last executing test programs: 7m25.370515725s ago: executing program 2 (id=31): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0xffffffffa14b4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e96775fb661190a}}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x2, 0x3, 0x0, 0x0, 0x0, 0x10, {0x5, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0xc3000000, 0x100, 0x4000, 0xffffffff, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000002180)='./file0/file0\x00', 0x40) pivot_root(&(0x7f0000002140)='./file0\x00', &(0x7f00000021c0)='./file0/file0\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 7m25.00778104s ago: executing program 2 (id=33): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) close(r0) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8) r5 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) 7m24.771847304s ago: executing program 2 (id=35): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = open(0x0, 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 7m24.600943267s ago: executing program 2 (id=39): socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1e, 0x0, 0x5, 0xef, 0x4}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$inet(0x2b, 0x801, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 7m23.345397938s ago: executing program 2 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') unshare(0x24020400) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 7m22.154847708s ago: executing program 2 (id=56): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000028c0)={0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x3) r4 = socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r1, 0x0, r4}) 7m13.216766955s ago: executing program 0 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x2, 0x1295800, 0x0, 0x0, 0x1000, 0x400, 0x0, 0x0, 0x80, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000b800)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x60, 0x0, 0x5, {{0x1, 0x2b2, 0x0, 0x3, 0x4, 0x0, 0x81, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m12.939897659s ago: executing program 0 (id=111): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0xa, 0x4, 0x4, 0xc}, 0x50) 7m12.816280531s ago: executing program 0 (id=112): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) llistxattr(0x0, 0x0, 0x0) 7m12.546537156s ago: executing program 0 (id=113): getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08000, &(0x7f0000000140)={[{@mblk_io_submit}, {@resuid={'resuid', 0x3d, 0xee00}}]}, 0xfc, 0x474, &(0x7f00000003c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x2000000000000001, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0xffffffffbfffffff, 0x6, 0xffffffffffff592c, 0x6, 0x4, 0x6288f666, 0x0, 0xc000}}}, 0x78) open(0x0, 0x0, 0x164) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4, 0x0, 0x7ffffffffffffffe, 0x38db0863, 0x0, 0x0, 0xd, 0x9d}) lchown(0x0, 0x0, 0x0) 7m11.67878856s ago: executing program 0 (id=114): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000280)=0x7fd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 7m10.907961213s ago: executing program 0 (id=119): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 7m9.635191303s ago: executing program 32 (id=119): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 7m7.024373246s ago: executing program 33 (id=56): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000028c0)={0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x3) r4 = socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r1, 0x0, r4}) 13.648137805s ago: executing program 3 (id=1497): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) clock_gettime(0xfffffffffffffff1, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/stat\x00') unlinkat(r3, &(0x7f0000004b00)='./file0\x00', 0x200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/3699], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 12.15982156s ago: executing program 3 (id=1502): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x21d, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x400c8b4) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x10) 10.650654395s ago: executing program 3 (id=1507): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 9.771565919s ago: executing program 1 (id=1508): socket$nl_rdma(0x10, 0x3, 0x14) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 9.604328312s ago: executing program 6 (id=1510): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @local}, 0x14) 9.447896474s ago: executing program 5 (id=1511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x2754, &(0x7f0000000000)={0x0, 0xfffffffc, 0x0, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20) 9.409624005s ago: executing program 4 (id=1512): socket$netlink(0x10, 0x3, 0x0) socket(0x2c, 0x803, 0x0) socket$tipc(0x1e, 0x4, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000b000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x2c, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 8.46656658s ago: executing program 5 (id=1513): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0) kexec_load(0xff0f, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) 7.386024739s ago: executing program 3 (id=1514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000180)='gid=1\x00\x1c\x00\x00\x00m\xbe\xd7\xa9:\n\xf9\b\rk[\xa1\xcc\xd6\xa28|5}(\x06l\xa8\x86di\xf3vJ,S.\xc3\x9b\xaaNj0\xef\x810EZ\xb6\x16\x88AZg`\xee\xe2\x93r\xd7\xa3v\x1f\xdb\x04\xd1\xe0\xabR \xeb\x80\r\x1b\x17\x0e\r\x93K\xe6\xc3BFz\xba\x7f\xc0\x1e@\xe4\xd0\xea\x16\xaa-aR)\\\x16\x8b^>\xbf\x06p\xc8\x9b\xf0N:\x05F\xe7fJ\x9a8\xa4\xb0FA\x9a\xe9E\xf9GJaGTf\x0f\xec\xff\x00\xb4\x97\x86\xd1&\a\xb554\x86\xd7\xbdeY\xa6\x91\r@0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) r3 = socket(0x2a, 0x2, 0x2) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x15e16}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.376335799s ago: executing program 1 (id=1524): socket$inet6(0xa, 0x4, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 7.365795919s ago: executing program 6 (id=1516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 7.212708581s ago: executing program 5 (id=1517): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x2804, 0x0) flock(r2, 0x2) 6.201056608s ago: executing program 4 (id=1518): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x5f}]}, 0x98}}, 0x0) 6.08109574s ago: executing program 3 (id=1519): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) 5.831367504s ago: executing program 6 (id=1520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=@newtaction={0x7c, 0x30, 0x9, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xfffffffffffffeb7}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 5.829720224s ago: executing program 5 (id=1531): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$inet(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 4.311246199s ago: executing program 1 (id=1521): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r8, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) 3.273477156s ago: executing program 6 (id=1522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x10400, 0x0, 0xfb, 0x0, &(0x7f0000000000)) mount(&(0x7f0000002140)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000040)='trans=rdma,\xfc\xb5%o\x85\x9b\xe1F\xe8*X\xe7\x84\xcc\xfd\xec\xcd\xbe\x9d3\x1a\x00\v_\xcf\xb7\xb5\xe1\xf9\x1eC') syz_emit_ethernet(0x86, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8b32, 0x0) 3.107570329s ago: executing program 4 (id=1523): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2b4, 0x1, 0x2, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1300, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 2.911574522s ago: executing program 5 (id=1525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e23, 0xab9, @local, 0x8}}}, &(0x7f0000000100)=0x84) 1.915421558s ago: executing program 4 (id=1526): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) gettid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x54}}, 0x0) 1.839219929s ago: executing program 1 (id=1527): socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) 1.563577474s ago: executing program 6 (id=1528): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, 0x0, 0x0) 762.031217ms ago: executing program 1 (id=1529): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004d6000/0x4000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ad2000/0x4000)=nil, 0x4000, 0x10) munmap(&(0x7f0000b04000/0x4000)=nil, 0x4000) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 758.423697ms ago: executing program 5 (id=1530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x1000002, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) 697.919109ms ago: executing program 4 (id=1532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r4 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000140), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="cd6a3a8257d7146ddfe97d31", 0xc, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000340)={r5, r3, r4}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 661.480899ms ago: executing program 3 (id=1533): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x9f) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x7, 0x400, 0x8, 0xbcc7, 0x1, 0x6eca17b7, 0x88c, 0x3ff}}}}]}, 0x58}}, 0x44080) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xfff2, 0xa}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 68.287009ms ago: executing program 6 (id=1534): pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a3000000000140000001100"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797ab1000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000141400000011000f"], 0x64}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) sendto$inet(r2, &(0x7f0000000000)="4280", 0x2, 0x4040000, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=1535): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x14c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x11c, 0x2, {{0x1, [], 0x0, [0x2]}, [@TCA_MQPRIO_MIN_RATE64={0xc4, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x95}, {0xc, 0x3, 0x2d}, {0xc, 0x3, 0x800}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x7f}, {0xc, 0x3, 0x5}, {0xc, 0x3, 0xc96}, {0xc, 0x3, 0x8000}, {0xc, 0x3, 0x2}, {0xc}, {0xc, 0x3, 0x8000000000000001}, {0xc, 0x3, 0x9}, {0xc}, {0xc, 0x3, 0x40}]}]}}}]}, 0x14c}}, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000500)={{r2}, 0x8, &(0x7f00000004c0)=[0x9d78000, 0x7, 0x3, 0xbc2, 0x3, 0x1000000, 0xf827, 0xa931], 0x4}) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f0000000180)=@random='<', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000", @ANYRES32=r4, @ANYBLOB="0800050003000000b52dc49d1d4d5f82f6b61906b1d40e6b0b49ddb2121812deaa2cb307815fd08df4e509dcfad853ab818a709bbe696b2ea2ee4c5d8a48cf39971a06ce7acd883077b7903424552b2a6264f1abe7a12d641455c824cdb5fc8744a83eeada9256884f643f91e058ca329832e98474647cd75eb9a107153bc44fe5"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000440)={0x0, 0x50, &(0x7f0000000400)={&(0x7f0000000340)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_TYPE={0x8}]}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): ets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.861215][ T4784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.892231][ T4784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.907107][ T4784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.938899][ T4784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.057314][ T4784] device hsr_slave_0 entered promiscuous mode [ 101.091362][ T4784] device hsr_slave_1 entered promiscuous mode [ 101.113738][ T4784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.134619][ T4784] Cannot create hsr debugfs directory [ 101.156100][ T4820] device ip6gretap0 entered promiscuous mode [ 101.181815][ T4820] device macsec1 entered promiscuous mode [ 101.221144][ T4820] device ip6gretap0 left promiscuous mode [ 101.269672][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 101.674838][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.684618][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.692596][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.702401][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.710976][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 101.719131][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.038060][ T4357] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.114576][ T4784] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 102.151707][ T4784] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 102.373213][ T4357] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.157971][ T4784] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.207336][ T4784] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.256652][ T4855] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.280641][ T4357] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.345103][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 103.402405][ T4862] fuse: Bad value for 'fd' [ 103.496370][ T4357] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.814145][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 104.081025][ T4784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.171419][ T4784] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.222835][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.246649][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.303421][ T4833] chnl_net:caif_netlink_parms(): no params data found [ 104.456344][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.482072][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.516710][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.523865][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.654312][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.675502][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.700086][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.721896][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.729062][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.750326][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.765324][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.800602][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.839494][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.849685][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.884927][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.923456][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.023902][ T4889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.148'. [ 105.071749][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.095198][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.156647][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.172422][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.194743][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.313285][ T4833] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.351902][ T4833] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.373525][ T4833] device bridge_slave_0 entered promiscuous mode [ 105.414135][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 105.421848][ T4833] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.434185][ T4833] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.447051][ T4833] device bridge_slave_1 entered promiscuous mode [ 105.539176][ T4833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.626977][ T4833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.747526][ T4833] team0: Port device team_slave_0 added [ 105.766597][ T4833] team0: Port device team_slave_1 added [ 105.842278][ T4833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.872558][ T4833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.904445][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 105.950971][ T4833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.062083][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.074281][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.133936][ T4833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.164220][ T4833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.533401][ T4833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.818917][ T4784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.029171][ T4935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.154'. [ 107.195960][ T4833] device hsr_slave_0 entered promiscuous mode [ 107.209528][ T4833] device hsr_slave_1 entered promiscuous mode [ 107.244864][ T4833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.252556][ T4833] Cannot create hsr debugfs directory [ 107.486257][ T4950] tipc: Started in network mode [ 107.495076][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 107.504315][ T4950] tipc: Node identity ac14140f, cluster identity 4711 [ 107.528652][ T4950] tipc: New replicast peer: 10.1.1.2 [ 107.550082][ T4950] tipc: Enabled bearer , priority 10 [ 107.590971][ T4357] device hsr_slave_0 left promiscuous mode [ 107.615959][ T4357] device hsr_slave_1 left promiscuous mode [ 107.640509][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.671206][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.692339][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.714980][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.736910][ T4357] device bridge_slave_1 left promiscuous mode [ 107.754975][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.787119][ T4357] device bridge_slave_0 left promiscuous mode [ 107.793509][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.867179][ T4357] device veth1_macvtap left promiscuous mode [ 107.883928][ T4357] device veth0_macvtap left promiscuous mode [ 107.890251][ T4357] device veth1_vlan left promiscuous mode [ 107.904577][ T4357] device veth0_vlan left promiscuous mode [ 107.974073][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 108.669258][ T14] tipc: Node number set to 2886997007 [ 108.841709][ T4978] loop1: detected capacity change from 0 to 128 [ 109.880022][ T4978] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 109.917474][ T4978] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.133830][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 111.194309][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 111.373479][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 111.373495][ T27] audit: type=1804 audit(1752181893.106:17): pid=5018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.161" name="/newroot/36/file0/bus" dev="loop1" ino=115 res=1 errno=0 [ 111.773711][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 112.211132][ T4357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.642545][ T4357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.654403][ T5057] process 'syz.4.168' launched './file0' with NULL argv: empty string added [ 112.828363][ T27] audit: type=1326 audit(1752181894.566:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.4.170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0981d8e929 code=0x0 [ 113.067596][ T4357] bond0 (unregistering): Released all slaves [ 113.485577][ T4833] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 113.521772][ T4833] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 113.546764][ T4833] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 113.602115][ T4833] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 113.711340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.734615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.803420][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.826012][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.858781][ T4784] device veth0_vlan entered promiscuous mode [ 113.888207][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.905790][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.941801][ T4784] device veth1_vlan entered promiscuous mode [ 114.016628][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.046993][ T5071] syz.1.171 uses obsolete (PF_INET,SOCK_PACKET) [ 114.050584][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.067528][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.090914][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.130848][ T4784] device veth0_macvtap entered promiscuous mode [ 114.154443][ T4784] device veth1_macvtap entered promiscuous mode [ 114.190740][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.204845][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.225364][ T4833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.319189][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.332299][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.369742][ T4833] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.389019][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.413262][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.432771][ T4784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.452473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.470451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.488512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.513350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.535012][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.542097][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.564417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.615819][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.634146][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.646098][ T4784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.684215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.693313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.713009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.723939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.738321][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.745466][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.754501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.763254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.776821][ T4784] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.785634][ T4784] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.794686][ T4784] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.803418][ T4784] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.833168][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.843867][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.852533][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.894498][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.913059][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.940424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.960129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.982420][ T4833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.996907][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.010988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.035112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.076315][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.118895][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.173755][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.216621][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.248311][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.305742][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.466271][ T5117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.178'. [ 115.559943][ T5115] loop5: detected capacity change from 0 to 512 [ 115.653556][ T5115] EXT4-fs (loop5): too many log groups per flexible block group [ 115.682340][ T5115] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 115.723146][ T5115] EXT4-fs (loop5): mount failed [ 115.883895][ T4833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.945415][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.958792][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.857896][ T5170] loop5: detected capacity change from 0 to 164 [ 117.911158][ T5170] isofs_fill_super: root inode is not a directory. Corrupted media? [ 118.047017][ T5176] ptrace attach of "./syz-executor exec"[4784] was attempted by " [ 118.743648][ T5185] net veth1_virt_wifi : renamed from virt_wifi0 [ 118.830567][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.940516][ T5192] rdma_rxe: rxe_register_device failed with error -23 [ 118.958511][ T5192] rdma_rxe: failed to add bond_slave_1 [ 119.016374][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.030840][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.103412][ T5031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.113344][ T5031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.129910][ T4833] device veth0_vlan entered promiscuous mode [ 119.142871][ T5031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.152281][ T5031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.176938][ T4833] device veth1_vlan entered promiscuous mode [ 119.234880][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.257228][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.299583][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.359530][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.375150][ T4833] device veth0_macvtap entered promiscuous mode [ 119.402773][ T4833] device veth1_macvtap entered promiscuous mode [ 119.456778][ T4833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.495017][ T4833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.514166][ T4833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.545187][ T4833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.557145][ T4833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.583802][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.602667][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.634916][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.660965][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.693104][ T4833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.722043][ T4833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.741885][ T4833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.762581][ T4833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.809619][ T4833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.839965][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.862861][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.891080][ T4833] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.908986][ T4833] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.921583][ T4833] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.932876][ T4833] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.957032][ T5227] overlayfs: failed to clone upperpath [ 120.160698][ T5029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.186796][ T5029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.297027][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.329348][ T5029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.361079][ T5029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.404062][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.437971][ T5240] device gtp0 entered promiscuous mode [ 121.182637][ T5258] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 121.375938][ T5258] device hsr_slave_0 left promiscuous mode [ 124.881852][ T5325] tipc: Enabling of bearer rejected, failed to enable media [ 125.299888][ T5334] loop5: detected capacity change from 0 to 2048 [ 125.394042][ T5334] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2) [ 125.896842][ T5349] loop6: detected capacity change from 0 to 256 [ 125.938467][ T5349] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 125.951686][ T5349] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 127.360402][ T4331] kernel write not supported for file bpf-prog (pid: 4331 comm: kworker/0:7) [ 128.221966][ T5383] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 128.413882][ T5380] loop1: detected capacity change from 0 to 512 [ 128.528793][ T5380] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 128.538130][ T5383] device hsr_slave_0 left promiscuous mode [ 128.609514][ T5380] System zones: 0-2, 18-18, 34-35 [ 128.669592][ T5380] EXT4-fs error (device loop1): ext4_quota_enable:7022: inode #4: comm syz.1.239: iget: bad i_size value: 5910974510929920 [ 128.692379][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.240'. [ 128.709867][ T5380] EXT4-fs error (device loop1): ext4_quota_enable:7025: comm syz.1.239: Bad quota inode: 4, type: 1 [ 128.746060][ T5380] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 128.786001][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 128.814625][ T5380] EXT4-fs (loop1): mount failed [ 129.003244][ T5390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 129.174128][ T5405] capability: warning: `syz.5.247' uses deprecated v2 capabilities in a way that may be insecure [ 130.806221][ T5425] netlink: 4 bytes leftover after parsing attributes in process `syz.6.252'. [ 131.220330][ T5438] tipc: Failed to remove unknown binding: 66,1,1/2886997007:141720811/141720813 [ 131.242820][ T5440] netlink: 48 bytes leftover after parsing attributes in process `syz.5.256'. [ 131.303267][ T5438] tipc: Failed to remove unknown binding: 66,1,1/2886997007:141720811/141720813 [ 131.312917][ T5440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.320408][ T5440] IPv6: NLM_F_CREATE should be set when creating new route [ 131.371874][ T5438] tipc: Failed to remove unknown binding: 66,1,1/2886997007:141720811/141720813 [ 131.580938][ T5449] loop6: detected capacity change from 0 to 512 [ 131.637665][ T5449] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 131.671644][ T5455] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 131.728505][ T5449] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 131.856994][ T5449] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 131.874592][ T5449] EXT4-fs (loop6): 1 truncate cleaned up [ 131.880346][ T5449] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 132.111429][ T5461] netlink: 156 bytes leftover after parsing attributes in process `syz.1.261'. [ 132.253203][ T4833] EXT4-fs (loop6): unmounting filesystem. [ 132.435945][ T5455] device hsr_slave_0 left promiscuous mode [ 132.457156][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.463594][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.273269][ T5524] netlink: 4 bytes leftover after parsing attributes in process `syz.6.268'. [ 134.518992][ T5532] netlink: 'syz.3.272': attribute type 10 has an invalid length. [ 134.590488][ T5532] team0: Port device dummy0 added [ 134.603363][ T5535] netlink: 'syz.3.272': attribute type 10 has an invalid length. [ 134.642560][ T5535] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 134.687376][ T5535] team0: Failed to send options change via netlink (err -105) [ 134.700570][ T5535] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 134.715000][ T5535] team0: Port device dummy0 removed [ 134.729434][ T5535] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 134.862986][ T5544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.273'. [ 135.697456][ T5561] loop5: detected capacity change from 0 to 512 [ 135.734966][ T5561] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 135.763216][ T5561] System zones: 0-2, 18-18, 34-35 [ 135.890240][ T5561] EXT4-fs error (device loop5): ext4_quota_enable:7022: inode #4: comm syz.5.276: iget: bad i_size value: 5910974510929920 [ 135.949989][ T5561] EXT4-fs error (device loop5): ext4_quota_enable:7025: comm syz.5.276: Bad quota inode: 4, type: 1 [ 136.346403][ T5561] EXT4-fs warning (device loop5): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 136.732271][ T5561] EXT4-fs (loop5): mount failed [ 137.187289][ T5595] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.044921][ T5594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.052167][ T5594] IPv6: NLM_F_CREATE should be set when creating new route [ 139.667140][ T5641] loop6: detected capacity change from 0 to 512 [ 139.730206][ T5641] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 139.759683][ T5641] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:164: inode #17: comm syz.6.293: inline data xattr refers to an external xattr inode [ 139.810109][ T5641] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.293: couldn't read orphan inode 17 (err -117) [ 139.915990][ T5641] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 140.075691][ T4833] EXT4-fs (loop6): unmounting filesystem. [ 140.312062][ T5653] loop6: detected capacity change from 0 to 512 [ 140.367776][ T5653] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 140.380430][ T5653] System zones: 0-2, 18-18, 34-35 [ 140.387464][ T5653] EXT4-fs error (device loop6): ext4_quota_enable:7022: inode #4: comm syz.6.296: iget: bad i_size value: 5910974510929920 [ 140.400910][ T5653] EXT4-fs error (device loop6): ext4_quota_enable:7025: comm syz.6.296: Bad quota inode: 4, type: 1 [ 140.414514][ T5653] EXT4-fs warning (device loop6): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 140.477187][ T5653] EXT4-fs (loop6): mount failed [ 141.010667][ T5594] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.020555][ T5594] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.029913][ T5594] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.039140][ T5594] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.140669][ T5597] bridge: RTM_NEWNEIGH with invalid ether address [ 141.964722][ T5702] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 141.964722][ T5702] The task syz.1.307 (5702) triggered the difference, watch for misbehavior. [ 142.004166][ T4341] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 142.207161][ T4341] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 142.254126][ T4341] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 142.263826][ T4341] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.328764][ T4341] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 142.358631][ T4341] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 142.377937][ T4341] usb 7-1: Product: syz [ 142.392355][ T4341] usb 7-1: Manufacturer: syz [ 142.401962][ T4341] usb 7-1: SerialNumber: syz [ 142.661506][ T4341] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 143.012875][ T4380] usb 7-1: USB disconnect, device number 2 [ 143.151503][ T5731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.312'. [ 143.170744][ T5722] usblp0: removed [ 143.506691][ T5733] bridge: RTM_NEWNEIGH with invalid ether address [ 143.752665][ T5741] netlink: 12 bytes leftover after parsing attributes in process `syz.5.316'. [ 143.786868][ T5741] loop5: detected capacity change from 0 to 8 [ 143.869993][ T5741] SQUASHFS error: lzo decompression failed, data probably corrupt [ 143.891304][ T5741] SQUASHFS error: Failed to read block 0x91: -5 [ 143.921961][ T5741] SQUASHFS error: Unable to read metadata cache entry [8f] [ 144.038153][ T5741] SQUASHFS error: Unable to read inode 0x11f [ 145.114961][ T5762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.320'. [ 145.302026][ T5759] loop1: detected capacity change from 0 to 32768 [ 145.310211][ T5759] (syz.1.321,5759,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 145.320093][ T5759] (syz.1.321,5759,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 145.329726][ T5766] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 145.375964][ T4257] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 145.382220][ T5768] netlink: 28 bytes leftover after parsing attributes in process `syz.5.320'. [ 145.479975][ T5768] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 145.864924][ T5768] bond1 (unregistering): Released all slaves [ 146.232115][ T5776] overlayfs: failed to clone upperpath [ 147.500292][ T5802] SET target dimension over the limit! [ 149.450251][ T5820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.336'. [ 152.668668][ T5881] loop5: detected capacity change from 0 to 256 [ 152.740584][ T5881] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 152.754738][ T5881] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 153.581608][ T5886] netlink: 'syz.5.349': attribute type 1 has an invalid length. [ 153.908737][ T5892] device bond1 entered promiscuous mode [ 153.917257][ T5892] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.039941][ T5900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'. [ 154.248285][ T5905] loop6: detected capacity change from 0 to 2048 [ 154.271994][ T5905] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 154.302915][ T5905] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.835602][ T5924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.887764][ T5924] device batadv_slave_0 entered promiscuous mode [ 156.466632][ T5966] netlink: 156 bytes leftover after parsing attributes in process `syz.1.382'. [ 157.925700][ T5987] netlink: 'syz.1.377': attribute type 1 has an invalid length. [ 157.950294][ T5981] syz.5.375 (5981) used greatest stack depth: 18176 bytes left [ 158.026343][ T5987] device bond1 entered promiscuous mode [ 158.063324][ T5987] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.125205][ T5989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.163375][ T5989] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 158.175022][ T5989] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 158.201198][ T5989] bond1: (slave ip6gre1): making interface the new active one [ 158.228018][ T5989] device ip6gre1 entered promiscuous mode [ 158.245660][ T5989] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 158.285617][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 158.968597][ T6006] loop5: detected capacity change from 0 to 128 [ 159.003205][ T6006] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 159.040923][ T6006] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.114948][ T6013] loop1: detected capacity change from 0 to 256 [ 159.442434][ T6013] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 159.455746][ T6013] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 159.725461][ T6016] overlayfs: failed to clone upperpath [ 159.914419][ T6015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.383'. [ 159.938451][ T27] audit: type=1804 audit(1752181941.676:19): pid=6006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.391" name="/newroot/38/file0/bus" dev="loop5" ino=115 res=1 errno=0 [ 160.088405][ T6022] loop6: detected capacity change from 0 to 128 [ 160.156430][ T6022] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 160.312508][ T6030] IPv6: sit1: Disabled Multicast RS [ 160.335346][ T6022] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.509287][ T6037] netlink: 'syz.1.390': attribute type 10 has an invalid length. [ 160.556395][ T6037] device syz_tun entered promiscuous mode [ 160.585229][ T6037] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 160.961517][ T6022] fscrypt (loop6, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 161.283939][ T4833] EXT4-fs (loop6): unmounting filesystem. [ 163.293471][ T6078] loop6: detected capacity change from 0 to 128 [ 163.337808][ T6072] loop1: detected capacity change from 0 to 8192 [ 163.388169][ T6078] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 164.004969][ T6078] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.101968][ T27] audit: type=1804 audit(1752181945.836:20): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.399" name="/newroot/35/file0/bus" dev="loop6" ino=115 res=1 errno=0 [ 164.759168][ T6105] autofs4:pid:6105:autofs_fill_super: called with bogus options [ 165.651511][ T6108] netlink: 44 bytes leftover after parsing attributes in process `syz.3.407'. [ 165.706779][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.714350][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.272430][ T27] audit: type=1326 audit(1752181948.006:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.5.415" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f102b38e929 code=0x0 [ 166.538731][ T6144] netlink: 56 bytes leftover after parsing attributes in process `syz.4.418'. [ 166.573550][ T6144] tc_dump_action: action bad kind [ 167.248801][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 167.295610][ T6161] batman_adv: batadv0: Adding interface: dummy0 [ 167.301902][ T6161] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.327858][ T6161] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 168.684520][ T6213] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 168.710833][ T6213] CIFS mount error: No usable UNC path provided in device string! [ 168.710833][ T6213] [ 168.721192][ T6213] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 171.945963][ T6259] kAFS: unable to lookup cell ' [ 171.945963][ T6259] >.?](<' [ 171.945963][ T6259] ءP!0^O[ZvMTlA/H=9.b>9F9*mTS' [ 172.609545][ T6265] loop1: detected capacity change from 0 to 256 [ 172.730069][ T6265] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 173.553355][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.452'. [ 174.398559][ T6305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.454'. [ 174.621519][ T6312] netlink: 'syz.5.457': attribute type 10 has an invalid length. [ 174.637317][ T6307] loop6: detected capacity change from 0 to 1024 [ 174.685103][ T6312] netlink: 40 bytes leftover after parsing attributes in process `syz.5.457'. [ 174.700617][ T6307] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.816822][ T6312] team0: Port device geneve0 added [ 176.024965][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.6.467'. [ 176.472795][ T6361] loop5: detected capacity change from 0 to 2048 [ 176.511256][ T6364] tipc: Enabled bearer , priority 10 [ 176.888813][ T6373] netlink: 'syz.6.474': attribute type 10 has an invalid length. [ 177.513464][ T6385] netlink: 'syz.5.475': attribute type 2 has an invalid length. [ 179.057904][ T6414] netlink: 32 bytes leftover after parsing attributes in process `syz.3.486'. [ 179.292764][ T6426] device batadv_slave_0 entered promiscuous mode [ 179.321546][ T6425] netlink: 'syz.4.488': attribute type 12 has an invalid length. [ 179.495553][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.490'. [ 180.137329][ T6448] loop5: detected capacity change from 0 to 256 [ 180.183534][ T6448] FAT-fs (loop5): bogus number of FAT sectors [ 180.231578][ T6448] FAT-fs (loop5): Can't find a valid FAT filesystem [ 182.724497][ T6487] netlink: 'syz.5.518': attribute type 10 has an invalid length. [ 182.764987][ T6487] device syz_tun entered promiscuous mode [ 182.809148][ T6487] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 184.392897][ T6514] netlink: 'syz.3.512': attribute type 2 has an invalid length. [ 184.659730][ T6516] autofs4:pid:6516:autofs_fill_super: called with bogus options [ 187.348589][ T6554] loop5: detected capacity change from 0 to 256 [ 187.420295][ T6554] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 188.794035][ T4347] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 188.995998][ T4347] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.044276][ T4347] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 189.096304][ T4347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.125747][ T4347] usb 7-1: config 0 descriptor?? [ 189.336221][ T6580] bridge0: port 3(vxlan0) entered blocking state [ 189.347225][ T4347] usbhid 7-1:0.0: can't add hid device: -71 [ 189.353253][ T4347] usbhid: probe of 7-1:0.0 failed with error -71 [ 189.365233][ T6580] bridge0: port 3(vxlan0) entered disabled state [ 189.400022][ T4347] usb 7-1: USB disconnect, device number 3 [ 189.415857][ T6580] device vxlan0 entered promiscuous mode [ 189.974291][ T4347] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 190.184110][ T4347] usb 7-1: Using ep0 maxpacket: 32 [ 190.234433][ T4347] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.245723][ T4347] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 190.257483][ T4347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.285941][ T4347] usb 7-1: config 0 descriptor?? [ 190.310965][ T4347] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 190.333882][ T4347] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 190.625789][ T6599] bond0: (slave dummy0): Releasing backup interface [ 190.626861][ C1] ldusb 7-1:0.0: Ring buffer overflow, 8 bytes dropped [ 192.298012][ T14] usb 7-1: USB disconnect, device number 4 [ 192.322437][ T14] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 193.852954][ T6640] netlink: 'syz.6.551': attribute type 2 has an invalid length. [ 193.913856][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.921922][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.719307][ T6645] loop6: detected capacity change from 0 to 256 [ 195.866238][ T6645] loop6: detected capacity change from 0 to 512 [ 195.900675][ T6645] ext2: Unknown parameter 'smackfsroot' [ 196.648844][ T6667] syz.6.559 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 197.103381][ T6632] infiniband syz0: set down [ 197.805954][ T6632] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.815237][ T6632] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.824649][ T6632] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.833567][ T6632] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.757623][ T27] audit: type=1326 audit(1752181980.496:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6688 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 198.791173][ T27] audit: type=1326 audit(1752181980.496:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6688 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 198.819141][ T27] audit: type=1326 audit(1752181980.526:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6688 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 198.976630][ T27] audit: type=1326 audit(1752181980.526:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6688 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 199.053743][ T27] audit: type=1326 audit(1752181980.526:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6688 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 199.154016][ T27] audit: type=1326 audit(1752181980.556:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6688 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 199.231090][ T27] audit: type=1326 audit(1752181980.556:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6688 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 199.258684][ T27] audit: type=1326 audit(1752181980.556:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6688 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 199.725463][ T27] audit: type=1326 audit(1752181980.556:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6688 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 199.872797][ T27] audit: type=1326 audit(1752181980.556:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6688 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 201.472326][ T6721] netlink: 'syz.3.576': attribute type 2 has an invalid length. [ 204.629363][ T6754] netlink: 'syz.4.584': attribute type 1 has an invalid length. [ 204.683561][ T6754] device bond1 entered promiscuous mode [ 204.819839][ T6755] bond1: (slave ip6gretap1): making interface the new active one [ 204.863003][ T6755] device ip6gretap1 entered promiscuous mode [ 204.925455][ T6755] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 205.025246][ T6759] netlink: 28 bytes leftover after parsing attributes in process `syz.4.584'. [ 205.044630][ T6759] device bond1 left promiscuous mode [ 205.052274][ T6759] device ip6gretap1 left promiscuous mode [ 205.073028][ T6759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.606090][ T6778] autofs4:pid:6778:autofs_fill_super: called with bogus options [ 207.702735][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.711380][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.033755][ T6816] delete_channel: no stack [ 210.818124][ T6766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.871601][ T6766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.756257][ T6766] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.771999][ T6766] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.782806][ T6766] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.791828][ T6766] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.987445][ T6831] netlink: 24 bytes leftover after parsing attributes in process `syz.3.604'. [ 212.104387][ T6834] netlink: 96 bytes leftover after parsing attributes in process `syz.5.605'. [ 212.113376][ T6841] netlink: 'syz.1.606': attribute type 4 has an invalid length. [ 212.181891][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.604'. [ 215.836807][ T6877] mmap: syz.4.618 (6877) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 215.939335][ T6886] loop6: detected capacity change from 0 to 256 [ 216.114248][ T6886] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 217.219039][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 217.219054][ T27] audit: type=1800 audit(1752181998.956:54): pid=6886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.620" name="file1" dev="loop6" ino=1048629 res=0 errno=0 [ 217.575721][ T6886] syz.6.620: attempt to access beyond end of device [ 217.575721][ T6886] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 218.593756][ T6913] loop1: detected capacity change from 0 to 8 [ 218.632631][ T27] audit: type=1326 audit(1752182000.366:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 218.638871][ T6913] SQUASHFS error: lzo decompression failed, data probably corrupt [ 218.671152][ T6913] SQUASHFS error: Failed to read block 0x91: -5 [ 218.679826][ T27] audit: type=1326 audit(1752182000.366:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 218.709123][ T6913] SQUASHFS error: Unable to read metadata cache entry [8f] [ 218.716807][ T6913] SQUASHFS error: Unable to read inode 0x11f [ 218.728835][ T27] audit: type=1326 audit(1752182000.366:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 218.744093][ T6917] loop5: detected capacity change from 0 to 512 [ 218.776909][ T4257] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 218.839141][ T27] audit: type=1326 audit(1752182000.366:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 218.952660][ T27] audit: type=1326 audit(1752182000.366:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 220.557086][ T6939] autofs4:pid:6939:autofs_fill_super: called with bogus options [ 220.961466][ T6945] sctp: [Deprecated]: syz.4.636 (pid 6945) Use of int in max_burst socket option. [ 220.961466][ T6945] Use struct sctp_assoc_value instead [ 221.012767][ T6947] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.638'. [ 221.136732][ T27] audit: type=1326 audit(1752182002.876:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.1.640" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63fc78e929 code=0x0 [ 221.283758][ T6954] netlink: 'syz.6.639': attribute type 4 has an invalid length. [ 222.271088][ T6970] loop1: detected capacity change from 0 to 2048 [ 222.320886][ T6970] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 222.533728][ T27] audit: type=1326 audit(1752182004.266:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz.6.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b92d8e929 code=0x7fc00000 [ 222.982695][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 223.131401][ T27] audit: type=1326 audit(1752182004.866:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz.6.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b92d8e929 code=0x7fc00000 [ 223.182228][ T27] audit: type=1326 audit(1752182004.866:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz.6.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9b92d8e929 code=0x7fc00000 [ 223.262539][ T6999] loop5: detected capacity change from 0 to 64 [ 223.328472][ T6999] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 224.163273][ T27] audit: type=1326 audit(1752182005.896:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.5.658" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f102b38e929 code=0x0 [ 226.152682][ T7046] tipc: Started in network mode [ 226.176592][ T7046] tipc: Node identity 4, cluster identity 4711 [ 226.205383][ T7046] tipc: Node number set to 4 [ 226.556877][ T27] audit: type=1326 audit(1752182008.296:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.4.674" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0981d8e929 code=0x0 [ 228.342537][ T7082] loop6: detected capacity change from 0 to 2048 [ 228.389937][ T7082] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 228.406764][ T7082] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.610861][ T4833] EXT4-fs (loop6): unmounting filesystem. [ 230.420259][ T27] audit: type=1326 audit(2000000002.140:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.3.687" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbff0f8e929 code=0x0 [ 230.549508][ T7106] loop1: detected capacity change from 0 to 256 [ 230.597777][ T7106] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 230.707444][ T7106] syz.1.688: attempt to access beyond end of device [ 230.707444][ T7106] loop1: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 230.733288][ T7106] syz.1.688: attempt to access beyond end of device [ 230.733288][ T7106] loop1: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 230.773212][ T7106] syz.1.688: attempt to access beyond end of device [ 230.773212][ T7106] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 230.847992][ T27] audit: type=1800 audit(2000000002.570:67): pid=7106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.688" name="file1" dev="loop1" ino=1048630 res=0 errno=0 [ 230.874991][ T7106] syz.1.688: attempt to access beyond end of device [ 230.874991][ T7106] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 230.907216][ T27] audit: type=1800 audit(2000000002.630:68): pid=7106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.688" name="file1" dev="loop1" ino=1048630 res=0 errno=0 [ 230.942038][ T7106] syz.1.688: attempt to access beyond end of device [ 230.942038][ T7106] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 230.968093][ T7106] syz.1.688: attempt to access beyond end of device [ 230.968093][ T7106] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 230.989133][ T7106] syz.1.688: attempt to access beyond end of device [ 230.989133][ T7106] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 231.002569][ T7106] syz.1.688: attempt to access beyond end of device [ 231.002569][ T7106] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 231.445995][ T7112] syz.1.688: attempt to access beyond end of device [ 231.445995][ T7112] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 231.737297][ T7106] syz.1.688: attempt to access beyond end of device [ 231.737297][ T7106] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 231.829502][ T27] audit: type=1800 audit(2000000003.550:69): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.688" name="file1" dev="loop1" ino=1048630 res=0 errno=0 [ 232.048975][ T7118] loop6: detected capacity change from 0 to 2048 [ 232.220031][ T7118] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 232.594189][ T7118] UDF-fs: Scanning with blocksize 512 failed [ 233.067052][ T7118] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.237607][ T7131] tipc: Started in network mode [ 233.277754][ T7131] tipc: Node identity 4, cluster identity 4711 [ 233.334209][ T7131] tipc: Node number set to 4 [ 234.273774][ T4833] UDF-fs: warning (device loop6): udf_evict_inode: Inode 830 (mode 100000) has inode size 49530 different from extent length 53626. Filesystem need not be standards compliant. [ 235.287121][ T7153] loop5: detected capacity change from 0 to 1024 [ 235.302738][ T7153] EXT4-fs: Ignoring removed orlov option [ 235.318866][ T7153] EXT4-fs: Ignoring removed nomblk_io_submit option [ 235.397125][ T7153] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 235.757928][ T7163] bridge0: port 1(batadv0) entered blocking state [ 235.777678][ T7163] bridge0: port 1(batadv0) entered disabled state [ 235.810464][ T7163] device batadv0 entered promiscuous mode [ 235.836917][ T7167] device batadv0 left promiscuous mode [ 235.849840][ T7167] bridge0: port 1(batadv0) entered disabled state [ 235.863356][ T4784] EXT4-fs (loop5): unmounting filesystem. [ 237.762824][ T27] audit: type=1326 audit(2000000009.480:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0981d8e929 code=0x7fc00000 [ 237.860052][ T27] audit: type=1326 audit(2000000009.510:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f0981d8e929 code=0x7fc00000 [ 237.951471][ T27] audit: type=1326 audit(2000000009.510:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0981d8e929 code=0x7fc00000 [ 238.152028][ T27] audit: type=1326 audit(2000000009.510:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0981d8e929 code=0x7fc00000 [ 238.280879][ T27] audit: type=1326 audit(2000000009.510:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0981d8e929 code=0x7fc00000 [ 238.323317][ T27] audit: type=1326 audit(2000000009.510:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0981d8e929 code=0x7fc00000 [ 239.296717][ T27] audit: type=1326 audit(2000000009.510:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0981d8e929 code=0x7fc00000 [ 239.391311][ T27] audit: type=1326 audit(2000000009.510:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0981d8e929 code=0x7fc00000 [ 239.451891][ T27] audit: type=1326 audit(2000000009.510:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0981d8e929 code=0x7fc00000 [ 239.518955][ T27] audit: type=1326 audit(2000000009.510:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0981d8e929 code=0x7fc00000 [ 240.259059][ T7202] loop5: detected capacity change from 0 to 128 [ 241.258472][ T7202] bio_check_eod: 183 callbacks suppressed [ 241.258488][ T7202] syz.5.725: attempt to access beyond end of device [ 241.258488][ T7202] loop5: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 241.524094][ T7202] syz.5.725: attempt to access beyond end of device [ 241.524094][ T7202] loop5: rw=2049, sector=241, nr_sectors = 400 limit=128 [ 242.603659][ T46] kworker/u4:3: attempt to access beyond end of device [ 242.603659][ T46] loop5: rw=1, sector=241, nr_sectors = 1 limit=128 [ 242.769692][ T46] Buffer I/O error on dev loop5, logical block 241, lost async page write [ 247.642267][ T7272] loop5: detected capacity change from 0 to 128 [ 248.620341][ T27] kauditd_printk_skb: 55 callbacks suppressed [ 248.620358][ T27] audit: type=1800 audit(2000000020.320:135): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.733" name="file1" dev="loop5" ino=1048633 res=0 errno=0 [ 248.899707][ T7276] syz.5.733: attempt to access beyond end of device [ 248.899707][ T7276] loop5: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 251.433952][ C1] sched: RT throttling activated [ 254.587858][ T7361] netlink: 24 bytes leftover after parsing attributes in process `syz.3.758'. [ 255.349092][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.381573][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.140584][ T7361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.758'. [ 256.650663][ T7383] netlink: 'syz.4.762': attribute type 2 has an invalid length. [ 257.372571][ T7387] netlink: 12 bytes leftover after parsing attributes in process `syz.6.764'. [ 257.424873][ T7387] device bond1 entered promiscuous mode [ 257.588220][ T7387] device ip6gretap1 entered promiscuous mode [ 257.955152][ T7387] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 258.050119][ T7395] netlink: 28 bytes leftover after parsing attributes in process `syz.6.764'. [ 258.488933][ T7395] device bond1 left promiscuous mode [ 258.500781][ T7395] device ip6gretap1 left promiscuous mode [ 258.528368][ T7395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.498335][ T7422] loop6: detected capacity change from 0 to 1024 [ 260.513317][ T7422] EXT4-fs: Ignoring removed orlov option [ 260.515036][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.778'. [ 260.529166][ T7422] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.561496][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.778'. [ 260.703185][ T7422] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 262.239807][ T4833] EXT4-fs (loop6): unmounting filesystem. [ 264.966080][ T7478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.791'. [ 265.071287][ T7482] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 265.278554][ T4278] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 265.434342][ T4278] usb 2-1: device descriptor read/64, error -71 [ 265.744716][ T4278] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 265.955144][ T4278] usb 2-1: device descriptor read/64, error -71 [ 266.094431][ T4278] usb usb2-port1: attempt power cycle [ 266.844343][ T4278] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 266.927078][ T4278] usb 2-1: device descriptor read/8, error -71 [ 267.214170][ T4278] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 267.254764][ T4278] usb 2-1: device descriptor read/8, error -71 [ 267.378965][ T4278] usb usb2-port1: unable to enumerate USB device [ 268.529872][ T7532] device veth3 entered promiscuous mode [ 268.547018][ T7532] bridge2: port 1(veth3) entered blocking state [ 268.576811][ T7532] bridge2: port 1(veth3) entered disabled state [ 268.658458][ T7539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.809'. [ 268.717001][ T7542] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 268.890222][ T7546] loop6: detected capacity change from 0 to 2048 [ 268.980094][ T7546] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 269.564102][ T4833] EXT4-fs (loop6): unmounting filesystem. [ 269.984030][ T4278] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 270.176944][ T4278] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 777 [ 270.197437][ T4278] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 270.820333][ T4278] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 270.830239][ T4278] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 270.839344][ T4278] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.892943][ T7563] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 271.273701][ T4278] snd-usb-audio: probe of 7-1:27.0 failed with error -12 [ 271.655149][ T4278] usb 7-1: USB disconnect, device number 5 [ 271.897378][ T4257] udevd[4257]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.100331][ T7583] netlink: 'syz.4.822': attribute type 1 has an invalid length. [ 272.153800][ T7583] bond2: (slave gretap1): making interface the new active one [ 272.252337][ T7583] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 272.440001][ T7591] netlink: 132 bytes leftover after parsing attributes in process `syz.5.823'. [ 272.465525][ T7588] loop1: detected capacity change from 0 to 2048 [ 272.532135][ T7588] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 272.555355][ T7588] UDF-fs: Scanning with blocksize 512 failed [ 272.586018][ T7588] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.616077][ T4266] UDF-fs: warning (device loop1): udf_evict_inode: Inode 830 (mode 100000) has inode size 49530 different from extent length 57722. Filesystem need not be standards compliant. [ 277.320555][ T7648] device bridge_slave_1 left promiscuous mode [ 277.327929][ T7648] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.366103][ T7648] device bridge_slave_0 left promiscuous mode [ 277.466671][ T7648] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.410729][ T7663] netlink: 'syz.4.849': attribute type 1 has an invalid length. [ 279.510180][ T7663] 8021q: adding VLAN 0 to HW filter on device bond3 [ 279.545267][ T7672] bond3: (slave vlan2): Opening slave failed [ 283.132934][ T7699] loop6: detected capacity change from 0 to 131072 [ 283.150428][ T7699] F2FS-fs (loop6): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 283.159018][ T7699] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 283.169142][ T7699] F2FS-fs (loop6): invalid crc value [ 283.187821][ T7703] loop1: detected capacity change from 0 to 256 [ 283.217129][ T7699] F2FS-fs (loop6): Found nat_bits in checkpoint [ 283.303590][ T7699] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 283.311619][ T7699] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 284.429569][ T7703] loop1: detected capacity change from 0 to 512 [ 284.592368][ T7721] device batadv_slave_1 entered promiscuous mode [ 284.790817][ T7721] device veth1_virt_wifi entered promiscuous mode [ 285.051378][ T7703] EXT4-fs (loop1): 1 orphan inode deleted [ 285.269526][ T7703] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 285.282039][ T7720] device veth1_virt_wifi left promiscuous mode [ 285.325409][ T7720] device batadv_slave_1 left promiscuous mode [ 285.416437][ T5027] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 285.431899][ T7703] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.474074][ T5027] EXT4-fs error (device loop1): ext4_release_dquot:6850: comm kworker/u4:17: Failed to release dquot type 1 [ 286.786519][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 289.725363][ T7759] batman_adv: batadv0: Adding interface: dummy0 [ 289.763790][ T7759] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.804207][ T7759] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 290.658512][ T4278] libceph: connect (1)[c::]:6789 error -13 [ 290.749546][ T4278] libceph: mon0 (1)[c::]:6789 connect error [ 291.102408][ T4278] libceph: connect (1)[c::]:6789 error -13 [ 291.134121][ T4278] libceph: mon0 (1)[c::]:6789 connect error [ 291.304271][ T7761] ceph: No mds server is up or the cluster is laggy [ 293.639951][ T7786] orangefs_mount: mount request failed with -4 [ 296.750841][ T7825] affs: No valid root block on device nullb0 [ 297.233532][ T7831] netlink: 24 bytes leftover after parsing attributes in process `syz.4.893'. [ 297.249135][ T7831] device vxcan3 entered promiscuous mode [ 297.278780][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 301.453237][ T7887] netlink: 'syz.3.907': attribute type 1 has an invalid length. [ 301.969762][ T7887] 8021q: adding VLAN 0 to HW filter on device bond1 [ 302.011610][ T7888] bond1: (slave veth5): Enslaving as an active interface with a down link [ 302.556212][ T7884] bond1: (slave vlan2): Opening slave failed [ 306.982173][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805608f400: rx timeout, send abort [ 306.993748][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801f39a000: rx timeout, send abort [ 307.002208][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801f39a000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 307.005507][ T5009] tipc: Subscription rejected, illegal request [ 307.294168][ T22] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 307.418032][ T7961] netlink: 'syz.3.926': attribute type 4 has an invalid length. [ 307.484564][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 307.492066][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805608f400: abort rx timeout. Force session deactivation [ 307.517599][ T22] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 307.528896][ T22] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 307.539549][ T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 307.560508][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 307.571471][ T22] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 307.582620][ T22] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 307.598963][ T22] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 307.608438][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.622327][ T22] usb 2-1: config 0 descriptor?? [ 307.837563][ T22] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 308.042061][ T7970] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 310.223396][ T4338] usb 2-1: USB disconnect, device number 7 [ 310.252613][ T4338] usblp0: removed [ 310.317451][ T7994] orangefs_mount: mount request failed with -4 [ 311.115510][ T8009] netlink: 'syz.6.940': attribute type 1 has an invalid length. [ 311.234502][ T8009] 8021q: adding VLAN 0 to HW filter on device bond2 [ 311.408185][ T8009] bond2: (slave gretap1): making interface the new active one [ 311.466488][ T8009] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 311.490284][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 312.210536][ T8030] netlink: 'syz.1.944': attribute type 8 has an invalid length. [ 313.881654][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.947'. [ 314.774114][ T4338] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 315.156729][ T4338] usb 7-1: Using ep0 maxpacket: 32 [ 315.865191][ T8054] loop1: detected capacity change from 0 to 131072 [ 315.882825][ T8054] F2FS-fs (loop1): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 315.891517][ T8054] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 315.914060][ T8054] F2FS-fs (loop1): invalid crc value [ 315.929844][ T4338] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 315.938314][ T4338] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 315.967568][ T4338] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 315.984134][ T4338] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 316.004284][ T4338] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 316.014227][ T8054] F2FS-fs (loop1): Found nat_bits in checkpoint [ 316.031193][ T4338] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 316.073685][ T8054] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 316.080893][ T8054] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 316.114188][ T4338] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 316.143672][ T4338] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.174941][ T4338] usb 7-1: config 0 descriptor?? [ 317.032832][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.039204][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.114582][ T4338] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 317.188993][ T8084] netlink: 28 bytes leftover after parsing attributes in process `syz.5.961'. [ 318.668958][ T4392] usb 7-1: USB disconnect, device number 6 [ 318.697363][ T4392] usblp0: removed [ 319.222272][ T8111] syz.6.967[8111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.222395][ T8111] syz.6.967[8111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.408206][ T8113] loop5: detected capacity change from 0 to 2048 [ 322.312316][ T27] audit: type=1326 audit(2000000094.030:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 322.407375][ T8113] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 322.626210][ T27] audit: type=1326 audit(2000000094.120:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 322.648421][ T27] audit: type=1326 audit(2000000094.120:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 322.769877][ T4784] EXT4-fs (loop5): unmounting filesystem. [ 323.260430][ T27] audit: type=1326 audit(2000000094.120:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 323.282832][ T27] audit: type=1326 audit(2000000094.130:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 323.307577][ T27] audit: type=1326 audit(2000000094.130:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 323.333323][ T27] audit: type=1326 audit(2000000094.130:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 323.370625][ T27] audit: type=1326 audit(2000000094.140:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 323.506259][ T27] audit: type=1326 audit(2000000094.140:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 323.758000][ T27] audit: type=1326 audit(2000000094.140:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 323.979144][ T8136] loop5: detected capacity change from 0 to 2048 [ 324.149558][ T8136] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=3932051, location=3932051 [ 324.425147][ T8136] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.210261][ T8136] netlink: 136 bytes leftover after parsing attributes in process `syz.5.976'. [ 325.848722][ T8152] syz.5.993[8152] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.848827][ T8152] syz.5.993[8152] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.883385][ T8152] netlink: 'syz.5.993': attribute type 4 has an invalid length. [ 326.720173][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.6.985'. [ 326.747777][ T8159] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 327.247249][ T8168] loop6: detected capacity change from 0 to 128 [ 327.350436][ T8168] EXT4-fs (loop6): can't mount with commit=3, fs mounted w/o journal [ 327.493784][ T8172] tipc: Enabled bearer , priority 0 [ 327.529289][ T8172] device syzkaller0 entered promiscuous mode [ 327.559214][ T8172] tipc: Resetting bearer [ 328.907623][ T8197] loop1: detected capacity change from 0 to 2048 [ 328.970528][ T8197] loop1: p1 < > p3 [ 329.905006][ T8197] loop1: p3 size 134217728 extends beyond EOD, truncated [ 330.530893][ T8207] tipc: Failed to remove unknown binding: 66,1,1/4:2631821589/2631821591 [ 330.642475][ T8207] tipc: Failed to remove unknown binding: 66,1,1/4:2631821589/2631821591 [ 330.764527][ T8207] tipc: Failed to remove unknown binding: 66,1,1/4:2631821589/2631821591 [ 331.213908][ C1] hrtimer: interrupt took 58645 ns [ 331.485372][ T8221] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1004'. [ 331.507098][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 332.682058][ T8234] SET target dimension over the limit! [ 336.000201][ T8260] loop1: detected capacity change from 0 to 32768 [ 336.064773][ T8260] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1017 (8260) [ 336.354275][ T8260] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 336.365157][ T8260] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 336.374126][ T8260] BTRFS info (device loop1): setting nodatacow, compression disabled [ 336.382256][ T8260] BTRFS info (device loop1): setting datasum, datacow enabled [ 336.389860][ T8260] BTRFS info (device loop1): force clearing of disk cache [ 336.397106][ T8260] BTRFS info (device loop1): enabling ssd optimizations [ 336.404150][ T8260] BTRFS info (device loop1): using spread ssd allocation scheme [ 336.411820][ T8260] BTRFS info (device loop1): turning on sync discard [ 336.418577][ T8260] BTRFS info (device loop1): turning off barriers [ 336.425119][ T8260] BTRFS info (device loop1): enabling auto defrag [ 336.431568][ T8260] BTRFS info (device loop1): not using ssd optimizations [ 336.438672][ T8260] BTRFS info (device loop1): not using spread ssd allocation scheme [ 336.446829][ T8260] BTRFS info (device loop1): using free space tree [ 337.699842][ T8293] 9pnet_fd: p9_fd_create_unix (8293): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 338.073654][ T8260] BTRFS info (device loop1): rebuilding free space tree [ 340.457224][ T4266] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 342.236590][ T8316] ptrace attach of "./syz-executor exec"[8322] was attempted by "./syz-executor exec"[8316] [ 342.644635][ T8332] syz.6.1033 sent an empty control message without MSG_MORE. [ 342.654479][ T8330] loop1: detected capacity change from 0 to 1024 [ 345.060147][ T8351] loop6: detected capacity change from 0 to 32768 [ 345.107867][ T8351] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.1038 (8351) [ 345.185474][ T8351] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 345.195680][ T8351] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 345.204373][ T8351] BTRFS info (device loop6): setting nodatacow, compression disabled [ 345.212474][ T8351] BTRFS info (device loop6): setting datasum, datacow enabled [ 345.220038][ T8351] BTRFS info (device loop6): force clearing of disk cache [ 345.227177][ T8351] BTRFS info (device loop6): enabling ssd optimizations [ 345.234144][ T8351] BTRFS info (device loop6): using spread ssd allocation scheme [ 345.241825][ T8351] BTRFS info (device loop6): turning on sync discard [ 345.248582][ T8351] BTRFS info (device loop6): turning off barriers [ 345.255114][ T8351] BTRFS info (device loop6): enabling auto defrag [ 345.261534][ T8351] BTRFS info (device loop6): not using ssd optimizations [ 345.268593][ T8351] BTRFS info (device loop6): not using spread ssd allocation scheme [ 345.276656][ T8351] BTRFS info (device loop6): using free space tree [ 346.534972][ T8351] BTRFS info (device loop6): rebuilding free space tree [ 346.602758][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 346.602772][ T27] audit: type=1800 audit(2000000118.320:162): pid=8351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1038" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 346.650011][ T8377] netlink: 'syz.4.1040': attribute type 12 has an invalid length. [ 346.664621][ T8351] BTRFS info (device loop6): balance: start -sconvert=raid0,soft [ 346.675077][ T8351] BTRFS info (device loop6): left=0, need=98304, flags=10 [ 346.682595][ T8351] BTRFS info (device loop6): space_info SYSTEM has 0 free, is not full [ 346.691497][ T8351] BTRFS info (device loop6): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 346.705197][ T8351] BTRFS info (device loop6): global_block_rsv: size 1441792 reserved 1441792 [ 346.714377][ T8351] BTRFS info (device loop6): trans_block_rsv: size 0 reserved 0 [ 346.722022][ T8351] BTRFS info (device loop6): chunk_block_rsv: size 0 reserved 0 [ 346.729711][ T8351] BTRFS info (device loop6): delayed_block_rsv: size 0 reserved 0 [ 346.737567][ T8351] BTRFS info (device loop6): delayed_refs_rsv: size 0 reserved 0 [ 346.762616][ T8351] BTRFS info (device loop6): relocating block group 1048576 flags system [ 347.822539][ T8351] BTRFS info (device loop6): balance: ended with status: 0 [ 347.954528][ T8381] BTRFS warning (device loop6): failed to trim 3 block group(s), last error -512 [ 348.129084][ T8381] BTRFS warning (device loop6): failed to trim 1 device(s), last error -512 [ 348.362604][ T4833] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 350.957729][ T8424] netlink: 'syz.6.1048': attribute type 4 has an invalid length. [ 351.078739][ T8424] netlink: 'syz.6.1048': attribute type 4 has an invalid length. [ 351.767071][ T8429] rdma_rxe: rxe_register_device failed with error -23 [ 351.938257][ T8429] rdma_rxe: failed to add lo [ 357.152524][ T8464] loop5: detected capacity change from 0 to 4096 [ 358.718154][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 361.133761][ T8501] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 361.299861][ T8506] loop1: detected capacity change from 0 to 1024 [ 361.352274][ T8510] netlink: 'syz.6.1079': attribute type 1 has an invalid length. [ 362.296593][ T8510] 8021q: adding VLAN 0 to HW filter on device bond3 [ 362.359686][ T8513] bond3: (slave bridge3): making interface the new active one [ 362.369593][ T8520] genirq: Flags mismatch irq 9. 00000000 (pcmmio) vs. 00000080 (acpi) [ 362.402056][ T8513] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 362.490785][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1079'. [ 362.511318][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 362.601224][ T8522] ptrace attach of ""[8523] was attempted by "./syz-executor exec"[8522] [ 364.797753][ T8540] device vlan2 entered promiscuous mode [ 364.809419][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 364.837356][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1085'. [ 365.529005][ T8548] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 365.680076][ T8559] netlink: 'syz.3.1090': attribute type 12 has an invalid length. [ 365.959679][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1093'. [ 365.979931][ T8566] device bridge_slave_1 left promiscuous mode [ 365.987589][ T8566] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.830781][ T8566] device bridge_slave_0 left promiscuous mode [ 366.847759][ T8566] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.153636][ T27] audit: type=1326 audit(2000000138.870:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.5.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b38e929 code=0x7ffc0000 [ 367.863694][ T27] audit: type=1326 audit(2000000138.870:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.5.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f102b38e929 code=0x7ffc0000 [ 367.891533][ T27] audit: type=1326 audit(2000000138.870:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.5.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b38e929 code=0x7ffc0000 [ 368.255052][ T27] audit: type=1326 audit(2000000138.870:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.5.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102b38e929 code=0x7ffc0000 [ 369.803470][ T8598] loop5: detected capacity change from 0 to 2048 [ 370.023977][ T8598] loop5: p1 < > p3 [ 370.054282][ T8598] loop5: p3 size 134217728 extends beyond EOD, truncated [ 370.186338][ T8611] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 370.302516][ T3637] loop5: p1 < > p3 [ 370.312856][ T3637] loop5: p3 size 134217728 extends beyond EOD, truncated [ 372.576667][ T8630] loop6: detected capacity change from 0 to 1024 [ 372.718925][ T4283] udevd[4283]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 372.814608][ T4257] udevd[4257]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 372.914082][ T27] audit: type=1326 audit(2000000144.600:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 373.295403][ T27] audit: type=1326 audit(2000000144.600:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 373.394332][ T27] audit: type=1326 audit(2000000144.610:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 373.423983][ T27] audit: type=1326 audit(2000000144.610:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 373.476903][ T4257] udevd[4257]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 373.566831][ T4283] udevd[4283]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 377.261920][ T8660] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 377.269234][ T8660] IPv6: NLM_F_CREATE should be set when creating new route [ 377.350179][ T8665] loop1: detected capacity change from 0 to 512 [ 377.483008][ T8665] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 377.497642][ T8665] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.149287][ T8675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 378.156590][ T8675] IPv6: NLM_F_CREATE should be set when creating new route [ 378.228487][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.235660][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.473454][ T27] audit: type=1326 audit(2000000150.190:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.3.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 378.988750][ T27] audit: type=1326 audit(2000000150.190:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.3.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 379.049175][ T27] audit: type=1326 audit(2000000150.190:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.3.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 379.416024][ T27] audit: type=1326 audit(2000000150.190:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.3.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 381.188531][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 381.990576][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1131'. [ 382.902641][ T8712] loop1: detected capacity change from 0 to 256 [ 382.912709][ T8712] exfat: Deprecated parameter 'namecase' [ 382.940737][ T8712] exfat: Unknown parameter 'eprors' [ 384.419317][ T8712] xt_HMARK: proto mask must be zero with L3 mode [ 384.585487][ T8725] loop6: detected capacity change from 0 to 512 [ 384.787908][ T8725] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 386.126055][ T8725] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.1149: casefold flag without casefold feature [ 386.238588][ T8725] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1149: couldn't read orphan inode 15 (err -117) [ 386.588133][ T8725] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 390.508665][ T4833] EXT4-fs (loop6): unmounting filesystem. [ 391.339937][ T8758] loop5: detected capacity change from 0 to 1024 [ 391.354918][ T8758] EXT4-fs: Ignoring removed orlov option [ 391.424784][ T8758] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 391.502127][ T8758] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2748: inode #12: comm syz.5.1146: corrupted in-inode xattr [ 391.670625][ T8770] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1146'. [ 391.676416][ T8758] EXT4-fs (loop5): Remounting filesystem read-only [ 392.538326][ T8777] loop1: detected capacity change from 0 to 512 [ 392.690140][ T8777] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 392.702417][ T8777] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.768410][ T4784] EXT4-fs (loop5): unmounting filesystem. [ 392.796214][ T8777] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.1152: corrupted inode contents [ 392.915483][ T8777] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #2: comm syz.1.1152: mark_inode_dirty error [ 393.025320][ T8777] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.1152: corrupted inode contents [ 393.044897][ T8777] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.1152: mark_inode_dirty error [ 393.152178][ T8789] loop5: detected capacity change from 0 to 164 [ 393.510007][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 394.616151][ T8799] loop5: detected capacity change from 0 to 512 [ 394.672037][ T8799] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 394.734832][ T8799] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 394.769810][ T8801] loop1: detected capacity change from 0 to 128 [ 394.831415][ T8799] EXT4-fs (loop5): 1 truncate cleaned up [ 394.838905][ T8799] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 394.865191][ T8801] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 394.963567][ T8801] ext4 filesystem being mounted at /212/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 395.148923][ T4784] EXT4-fs (loop5): unmounting filesystem. [ 396.807430][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 400.641215][ T8846] loop5: detected capacity change from 0 to 512 [ 400.683655][ T8846] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 400.731900][ T8846] EXT4-fs (loop5): 1 truncate cleaned up [ 400.757752][ T8846] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 400.977437][ T8864] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 400.997361][ T8864] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 401.214381][ T4392] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 401.491059][ T4392] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.672341][ T4392] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 401.813924][ T4392] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.831442][ T4392] usb 6-1: config 0 descriptor?? [ 402.366549][ T4392] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 402.889706][ T4392] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0001/input/input5 [ 402.935401][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1181'. [ 403.064104][ T4392] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 403.334416][ T8418] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 403.499135][ T8415] usb 6-1: USB disconnect, device number 2 [ 403.545264][ T8418] usb 7-1: Using ep0 maxpacket: 16 [ 403.565251][ T8418] usb 7-1: config 0 has an invalid interface number: 243 but max is 0 [ 403.591167][ T8418] usb 7-1: config 0 has no interface number 0 [ 403.606092][ T8418] usb 7-1: config 0 interface 243 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 403.662548][ T8418] usb 7-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=d0.ce [ 403.671171][ T8888] fido_id[8888]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 403.721167][ T8418] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.749381][ T8418] usb 7-1: Product: syz [ 403.756259][ T8418] usb 7-1: Manufacturer: syz [ 403.761390][ T8418] usb 7-1: SerialNumber: syz [ 403.825048][ T8418] usb 7-1: config 0 descriptor?? [ 403.852154][ T8887] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 403.883468][ T8418] keyspan 7-1:0.243: Keyspan 1 port adapter converter detected [ 403.910110][ T8418] keyspan 7-1:0.243: found no endpoint descriptor for endpoint 84 [ 403.936093][ T8418] keyspan 7-1:0.243: found no endpoint descriptor for endpoint 82 [ 403.965020][ T8418] keyspan 7-1:0.243: found no endpoint descriptor for endpoint 1 [ 404.001511][ T8418] keyspan 7-1:0.243: found no endpoint descriptor for endpoint 2 [ 404.055693][ T8418] keyspan 7-1:0.243: found no endpoint descriptor for endpoint 83 [ 404.063809][ T8418] keyspan 7-1:0.243: found no endpoint descriptor for endpoint 3 [ 404.125578][ T8418] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 404.191762][ T4784] EXT4-fs (loop5): unmounting filesystem. [ 404.210202][ T8895] capability: warning: `syz.4.1184' uses 32-bit capabilities (legacy support in use) [ 404.346065][ T27] audit: type=1326 audit(2000000176.070:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 404.374536][ T27] audit: type=1326 audit(2000000176.090:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 404.397525][ T27] audit: type=1326 audit(2000000176.090:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 404.420448][ T27] audit: type=1326 audit(2000000176.090:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 404.443708][ T27] audit: type=1326 audit(2000000176.090:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 404.466993][ T27] audit: type=1326 audit(2000000176.090:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 404.489944][ T27] audit: type=1326 audit(2000000176.090:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 404.512965][ T27] audit: type=1326 audit(2000000176.090:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 404.536663][ T27] audit: type=1326 audit(2000000176.090:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 404.560341][ T27] audit: type=1326 audit(2000000176.090:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f63fc7858e7 code=0x7ffc0000 [ 404.644076][ T4392] usb 7-1: USB disconnect, device number 7 [ 404.672295][ T4392] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 404.695759][ T4392] keyspan 7-1:0.243: device disconnected [ 407.002960][ T8922] bond0: (slave syz_tun): Releasing backup interface [ 407.035548][ T8923] binder_alloc: 8918: pid 8918 spamming oneway? 2 buffers allocated for a total size of 5120 [ 407.090906][ T8922] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 407.117528][ T8927] binder_alloc: 8918: pid 8918 spamming oneway? 3 buffers allocated for a total size of 5128 [ 407.141341][ T8922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 407.179743][ T8922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 407.214083][ T8922] device bridge_slave_0 left promiscuous mode [ 407.220357][ T8922] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.275748][ T8922] device bridge_slave_1 left promiscuous mode [ 407.286864][ T8922] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.320895][ T8922] bond0: (slave bond_slave_0): Releasing backup interface [ 407.351529][ T8922] bond0: (slave bond_slave_1): Releasing backup interface [ 407.401786][ T8922] team0: Port device team_slave_0 removed [ 407.475636][ T8922] team0: Port device team_slave_1 removed [ 407.482142][ T8922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.510533][ T8922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.532201][ T8922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.550008][ T8922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.590859][ T8922] team0: Port device geneve0 removed [ 407.622737][ T8925] team0: Mode changed to "activebackup" [ 407.635667][ T8928] device vlan0 entered promiscuous mode [ 407.698663][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1191'. [ 409.129300][ T5027] Bluetooth: hci5: Frame reassembly failed (-84) [ 409.137500][ T5027] Bluetooth: hci5: Frame reassembly failed (-84) [ 409.162787][ T8977] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1207'. [ 411.237360][ T9004] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1213'. [ 411.246768][ T9004] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1213'. [ 411.266006][ T4274] Bluetooth: hci5: command 0x1003 tx timeout [ 411.272609][ T4282] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 411.736012][ T9008] loop1: detected capacity change from 0 to 8 [ 411.923123][ T9008] SQUASHFS error: Failed to read block 0x4de: -5 [ 411.935894][ T9008] SQUASHFS error: Failed to read block 0x4de: -5 [ 411.950405][ T27] kauditd_printk_skb: 160 callbacks suppressed [ 411.950416][ T27] audit: type=1800 audit(2000000183.670:345): pid=9008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1217" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 411.952222][ T9011] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 413.155032][ T9022] ptrace attach of "./syz-executor exec"[4266] was attempted by "./syz-executor exec"[9022] [ 413.179124][ T9024] device vlan2 entered promiscuous mode [ 413.198461][ T9024] device team0 entered promiscuous mode [ 417.178440][ T9067] loop1: detected capacity change from 0 to 256 [ 417.243684][ T9067] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 417.289646][ T9067] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 417.308818][ T9067] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 417.637338][ T9074] tipc: Started in network mode [ 417.642254][ T9074] tipc: Node identity fa09bbbc80bd, cluster identity 4711 [ 418.518788][ T9074] tipc: Enabled bearer , priority 0 [ 418.560813][ T9068] tipc: Resetting bearer [ 419.554025][ T4310] tipc: Node number set to 2058664892 [ 421.124130][ T9111] xt_nat: multiple ranges no longer supported [ 423.780511][ T9068] tipc: Disabling bearer [ 423.788178][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1243'. [ 427.910918][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1262'. [ 427.937775][ T9166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1262'. [ 429.056812][ T9174] loop5: detected capacity change from 0 to 128 [ 429.214995][ T9174] EXT4-fs: Ignoring removed nobh option [ 429.536863][ T9174] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 429.698179][ T9174] ext4 filesystem being mounted at /221/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 430.008909][ T9157] Process accounting resumed [ 430.236052][ T4784] EXT4-fs (loop5): unmounting filesystem. [ 431.825309][ T9197] netlink: 'syz.1.1271': attribute type 1 has an invalid length. [ 431.959200][ T9199] overlayfs: failed to clone upperpath [ 432.582332][ T9203] bond2: (slave veth9): Enslaving as an active interface with a down link [ 432.665324][ T9205] bond2: (slave veth11): Enslaving as an active interface with a down link [ 432.685283][ T9197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1271'. [ 432.695827][ T9197] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.024146][ T9215] Cannot find set identified by id 0 to match [ 433.248079][ T9217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.523118][ T27] audit: type=1326 audit(2000000205.240:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0981d8e929 code=0x7ffc0000 [ 433.663964][ T27] audit: type=1326 audit(2000000205.370:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0981d8e929 code=0x7ffc0000 [ 433.766879][ T27] audit: type=1326 audit(2000000205.370:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0981d8e929 code=0x7ffc0000 [ 433.913059][ T9227] loop1: detected capacity change from 0 to 1024 [ 433.929144][ T9227] EXT4-fs: inline encryption not supported [ 433.935130][ T9227] EXT4-fs: Ignoring removed bh option [ 433.941192][ T27] audit: type=1326 audit(2000000205.370:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0981d8e929 code=0x7ffc0000 [ 433.963816][ T27] audit: type=1326 audit(2000000205.440:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9212 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f0981d8e929 code=0x7ffc0000 [ 433.994631][ T9222] unsupported nla_type 36 [ 434.818658][ T9227] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 435.180176][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 436.480320][ T9257] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 436.766052][ T9261] device vlan2 entered promiscuous mode [ 436.771632][ T9261] device bond0 entered promiscuous mode [ 436.777590][ T9261] device bond_slave_0 entered promiscuous mode [ 436.784248][ T9261] device bond_slave_1 entered promiscuous mode [ 436.790559][ T9261] device wlan1 entered promiscuous mode [ 437.223266][ T9277] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1289'. [ 437.232330][ T9277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.226444][ T9307] netlink: 'syz.4.1301': attribute type 1 has an invalid length. [ 439.390577][ T9307] 8021q: adding VLAN 0 to HW filter on device bond4 [ 439.491846][ T9313] bond4: (slave ip6gretap2): making interface the new active one [ 439.520754][ T9313] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 439.544087][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 439.562920][ T9315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1303'. [ 439.579735][ T9315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1303'. [ 439.598469][ T9315] device batadv0 entered promiscuous mode [ 439.606954][ T9315] device batadv0 left promiscuous mode [ 439.660528][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.666912][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.758279][ T9320] netlink: 'syz.3.1305': attribute type 10 has an invalid length. [ 439.766992][ T9320] device lo entered promiscuous mode [ 439.772803][ T9320] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 439.804360][ T9320] netlink: 'syz.3.1305': attribute type 10 has an invalid length. [ 439.827253][ T9320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.841281][ T9320] team0: Port device bond0 added [ 440.115430][ T9328] loop1: detected capacity change from 0 to 512 [ 440.155941][ T9328] EXT4-fs: Ignoring removed nobh option [ 440.216827][ T9328] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 440.514453][ T9333] xt_recent: hitcount (692) is larger than allowed maximum (255) [ 441.606769][ T9338] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 441.621582][ T9338] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 441.698590][ T9338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 441.710083][ T9338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 441.727947][ T9338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 441.738376][ T9338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 442.181245][ T9328] EXT4-fs (loop1): failed to open journal device unknown-block(4,0) -6 [ 449.274069][ T9397] loop6: detected capacity change from 0 to 128 [ 449.328083][ T9403] netlink: 'syz.1.1330': attribute type 4 has an invalid length. [ 449.366074][ T9400] loop5: detected capacity change from 0 to 1764 [ 450.155952][ T9397] 9pnet: Could not find request transport: f [ 450.223471][ T9405] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1327'. [ 450.613636][ T9413] syz.6.1326: attempt to access beyond end of device [ 450.613636][ T9413] loop6: rw=2049, sector=145, nr_sectors = 256 limit=128 [ 450.654619][ T9417] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.670178][ T9417] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.680399][ T9417] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.968756][ T9417] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.230041][ T9416] support for the xor transformation has been removed. [ 451.295690][ T9417] device geneve2 entered promiscuous mode [ 451.332107][ T9417] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.345975][ T9417] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.360300][ T9417] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.372596][ T9417] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.769116][ T9436] loop5: detected capacity change from 0 to 1024 [ 452.193951][ T9448] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1338'. [ 452.475365][ T9436] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 452.549714][ T9451] ipt_REJECT: ECHOREPLY no longer supported. [ 452.561650][ T9436] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.541412][ T4784] EXT4-fs (loop5): unmounting filesystem. [ 456.742174][ T9469] 9pnet: Could not find request transport: f [ 456.781148][ T27] audit: type=1326 audit(2000000228.507:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.1.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 456.843083][ T27] audit: type=1326 audit(2000000228.507:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.1.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 457.497640][ T27] audit: type=1326 audit(2000000228.527:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.1.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 457.565304][ T27] audit: type=1326 audit(2000000228.527:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.1.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 457.632035][ T27] audit: type=1326 audit(2000000228.527:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.1.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 457.695947][ T27] audit: type=1326 audit(2000000228.527:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.1.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 458.689287][ T27] audit: type=1326 audit(2000000228.527:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.1.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 458.907292][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1357'. [ 459.185133][ T27] audit: type=1326 audit(2000000228.527:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.1.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 459.287461][ T6660] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 459.322645][ T27] audit: type=1326 audit(2000000228.547:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.1.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 459.378229][ T27] audit: type=1326 audit(2000000228.547:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.1.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fc78e929 code=0x7ffc0000 [ 460.655338][ T6660] usb 2-1: Using ep0 maxpacket: 32 [ 461.099793][ T6660] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.124445][ T6660] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 461.148511][ T6660] usb 2-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 461.164729][ T6660] usb 2-1: config 0 interface 0 has no altsetting 1 [ 461.196251][ T6660] usb 2-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 461.222521][ T6660] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.274344][ T9535] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.283821][ T6660] usb 2-1: Product: syz [ 461.291232][ T6660] usb 2-1: Manufacturer: syz [ 461.297972][ T6660] usb 2-1: SerialNumber: syz [ 461.304643][ T6660] usb 2-1: config 0 descriptor?? [ 461.312622][ T9535] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.486727][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1364'. [ 461.504007][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1364'. [ 461.790776][ T9542] xt_TCPMSS: Only works on TCP SYN packets [ 462.017736][ T9535] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.465590][ T9535] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.520887][ T6660] usb 2-1: can't set config #0, error -71 [ 462.528960][ T6660] usb 2-1: USB disconnect, device number 8 [ 462.562773][ T9535] device geneve2 entered promiscuous mode [ 462.915724][ T9535] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.955818][ T9535] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.975197][ T9535] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.382206][ T9535] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.202792][ T9560] tty tty1: ldisc open failed (-12), clearing slot 0 [ 464.536995][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1373'. [ 466.600614][ T9582] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 9582 comm: syz.4.1379) [ 466.616272][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 466.616284][ T27] audit: type=1800 audit(2000000238.345:391): pid=9582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1379" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=48754 res=0 errno=0 [ 466.734975][ T9587] loop5: detected capacity change from 0 to 64 [ 467.262295][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1379'. [ 468.028345][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'. [ 468.051941][ T9589] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1382'. [ 474.047817][ T9653] loop5: detected capacity change from 0 to 4096 [ 474.821404][ T9653] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 475.127379][ T9665] xt_CT: You must specify a L4 protocol and not use inversions on it [ 475.545708][ T9650] 9pnet: Could not find request transport: f [ 475.793588][ T4784] EXT4-fs (loop5): unmounting filesystem. [ 482.629771][ T9704] loop5: detected capacity change from 0 to 512 [ 482.714360][ T9704] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 489.000364][ T4784] EXT4-fs (loop5): unmounting filesystem. [ 489.140783][ T9721] loop1: detected capacity change from 0 to 128 [ 490.090314][ T9721] 9pnet: Could not find request transport: f [ 490.151453][ T9733] syz.1.1415: attempt to access beyond end of device [ 490.151453][ T9733] loop1: rw=2049, sector=145, nr_sectors = 472 limit=128 [ 490.191081][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1418'. [ 492.843465][ T9754] xt_NFQUEUE: number of total queues is 0 [ 492.887093][ T9768] netlink: 'syz.5.1428': attribute type 1 has an invalid length. [ 493.028636][ T9768] device veth5 entered promiscuous mode [ 493.218290][ T9768] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 493.531671][ T9774] loop6: detected capacity change from 0 to 512 [ 493.706423][ T9774] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 493.754812][ T9774] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 494.098673][ T9785] Quota error (device loop6): do_check_range: Getting block 134217728 out of range 0-5 [ 494.531315][ T4833] EXT4-fs (loop6): unmounting filesystem. [ 494.849504][ T4392] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 495.469484][ T4392] usb 2-1: Using ep0 maxpacket: 32 [ 495.476455][ T4392] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 495.499503][ T4392] usb 2-1: config 0 has no interface number 0 [ 495.505639][ T4392] usb 2-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.539475][ T4392] usb 2-1: config 0 interface 2 has no altsetting 0 [ 495.546127][ T4392] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 495.570722][ T4392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.601749][ T4392] usb 2-1: config 0 descriptor?? [ 495.900456][ T9802] loop6: detected capacity change from 0 to 4096 [ 495.976584][ T9802] EXT4-fs error (device loop6): ext4_quota_enable:7022: inode #4: comm syz.6.1438: iget: special inode unallocated [ 496.176107][ T9802] EXT4-fs error (device loop6): ext4_quota_enable:7025: comm syz.6.1438: Bad quota inode: 4, type: 1 [ 496.336616][ T4392] uclogic 0003:5543:0781.0002: unknown main item tag 0x0 [ 496.500806][ T9802] EXT4-fs warning (device loop6): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 496.523785][ T4392] uclogic 0003:5543:0781.0002: unknown main item tag 0x0 [ 496.612727][ T9802] EXT4-fs (loop6): mount failed [ 496.650133][ T4392] uclogic 0003:5543:0781.0002: unknown main item tag 0x0 [ 496.691022][ T4392] uclogic 0003:5543:0781.0002: item fetching failed at offset 6/7 [ 496.772181][ T4392] uclogic 0003:5543:0781.0002: parse failed [ 496.788364][ T4392] uclogic: probe of 0003:5543:0781.0002 failed with error -22 [ 496.840826][ T4392] usb 2-1: USB disconnect, device number 9 [ 497.882644][ T9840] 8021q: VLANs not supported on vcan0 [ 499.393516][ T9863] netlink: 'syz.6.1448': attribute type 4 has an invalid length. [ 499.401525][ T9863] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1448'. [ 500.096512][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 500.110640][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 500.209466][ T9870] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 501.293108][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.299449][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.371284][ T9875] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.380960][ T9875] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.390161][ T9875] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.398872][ T9875] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.736741][ T9875] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 502.140392][ T4282] Bluetooth: hci5: command 0x1003 tx timeout [ 502.172627][ T4274] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 503.671543][ T9902] 9pnet_virtio: no channels available for device [ 504.047585][ T9906] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1463'. [ 504.352027][ T9917] netlink: 'syz.3.1468': attribute type 1 has an invalid length. [ 504.435725][ T9917] bond2: (slave veth7): Enslaving as an active interface with a down link [ 505.181915][ T9926] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1471'. [ 505.212506][ T9923] bond2: (slave veth9): Enslaving as an active interface with a down link [ 505.274570][ T9917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1468'. [ 505.371440][ T9917] 8021q: adding VLAN 0 to HW filter on device bond2 [ 506.234275][ T27] audit: type=1326 audit(2000000277.951:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 506.262905][ T27] audit: type=1326 audit(2000000277.971:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 506.286867][ T27] audit: type=1326 audit(2000000277.971:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 506.325020][ T27] audit: type=1326 audit(2000000277.971:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 506.421146][ T27] audit: type=1326 audit(2000000277.971:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 506.501334][ T27] audit: type=1326 audit(2000000277.971:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 506.575852][ T27] audit: type=1326 audit(2000000277.971:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 506.740018][ T27] audit: type=1326 audit(2000000277.971:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 506.762934][ T27] audit: type=1326 audit(2000000277.971:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 506.811641][ T27] audit: type=1326 audit(2000000277.971:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fbff0f8e929 code=0x7ffc0000 [ 511.151461][T10001] loop1: detected capacity change from 0 to 512 [ 512.813896][T10005] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 513.245041][T10001] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1491: iget: bad extended attribute block 1 [ 513.306092][T10001] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1491: couldn't read orphan inode 15 (err -117) [ 513.356668][T10001] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 513.466954][T10001] EXT4-fs warning (device loop1): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 513.519880][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 513.681745][ T6661] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 514.412825][T10022] loop1: detected capacity change from 0 to 4096 [ 514.501779][ T6661] usb 6-1: Using ep0 maxpacket: 32 [ 514.508984][ T6661] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 514.555276][ T6661] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.592916][ T6661] usb 6-1: config 0 descriptor?? [ 514.625287][ T6661] as10x_usb: device has been detected [ 514.664920][ T6661] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 516.020083][ T6661] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 516.053319][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1502'. [ 516.125452][T10043] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 516.151096][ T6661] as10x_usb: error during firmware upload part1 [ 516.196031][ T6661] Registered device nBox DVB-T Dongle [ 516.223589][ T6661] usb 6-1: USB disconnect, device number 3 [ 516.402157][T10049] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1501'. [ 516.437300][ T6661] Unregistered device nBox DVB-T Dongle [ 516.459314][ T6661] as10x_usb: device has been disconnected [ 516.473142][T10049] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1501'. [ 516.500037][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1502'. [ 518.847040][T10081] device vlan2 entered promiscuous mode [ 519.495019][T10081] device bond0 entered promiscuous mode [ 524.022764][T10120] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1520'. [ 524.031893][T10120] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1520'. [ 524.881811][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'. [ 525.052185][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'. [ 527.359618][T10143] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 527.991821][T10156] general protection fault, probably for non-canonical address 0xdffffc000000005d: 0000 [#1] PREEMPT SMP KASAN [ 528.003611][T10156] KASAN: null-ptr-deref in range [0x00000000000002e8-0x00000000000002ef] [ 528.012071][T10156] CPU: 0 PID: 10156 Comm: syz.3.1533 Not tainted 6.1.144-syzkaller #0 [ 528.020243][T10156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 528.030318][T10156] RIP: 0010:hfsc_qlen_notify+0x2a/0x160 [ 528.035900][T10156] Code: 55 41 57 41 56 41 55 41 54 53 48 89 f3 49 bc 00 00 00 00 00 fc ff df e8 24 db 37 f9 4c 8d b3 ec 02 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 e3 00 00 00 41 8b 2e 31 ff 89 ee e8 5d [ 528.055529][T10156] RSP: 0018:ffffc9000e14ee90 EFLAGS: 00010203 [ 528.061615][T10156] RAX: 000000000000005d RBX: 0000000000000000 RCX: 0000000000080000 [ 528.069606][T10156] RDX: ffffc900062ea000 RSI: 0000000000000267 RDI: 0000000000000268 [ 528.077591][T10156] RBP: dffffc0000000000 R08: ffff8880548d5940 R09: 0000000000000002 [ 528.085556][T10156] R10: 00000000ffffffff R11: 0000000000000002 R12: dffffc0000000000 [ 528.093528][T10156] R13: ffff88802a0eb000 R14: 00000000000002ec R15: ffff88802a0eb000 [ 528.101527][T10156] FS: 00007fbff1d3b6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 528.110459][T10156] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 528.117041][T10156] CR2: 0000001b2e719ff8 CR3: 00000000481dd000 CR4: 00000000003506f0 [ 528.125026][T10156] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 528.133011][T10156] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 528.140980][T10156] Call Trace: [ 528.144275][T10156] [ 528.147234][T10156] qdisc_tree_reduce_backlog+0x287/0x470 [ 528.152884][T10156] ? qdisc_tree_reduce_backlog+0x38/0x470 [ 528.158606][T10156] codel_change+0x970/0xdb0 [ 528.163122][T10156] ? memset+0x1e/0x40 [ 528.167130][T10156] ? qdisc_alloc+0x75d/0xa50 [ 528.171732][T10156] ? qdisc_create+0x16a/0x1090 [ 528.176505][T10156] ? rtnetlink_rcv_msg+0x79b/0xed0 [ 528.181642][T10156] ? netlink_rcv_skb+0x1de/0x420 [ 528.186618][T10156] ? netlink_unicast+0x74c/0x8c0 [ 528.191572][T10156] ? netlink_sendmsg+0x89e/0xbc0 [ 528.196529][T10156] ? ____sys_sendmsg+0x59b/0x970 [ 528.201472][T10156] ? ___sys_sendmsg+0x21c/0x290 [ 528.206334][T10156] ? __se_sys_sendmsg+0x19e/0x270 [ 528.211378][T10156] ? do_syscall_64+0x4c/0xa0 [ 528.215971][T10156] ? codel_reset+0x150/0x150 [ 528.220588][T10156] codel_init+0x1d4/0x3a0 [ 528.224952][T10156] ? qdisc_peek_dequeued+0x1f0/0x1f0 [ 528.230264][T10156] qdisc_create+0x7cb/0x1090 [ 528.234883][T10156] ? qdisc_notify+0x370/0x370 [ 528.239588][T10156] ? lockdep_rtnl_is_held+0x22/0x30 [ 528.244820][T10156] ? qdisc_lookup+0x175/0x6c0 [ 528.249516][T10156] tc_modify_qdisc+0xb0f/0x1be0 [ 528.254393][T10156] ? qdisc_offload_query_caps+0x140/0x140 [ 528.260152][T10156] ? qdisc_offload_query_caps+0x140/0x140 [ 528.265876][T10156] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 528.271010][T10156] rtnetlink_rcv_msg+0x79b/0xed0 [ 528.275979][T10156] ? rtnetlink_bind+0x80/0x80 [ 528.280674][T10156] ? mark_lock+0x94/0x320 [ 528.285056][T10156] ? __lock_acquire+0x12e5/0x7c50 [ 528.290120][T10156] ? netlink_sendmsg+0x645/0xbc0 [ 528.295094][T10156] ? verify_lock_unused+0x140/0x140 [ 528.300336][T10156] netlink_rcv_skb+0x1de/0x420 [ 528.305113][T10156] ? rtnetlink_bind+0x80/0x80 [ 528.309790][T10156] ? netlink_ack+0x1100/0x1100 [ 528.314561][T10156] ? netlink_deliver_tap+0x2e/0x1b0 [ 528.319767][T10156] netlink_unicast+0x74c/0x8c0 [ 528.324539][T10156] netlink_sendmsg+0x89e/0xbc0 [ 528.329315][T10156] ? netlink_getsockopt+0x540/0x540 [ 528.334533][T10156] ? aa_sock_msg_perm+0x94/0x150 [ 528.339507][T10156] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 528.344820][T10156] ? security_socket_sendmsg+0x7c/0xa0 [ 528.350310][T10156] ? netlink_getsockopt+0x540/0x540 [ 528.355511][T10156] ____sys_sendmsg+0x59b/0x970 [ 528.360287][T10156] ? __sys_sendmsg_sock+0x30/0x30 [ 528.365316][T10156] ? __import_iovec+0x315/0x500 [ 528.370176][T10156] ? import_iovec+0x6f/0xa0 [ 528.374684][T10156] ___sys_sendmsg+0x21c/0x290 [ 528.379374][T10156] ? __sys_sendmsg+0x270/0x270 [ 528.384154][T10156] ? put_user_ifreq+0x81/0xb0 [ 528.388869][T10156] ? __fdget+0x17c/0x200 [ 528.393147][T10156] __se_sys_sendmsg+0x19e/0x270 [ 528.398054][T10156] ? __se_sys_futex+0x14a/0x440 [ 528.402974][T10156] ? __x64_sys_sendmsg+0x80/0x80 [ 528.407937][T10156] ? lockdep_hardirqs_on+0x94/0x140 [ 528.413146][T10156] do_syscall_64+0x4c/0xa0 [ 528.417563][T10156] ? clear_bhb_loop+0x60/0xb0 [ 528.422247][T10156] ? clear_bhb_loop+0x60/0xb0 [ 528.426952][T10156] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 528.432843][T10156] RIP: 0033:0x7fbff0f8e929 [ 528.437270][T10156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.456873][T10156] RSP: 002b:00007fbff1d3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.465280][T10156] RAX: ffffffffffffffda RBX: 00007fbff11b5fa0 RCX: 00007fbff0f8e929 [ 528.473255][T10156] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000007 [ 528.481228][T10156] RBP: 00007fbff1010b39 R08: 0000000000000000 R09: 0000000000000000 [ 528.489216][T10156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.497187][T10156] R13: 0000000000000000 R14: 00007fbff11b5fa0 R15: 00007ffd0e0e65f8 [ 528.505171][T10156] [ 528.508192][T10156] Modules linked in: [ 528.512259][T10156] ---[ end trace 0000000000000000 ]--- [ 528.517847][T10156] RIP: 0010:hfsc_qlen_notify+0x2a/0x160 [ 528.523446][T10156] Code: 55 41 57 41 56 41 55 41 54 53 48 89 f3 49 bc 00 00 00 00 00 fc ff df e8 24 db 37 f9 4c 8d b3 ec 02 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 e3 00 00 00 41 8b 2e 31 ff 89 ee e8 5d [ 528.543101][T10156] RSP: 0018:ffffc9000e14ee90 EFLAGS: 00010203 [ 528.549220][T10156] RAX: 000000000000005d RBX: 0000000000000000 RCX: 0000000000080000 [ 528.557254][T10156] RDX: ffffc900062ea000 RSI: 0000000000000267 RDI: 0000000000000268 [ 528.565259][T10156] RBP: dffffc0000000000 R08: ffff8880548d5940 R09: 0000000000000002 [ 528.573245][T10156] R10: 00000000ffffffff R11: 0000000000000002 R12: dffffc0000000000 [ 528.581269][T10156] R13: ffff88802a0eb000 R14: 00000000000002ec R15: ffff88802a0eb000 [ 528.589278][T10156] FS: 00007fbff1d3b6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 528.598259][T10156] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 528.604875][T10156] CR2: 0000001b2e719ff8 CR3: 00000000481dd000 CR4: 00000000003506f0 [ 528.612845][T10156] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 528.620858][T10156] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 528.628871][T10156] Kernel panic - not syncing: Fatal exception in interrupt [ 528.636353][T10156] Kernel Offset: disabled [ 528.640680][T10156] Rebooting in 86400 seconds..