.687959][ T8656] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 196.485722][ T5775] Bluetooth: hci3: command tx timeout [ 196.626694][ T8702] loop7: detected capacity change from 0 to 512 [ 196.708048][ T8702] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 196.785622][ T8702] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 196.820386][ T8702] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.620: Corrupt directory, running e2fsck is recommended [ 196.838725][ T8702] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 196.863468][ T8702] EXT4-fs error (device loop7): ext4_iget_extra_inode:4739: inode #15: comm syz.7.620: corrupted in-inode xattr: e_name out of bounds [ 196.911416][ T8702] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.620: couldn't read orphan inode 15 (err -117) [ 196.955338][ T8702] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.152177][ T6579] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.832434][ T8745] loop4: detected capacity change from 0 to 8192 [ 197.879099][ T8745] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.098302][ T8755] lo speed is unknown, defaulting to 1000 [ 198.203697][ T8761] loop8: detected capacity change from 0 to 2048 [ 198.245690][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.281577][ T8761] loop8: p1 p2 p3 [ 198.281577][ T8761] p1: [ 198.297582][ T8761] loop8: p1 size 16779263 extends beyond EOD, truncated [ 198.308339][ T8762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.334858][ T8761] loop8: p2 size 458752 extends beyond EOD, truncated [ 198.365192][ T8761] loop8: p3 start 3036741376 is beyond EOD, truncated [ 198.502133][ T8761] loop2: detected capacity change from 0 to 7 [ 198.531789][ T8761] Dev loop2: unable to read RDB block 7 [ 198.568279][ T8761] loop2: unable to read partition table [ 198.588320][ T8761] loop2: partition table beyond EOD, truncated [ 198.612821][ T8761] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 199.084876][ T788] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 199.156446][ T8780] loop4: detected capacity change from 0 to 128 [ 199.211693][ T8780] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 199.262732][ T8780] System zones: 1-3, 19-19, 35-36 [ 199.293979][ T8780] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.300125][ T788] usb 3-1: Using ep0 maxpacket: 32 [ 199.314163][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.333738][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.343775][ T788] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 199.365464][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.380816][ T8780] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.382311][ T788] usb 3-1: config 0 descriptor?? [ 199.754767][ T5877] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.909130][ T788] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 199.968190][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.8.645'. [ 200.155847][ T8454] usb 3-1: USB disconnect, device number 6 [ 200.257441][ T8815] fido_id[8815]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 200.288067][ T8824] netlink: 168 bytes leftover after parsing attributes in process `syz.8.647'. [ 201.242056][ T8861] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.655'. [ 201.605597][ T5086] Bluetooth: hci1: command 0x0406 tx timeout [ 202.124624][ T8898] trusted_key: syz.2.658 sent an empty control message without MSG_MORE. [ 202.333607][ T8900] loop2: detected capacity change from 0 to 2048 [ 202.387837][ T8900] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.757945][ T8918] (null): rxe_set_mtu: Set mtu to 4096 [ 202.763746][ T8918] lo speed is unknown, defaulting to 1000 [ 202.779631][ T8918] lo speed is unknown, defaulting to 1000 [ 202.798087][ T8918] lo speed is unknown, defaulting to 1000 [ 203.112569][ T8918] infiniband syz0: set active [ 203.117536][ T8454] lo speed is unknown, defaulting to 1000 [ 203.124320][ T8918] infiniband syz0: added lo [ 203.189603][ T8918] RDS/IB: syz0: added [ 203.198660][ T8918] smc: adding ib device syz0 with port count 1 [ 203.204979][ T8918] smc: ib device syz0 port 1 has pnetid [ 203.214044][ T8454] lo speed is unknown, defaulting to 1000 [ 203.230364][ T8918] lo speed is unknown, defaulting to 1000 [ 203.453096][ T8918] lo speed is unknown, defaulting to 1000 [ 203.693348][ T8918] lo speed is unknown, defaulting to 1000 [ 204.175058][ T8918] lo speed is unknown, defaulting to 1000 [ 204.349475][ T8969] dummy0: entered promiscuous mode [ 204.357823][ T8969] dummy0: left promiscuous mode [ 204.571229][ T8977] loop7: detected capacity change from 0 to 512 [ 204.624240][ T8977] EXT4-fs (loop7): orphan cleanup on readonly fs [ 204.710273][ T8977] EXT4-fs (loop7): 1 orphan inode deleted [ 204.793965][ T8977] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 205.115014][ T6579] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.128677][ T8993] loop4: detected capacity change from 0 to 128 [ 205.166670][ T8993] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 205.263850][ T8993] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 205.564681][ T1316] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 206.152574][ T9014] loop4: detected capacity change from 0 to 8 [ 206.189878][ T9015] (null): rxe_set_mtu: Set mtu to 256 [ 206.227805][ T9015] rdma_rxe: rxe_newlink: failed to add lo [ 206.258173][ T9014] SQUASHFS error: lzo decompression failed, data probably corrupt [ 206.267453][ T9014] SQUASHFS error: Failed to read block 0x91: -5 [ 206.274348][ T9014] SQUASHFS error: Unable to read metadata cache entry [8f] [ 206.308352][ T9014] SQUASHFS error: Unable to read inode 0x11f [ 206.509143][ T9026] netlink: 'syz.7.689': attribute type 11 has an invalid length. [ 206.723170][ T9034] loop4: detected capacity change from 0 to 2048 [ 206.784923][ T9034] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 206.803205][ T9034] UDF-fs: Scanning with blocksize 512 failed [ 206.827322][ T9034] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.522755][ T9055] netlink: 'syz.8.697': attribute type 1 has an invalid length. [ 207.867155][ T9063] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.907529][ T9063] bond1: (slave bond2): making interface the new active one [ 207.932558][ T9063] bond1: (slave bond2): Enslaving as an active interface with an up link [ 207.971867][ T9066] netlink: 28 bytes leftover after parsing attributes in process `syz.8.697'. [ 207.997785][ T9066] bond1: entered promiscuous mode [ 208.020947][ T9066] bond2: entered promiscuous mode [ 208.044450][ T9066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.096326][ T9076] netlink: 'syz.7.699': attribute type 4 has an invalid length. [ 208.300064][ T9083] netlink: 4 bytes leftover after parsing attributes in process `syz.8.701'. [ 208.387719][ T9083] nbd: socks must be embedded in a SOCK_ITEM attr [ 208.438604][ T5768] block nbd64: NBD_DISCONNECT [ 208.591598][ T9083] netlink: 4 bytes leftover after parsing attributes in process `syz.8.701'. [ 208.638694][ T9083] nbd: device at index 64 is going down [ 208.848008][ T5924] udevd[5924]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 208.922537][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.707'. [ 210.183424][ T9142] netlink: 'syz.7.716': attribute type 1 has an invalid length. [ 210.286598][ T9142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.388986][ T9142] bond1: (slave geneve2): making interface the new active one [ 210.403410][ T9142] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 210.733168][ T9158] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 210.771393][ T9156] lo speed is unknown, defaulting to 1000 [ 210.970434][ T27] audit: type=1326 audit(1780669174.456:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9168 comm="syz.7.723" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa9b9ce59 code=0x7ffc0000 [ 211.027457][ T27] audit: type=1326 audit(1780669174.486:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9168 comm="syz.7.723" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2fa9b9ce59 code=0x7ffc0000 [ 211.070865][ T27] audit: type=1326 audit(1780669174.486:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9168 comm="syz.7.723" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa9b9ce59 code=0x7ffc0000 [ 211.101113][ T27] audit: type=1326 audit(1780669174.486:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9168 comm="syz.7.723" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa9b9ce59 code=0x7ffc0000 [ 211.144749][ T9156] lo speed is unknown, defaulting to 1000 [ 211.172252][ T27] audit: type=1326 audit(1780669174.486:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9168 comm="syz.7.723" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2fa9b9ce59 code=0x7ffc0000 [ 211.218528][ T27] audit: type=1326 audit(1780669174.486:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9168 comm="syz.7.723" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa9b9ce59 code=0x7ffc0000 [ 211.271883][ T27] audit: type=1326 audit(1780669174.486:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9168 comm="syz.7.723" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2fa9b9ce59 code=0x7ffc0000 [ 211.299852][ T27] audit: type=1326 audit(1780669174.486:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9168 comm="syz.7.723" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa9b9ce59 code=0x7ffc0000 [ 211.327766][ T27] audit: type=1326 audit(1780669174.486:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9168 comm="syz.7.723" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa9b9ce59 code=0x7ffc0000 [ 211.381639][ T27] audit: type=1326 audit(1780669174.486:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9168 comm="syz.7.723" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2fa9b9ce59 code=0x7ffc0000 [ 212.955551][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.731'. [ 213.058179][ T9200] loop7: detected capacity change from 0 to 4096 [ 213.184752][ T9200] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.399027][ T9200] fs-verity: sha512 using implementation "sha512-avx2" [ 214.656317][ T788] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 214.845493][ T788] usb 8-1: Using ep0 maxpacket: 16 [ 214.864582][ T788] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.891513][ T788] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.929714][ T788] usb 8-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 214.961808][ T788] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.000875][ T788] usb 8-1: config 0 descriptor?? [ 215.136193][ T9227] loop4: detected capacity change from 0 to 512 [ 215.203602][ T9227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.269997][ T9227] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.373395][ T5877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.493121][ T788] wacom 0003:056A:0084.0003: unbalanced delimiter at end of report description [ 215.550974][ T788] wacom 0003:056A:0084.0003: parse failed [ 215.571389][ T788] wacom: probe of 0003:056A:0084.0003 failed with error -22 [ 215.764434][ T5809] usb 8-1: USB disconnect, device number 4 [ 215.773004][ T9239] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 215.800038][ T9239] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 216.058211][ T9248] input: syz1 as /devices/virtual/input/input5 [ 216.426271][ T6579] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.733009][ T9265] [ 216.735578][ T9265] ============================= [ 216.740484][ T9265] WARNING: suspicious RCU usage [ 216.745830][ T9265] syzkaller #0 Not tainted [ 216.750264][ T9265] ----------------------------- [ 216.755119][ T9265] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 216.763770][ T9265] [ 216.763770][ T9265] other info that might help us debug this: [ 216.763770][ T9265] [ 216.774103][ T9265] [ 216.774103][ T9265] rcu_scheduler_active = 2, debug_locks = 1 [ 216.782291][ T9265] 1 lock held by syz.4.753/9265: [ 216.787432][ T9265] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x30c/0x1c40 [ 216.796793][ T9265] [ 216.796793][ T9265] stack backtrace: [ 216.802724][ T9265] CPU: 0 PID: 9265 Comm: syz.4.753 Not tainted syzkaller #0 [ 216.810195][ T9265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 216.820257][ T9265] Call Trace: [ 216.823619][ T9265] [ 216.826548][ T9265] dump_stack_lvl+0x18c/0x250 [ 216.831232][ T9265] ? show_regs_print_info+0x20/0x20 [ 216.836432][ T9265] ? load_image+0x420/0x420 [ 216.840937][ T9265] lockdep_rcu_suspicious+0x1e1/0x300 [ 216.846311][ T9265] ieee80211_check_concurrent_iface+0x475/0x950 [ 216.852559][ T9265] ieee80211_open+0xc1/0x200 [ 216.857155][ T9265] __dev_open+0x2cb/0x430 [ 216.861491][ T9265] ? dev_open+0x190/0x190 [ 216.865829][ T9265] __dev_change_flags+0x211/0x6a0 [ 216.870853][ T9265] ? dev_get_flags+0x1c0/0x1c0 [ 216.875613][ T9265] ? mutex_lock_nested+0x20/0x20 [ 216.880561][ T9265] ? apparmor_capable+0x137/0x1a0 [ 216.885587][ T9265] dev_change_flags+0x88/0x1a0 [ 216.890357][ T9265] devinet_ioctl+0x95c/0x1c40 [ 216.895045][ T9265] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 216.900157][ T9265] ? _copy_from_user+0xa5/0xe0 [ 216.904917][ T9265] ? get_user_ifreq+0x12b/0x180 [ 216.909771][ T9265] inet_ioctl+0x42b/0x560 [ 216.914102][ T9265] ? tomoyo_path_number_perm+0x217/0x620 [ 216.919734][ T9265] ? inet_shutdown+0x370/0x370 [ 216.924501][ T9265] ? slab_free_freelist_hook+0x130/0x1a0 [ 216.930133][ T9265] ? tomoyo_path_number_perm+0x500/0x620 [ 216.935763][ T9265] ? __kmem_cache_free+0xba/0x1e0 [ 216.940795][ T9265] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 216.946255][ T9265] sock_do_ioctl+0xfc/0x310 [ 216.950760][ T9265] ? sock_show_fdinfo+0xb0/0xb0 [ 216.955620][ T9265] sock_ioctl+0x5ba/0x7e0 [ 216.959964][ T9265] ? sock_poll+0x3e0/0x3e0 [ 216.964384][ T9265] ? bpf_lsm_file_ioctl+0x9/0x10 [ 216.969691][ T9265] ? security_file_ioctl+0x80/0xa0 [ 216.974796][ T9265] ? sock_poll+0x3e0/0x3e0 [ 216.979210][ T9265] __se_sys_ioctl+0xfd/0x170 [ 216.983800][ T9265] do_syscall_64+0x55/0xb0 [ 216.988212][ T9265] ? clear_bhb_loop+0x40/0x90 [ 216.992882][ T9265] ? clear_bhb_loop+0x40/0x90 [ 216.997552][ T9265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.003445][ T9265] RIP: 0033:0x7f654739ce59 [ 217.007872][ T9265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.027488][ T9265] RSP: 002b:00007f65481ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.035901][ T9265] RAX: ffffffffffffffda RBX: 00007f6547615fa0 RCX: 00007f654739ce59 [ 217.043870][ T9265] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000005 [ 217.051837][ T9265] RBP: 00007f6547432d6f R08: 0000000000000000 R09: 0000000000000000 [ 217.059805][ T9265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.067772][ T9265] R13: 00007f6547616038 R14: 00007f6547615fa0 R15: 00007ffefb513d88 [ 217.075751][ T9265] [ 217.078828][ C0] vkms_vblank_simulate: vblank timer overrun