last executing test programs: 2m6.572659923s ago: executing program 2 (id=61): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40845) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) syz_usb_disconnect(0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file1'}, 0xb) 2m5.597241276s ago: executing program 2 (id=71): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}) 2m5.523861188s ago: executing program 2 (id=72): landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m5.381003881s ago: executing program 2 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 2m5.249440274s ago: executing program 2 (id=75): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r2, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000100039040000000000000000000003e4", @ANYRES32=r2, @ANYBLOB="000000000000020020001280080001007369740014000280080014"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) 2m4.750229836s ago: executing program 2 (id=79): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87d", 0x3f}, {&(0x7f00000023c0)="b0a72f5a7bb7550a097f743c7b13f5b641ad6f1b724473657d8b7c613caea8c5e5f1b3d035f26ed1ef515e471016512bb25cdf441c9d48740970762742cdb18d7c6ba6f8e8bda4b9c9656f413ba6d1a8318b0cd0a0c6442584b00fc8b8eb7f662f1a72a02c8c794e0be7cb01cd994bf103631362811806ceee46564b6e6aab5352ac28a63082884d9f02a81cc1b27189a4f1e7ba8a03738229f54373ec9867505656492ac9f93eb3cf87b47a003a460b1d579736516e8aa6087d91869f0055c1d436873126d52fdd766953e9e39aec35fbbacee79bf07a69102b96e7f9f0aced311033d31a1805b90c20394c613e9d1681685694", 0xf4}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f0000000e00)=""/247, 0xf7}], 0x2}, 0x7fff}], 0x1, 0x10000, 0x0) 2m4.13665908s ago: executing program 32 (id=79): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87d", 0x3f}, {&(0x7f00000023c0)="b0a72f5a7bb7550a097f743c7b13f5b641ad6f1b724473657d8b7c613caea8c5e5f1b3d035f26ed1ef515e471016512bb25cdf441c9d48740970762742cdb18d7c6ba6f8e8bda4b9c9656f413ba6d1a8318b0cd0a0c6442584b00fc8b8eb7f662f1a72a02c8c794e0be7cb01cd994bf103631362811806ceee46564b6e6aab5352ac28a63082884d9f02a81cc1b27189a4f1e7ba8a03738229f54373ec9867505656492ac9f93eb3cf87b47a003a460b1d579736516e8aa6087d91869f0055c1d436873126d52fdd766953e9e39aec35fbbacee79bf07a69102b96e7f9f0aced311033d31a1805b90c20394c613e9d1681685694", 0xf4}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f0000000e00)=""/247, 0xf7}], 0x2}, 0x7fff}], 0x1, 0x10000, 0x0) 19.230220182s ago: executing program 3 (id=894): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close(0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a004e220000000500002d003a2d003a0040ffffe000000102000000200002000a00000000000000ff0100000000000000000000000000019c0000000d0001007564703a"], 0x6c}, 0x1, 0x0, 0x0, 0x20000014}, 0x20040084) 19.001321888s ago: executing program 3 (id=898): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x100, 0x7, 0xa15, 0x0, 0x0, 0x4}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x64) syz_fuse_handle_req(r0, &(0x7f000000a200)="c1fd43b601662701272af37a7deda072caa09faa11b0a4ef2825e87f09fb6bc3dfd84ddd853b18203bbf08b1af6066c78b4714a789a8f3605f5920e7afc5b0a04271cebce72a797abd5b9e4a44fdcc150e6ef0e8c3d4360e74275818df26243f28cac3d84e264fd0c77d4bccbc466e7244b247d9dcee026df89aefc958d84a55d4d6922d96ce0349fe28efd6b83d15b7b08143a721c4a677b72362a49eeb15ec5b5f8569bad585e30a62ab149e7e4c7f49af9560fd52ea5730135dc3ea3f6a9a3ae6286e99e1520a43b8813ca6aad1adbb30b2459f90699e2ba3a6335ddcace3737ed8f5f21e027ac2b224389bf0c8c005ac8d8c3ae188679d34da0a2c20a910487d3c91b18770fa5ee483a3f09b882960f12e7d2eb9015895ce80b37f74a305a50deb146b1c3430f31d28e6f827b9c7070bc880d251ddb09e0e70a0512ed2600256332c43a5deaecb01f089333fc3b6721f6ed5b41f9971b7c63f57b5afa8042f5beb1ac1274676dc5406b5828247123bb7be795baee59d779bbde227c90d0a5d863936d434f2ce7a45f9b650600f32827b92e2d828915f0411f765ed82dd012561ed29b09950b96f8e490f1448dbd5e45bdc92a2a36aa67e5e9396b6376f82aa6915eac4144a102de786563e4482f0917698bc70776f8c7aad3346e18ee295af54f3c1658f9b124116a2fdac79353b095cf667dd941c3cba141b3ac8982eed42e7db649c9d49a59378216bf4323ff4c2f2992994d4144b74866a2426e19a2dc8dbf4643f97a214fc9c448512316d76c4116c3ae600dfb98cf85472da661745b638438dbf15d8dd87a8ba35205a65ba5bf79cf941454f8c788dc2eeccea412add734798c82e9c86122a91dff778edcd309c05fdca66176e9bc4d410b0ee4627eb889443b574ce205c7f4d6d428e909952712ec3dfc89552279b2da87b010051a451377a0c51a34ebba25c3b62ba98eb6f15b0fee6a7c5e0c7a72835388803a0a8342bb9f2733224c92a50dd25a9b335f243f2d8c68142aa1db1de2f899a56c623a32f8a74c16db56983eb83f6469316f2fc14860c075236a3ba40e8c265909b8fc6b03c6378269f6629bab81418789cd748d8b786f47ab8f13b0caa5ecd79dbea61330be6de5804f5c211cef78f555e7b2093f4a836cdb8a2cfa261be14e0f59d075f58e97ba16cb130f062a2261df244c57d6f477d761262b2e755c96bad3898894e80b23fae71fc31b2895513a11b0cf07551ca87325592dd10549b7d92da1cb07119fe970b8cc3aacc386ab64d32b308679593256d2fcd1f9e9b15ee93ef859e7268be776053182460e83fb873711226ec9aa5c35b15fbfa12ea0abfc7465b300bd8445c831ae77d2aab7d4bc3ba5f218fda9e90eacde1ac5119eb30073a6f291727cb94fc87a3d3013f3ebb1cd259067c571bd3c57eacce716e61f86bf4041bacadd6c676e17fb3cf89c4984aec78216854a60af68533fcdff12897c3e1b2c10cec019722623f477a512c4e5eef74a6d1ab7a735905373ca3a0b18c3eaa523c86238fba77e45aa07c1b96fa1e3ceb04e5f4742536b687ebf989918f6805cda9611ab9ed10ee33cda71a95be2da0d2c21d2295fdb334dc2057942382dc7d0f70300df3df84cf9a18f042c11243a347569771f9b82404e13684324fb06d867641c87d6d70ad15e90240f901d04a8b8c7fdfb8b84aefee1606f14a2a6995e6b8aaee1b372cd586a6daf28ad7d8ef644c58fa72f0b2f847eef72e18f1a4374c4fa3d604a9bfec6a1a4fefdfaa848279693208dfbc1dbb97b44c4f034090606e0ad312cdfb6a8f68dae7312b064c68813eb41992559ca63d88a8e90711c838f220a4da5bc7d82ec0af83da059bdccdb524a59ad26e43413f131e7703eb82158293a331456ce728c28923bf9ae644a331a667c2932ae1f11a9f9b893f802796ad029c40496c9bc49cdf41a40da1092b404da660e80f33a6012a407805e70f9a180105cd0401ed01a9f6edef4e2479e1579ea365d843c197279e3c79ae56a107dfaba6af80ed9a24d535d19827596ca2b14bf4b110fae4820fc8d0570a64ae08e315da0091f766bceb1fc990465ecb84a2d72efcb9a269816863b72f8d0869b20c14bd72f909fc3ebbf2ba2f98ce3fd7eb54b738692916eeb98ab9ea04ce3e740817dc9ac6561c71d3bc15358ebbb3027294f66eb890577f8a63ecd23beacd93c3b1498d5eefd8b68ebab3536653d5839713b07f79ebb2a6106c009cc535a2173cde3ccc65676bcae513145db5bf08546e8810fb4d193266d491fb9121935138a74c52149959a0c270cd6e244dd7cb140fcf6bf0e7536220f798bf32cda564ebde025a92617f3195e549a491a45446ff0ebfd3b047775af339e59a8da0db6223339325c6f493baa5f2c71b5710a975def3e3919a24a52351acc12e5a2ab6c171705bad0e6afd0ad2b6dd6feaedc9924fdba533fc958fab9a980b775eb4c93a499413073cf09826381b8054f9f09f4a0dfa63ac2f6cb22d001ff277ec7f493bc54d2d1d34a6dad62cd7bccab2ecd419c90087f6945311460b87daad605ff8519aba1d8311a5e565dd26655577aa13da31e01cacbb7e10e720a486e9cc450b8a21d23a6ab42838d81dc05f5be0474ab81b806fe71b888323037f3262179e451f765e419bddf7b7a99b40bcc226986efbd3765b66e56a3500de4b18b676361510bd35b3a9c6b8c08222cf7a73c4cda972190f839c2d01a4c1a77d2769c892b2f0191d2fa01d7d5ca53573e47e93ca9b56b8f0d684d5458d505ad8383f22e19024da06bf6abf30ed663cfb33e202be17bb951e9ea30cfcf65675d2fc64aa51e07237fe8391549185fac5822daa92e73778e080b1304dd757f9035092a729b9a0122d1c07d60336f18a9e46ebeced1041de2e2e8a5de6f4a814d5179bddfcdeda88888cb9ce322a516af3be2b7cf371e9193cb40e66cd41dd94e37f14c6e6469e8fa6c17a4fa3125fb6819b84e276768a7354dd3e2692a77a4a60af85bec0325d0aae72a5f4f7bf9468f1d35147910a55af546e4e3634fe2d8efe116606bf84c0e9c4d442ec8f99fe6c1cc90b99a8d1e53322b26b66928fd01738fa70c0aff84b4f02946c6fa684bd617667857cd751a3ad3d324f9574af78eec6c8c51c25e01cb0ef12a34c4ef14c810c2e69e06158f02033e15f1ec00419a91c1450338956a188fac918fb73692491baaf5976ca392c139ba0e551de260dfd6c733b572215f2af0aacc5709b0d4a3b36d23f5882c5644bb455075c5c48bd50492b395d14c36393019fa9eab8a211d71d173754663ea2af1ebdf9751006792609d4db47824d95d68583c922c04af3cdfb58f37b6f958a4b35cbd74a30a393be192fb46bfe4e722c3634c94fbf4829f25dc0b8b07cd16cf4c7e924eb02ae8d675539d32b5d9a54a43811eb98e2db317c67d5bc62901582cbb128542d6be3bc9a5b5b8a8827f2eab15e82b28b411edf67d786b76feed9e7d5ffbc86fbdb19ed80a4f5dcebd631719f8734c398938047011a251370e40d5929e9b4426081029b1339ccb08bb0dbcbb4eedd53792e43a046abc1d5c1dc8c1749052233e18e25593daee94f77f327de61867f1e791b797cc5ee43f8109cb0654d8742ece8512c323dff88702ba047e8370a1b7304536ee7cf465a0a19d965fd03543b991449d6a1a98be5ec3867314c688c5c487e59a6bb05291fda479827172bf3db615c20ea022ff7b16020299220b7c45a7181c1eda48c9a5fa7624843d112c52d99d0b27e168eeadbcd3c60b3f366175decc8c91c64a0a16d3a2e38244dd8d2de806ad741e2256075efcb0466360acaa3f65611789a821c30a13d4b60e44173be9e288dda7d7aae2f8341d9a85104170631c942eef22c10e903bf70b0ed36831d536a0cd65c11a209e37a76f3f54deb326735bec5a532431a81f303af5e9d03717a93a3da18317c459aee8db08b9f0b3331d29770fe7fc4266c15a4294c9c435a38296cd880dcedb34f63037f2a8e3ada9ead3e52abd69e5779905f82a607f70e351d2167bf1b599cfb9314a37df876bd5f2acff82f1773c512ffd308179e47b26946ebcce112273e12895145ec88c701269c93f32a5ab2bc16acd57e997d140d18c2cbed2601a05ec33a63e7edbcca673f71eecab66af5287d7d5a1dad68771ed612d29ef8ab23ef0211b4bbed6f981cd24d652f355d94f6003b01cf3d803a6e36b470402c05816aa2cd747f293300bbe891854d932df7809c7809c2cc3d06c693981e7bc21e89aa3ea8f8829c85185e4ecfd2e293bfa2b88cae2c9e4722b9cfee01911a502d59360532528661eadf2150e26a2992871f562d6fed4a36867b2521b1778c4ce955f5980b9dd9ede42fc4a1394491ebf1c1fb0d794cb8c28b103d76b2e70b0337877a222d7f3cd61f353baf7bc9e23d80f8e5b4459937d75f869c179dd9b948a70b9ba37386532790bac12f2f342fc4f2afd8a45f109331d5daf3344ade893029e322e8b7f3bdb5a49987116b31b2bd6d5bab789ca061ea42f7647c88488f734150e161e5aea78639c5bf9c2fb88da321cbfd379b38cbe6e14af979f238685e2c0ff51629cd228602dbaceff8a214cdc66528cdea114691ef619a8c9a0f9cdb7e08c5bcfc2bfd29e39af38f5db4821c648cc3d976cc455a6e6498c92511b407f3349284901562a912c5af25ff792b9c6c5dfb73519336c7d4a87e49debce7a441b7a29706173e4e4e8dacee63a06ab85dd359b508bc8a0f7002832fae10a0a38efaa475846c4205aebe777334788c3e4652086e26dcdddad991b0ce5256e113bac692d442f524d7e292b86eaf0dd8380ccd78b1489dd2ef6beaf2eb9b08b50bb2a5ff3ba8df3b226baf79a0739d8a60cf815cb347399ac4adb2cea533d3f0ce160a563f8d401e5a6100578e4c8178a7e70663e135edc645cdec2f0588fc99a0cb60dd8788e02554ade370960ce562c210e826a1eba767a09b10f46ebbe6c9166e24286331d2ff025c57a10c7b64c506d0a68642171ad965a001700561fcac2e3f548fd58d32bab5f38b36e62f5546129cea35ce856052e3e480fc639640a5301dd700c8e8d0bd6ac790910fcf2b4f159cc1531aa1c9e37b541520450dde638942081201ae8a580f28cf50530190a45f45468753a122b364be7dad79044ec8b9977d583bc0ac3ec7b9fae192397ce8693310f301c18c2cab5208b369e63c5ac18d0266834e218bb71f308c2c2f2df4a6ccadb3788860a2c733a9252b877ea1c1e849a38a328310bafae9614a6e161170c6fcbe9bd8c4177de1fd18f56805c91fb382aad767891556ff8e1b5f3ab8c18b4fa3053c981c12fa2ea017bb7596158ca533d0dd95a95d0b392222609f6ea336711a9dc50393bc41fac0d429540ad70757f2086bf1bea0132a609ea0bdeea0cef93d8b2a0d59189bffec05281e97b4722291005e9ca7e755be9070f405ab0d6c9546a5ebda2e62adcc621c2b1f6b07cd1e617d50469ef2c71647a47ef98ffbc71505e188cef3e5c774c0987664b6989794d7ca186804ccc6296da3adf22feb351792f1a9cff77413703744bf4f21212920d6a8fa1800da7a38fef7160a50f5b895e7b76f3fd830fcb9a25f3b3ccfd082a1712237e4ca665085aa1c5aa413bce813f1b7ca66105de94babb7b4a05029cc3759d00191fd9bfa0f996cc703403dd6ed2b33f2743a788041f279b767efc373314edfae1bd33f7eaaa7418a59fff7e40d02e618172f6e0abe08c855348f3cba40c8592a0521ed1e41524f20abccb2bf0ebb933e59b7036eff5a66279d578e6b2fd6c4140b33adc67f7083110d815ac55b4802000000488265b3ff2bdacec17c91bea9d6bdd931bf056d6e9790e472d874a5a3946b200493c9874d057aa6be3a1ca4da6fbb88a9d853aaa7c8ccabc83582caa65078bbe7b04625d139ed9860080d185bd9798d613ca3014713eb9e36bdeb73f14ac3fc7b2f8f594404f56dd937c0a7e865fa98e858cb0af661cbe12f15c928c4c45a982e24cd322320a96ccd54656b2c7876a5d717e42d3df13189b95ddc2b5a928dbda9ee02c30352045d02cbd854af821300f198b1ce1ea8e45c969020e5c7670fbd9b7227cfd3c809fac1df2eb18c199b27e969f32052376b450003b7ff6332ee1d9fce1b5947b72575ec6541b992fbc76f0e03fc1bb9a07d5ee3de0f34125c311d2ddb67962cf9a8230efff82c25c896621082a587139e997e0532962e84ad697a1a2b80d997c2a268ecca8b7d1095530b332ef368270bf31a75b777a7cfe8c8d324a8c558d3c65f801deac6822842f85f10a641b71ad7e5fb05f64eb3033507dc3a2e9ec02d667ef36c551f69c438e8b6c3927733d83e94f035ef3da230b759df5f5d1964815b176478c4ed94402dc8265e589171df165094a2e4e75614fc6febb8484f28ec8c1252b2d933852573926837e1edf9da0da3f91697b290c3ee5a44fcab3b10095b78b5df3701431cab31750e211d442a77dbc5e2d4d0e67bf329f9103414abd4f3879511375c8800f52f8a17ae6887214bf8634bd99075ab073540f04ff675d32190a3d1152ceee32e30719cd883a82185f89f071c02df443cf7046dce8a6ddc472ed63945faef588acf57985c7ecffa438f5427fb851ebc6a4c577a33895a8fc4628286a48d3bbcda1b769aa3194869e148ba457932fa6f2e4640e2755940e2f5a6a67796b5f88ac10f389b409c0c57bd4bf0cbe0fac2fd2f58ec498d19c43952e4522b51931712eb4002b7b208c02c4e06df99fa8e93e4b9e8b0d7a57e63aacdafb19db0fd422f8e89d1275b49963bd82b490f9e4d24cfe9700e98c73b31fdcf7b7d30d73e9bf6bd86439dc8b63171d53ca7caa860c60777436099db544164d4e4a81a483ffd5ef2980110f461529c057c40f2ee63b71a8eb2d87919726bda25a8fa2f242d3ff7bf0726d8a11d141eb87d2733f1faf456f2eccbe4c3a856702a80ba7e36cd8ef8e064e16e61eedda4478d2edaf0445e2247a76e25b4b5c68720b87bba69b4171983d95a5a764f42fa6f23466096d9a097edf84952023a4541110456b93ea558c2059156c287fc6cde7c74abd90ec539a5f43c2a641b1a34cffa2538ba565d0b57513b8c1b3df541d02d6d5a0aa2f96200dbbf64ab7c0adb868cce23ca607db6d6dd18f956185c983a90c8b4a7ec630178376ac400c61c77fcbacb979e2e07115db8a034a00ffb136f91c0b16c6d796f524f9ce6a0b72c378c8939b56bb83ca0f3d09da2b82b4d3457b568878d019f54f9cddd514a601d4edfae582f1a2674892bacf6eaba66124c797e1ebf91e1b5f12e520404d213b12770966d5c5f3435169f8867faed0107d2cd4cf0638e4f1c488122da7516820cc3d12cdc9f663778455352d2be1d8d3cd611808304554bde601e4ec4c9aa50ec22648b12f45c8d84bdcfc85f95ba0afe254df5d8b40d53adf1d4fe1dc3744bd486e3eb14775f4f4c333f751975a4a8b5bfa497850633aff3ff98deb53d1b515a08c4c474bcce46149dfd5bece51d1dfb6eaf593f8ee037404a5ce5edc2887006059cd3743448ab977899f10540b5a5eac1b9d4346654e4eb0200858b5b92525399a87859859269d3b0fa4c2159dc807548368ff701076606378b44cee2839f05ad94f659270af868cd674b44729bbb8eb2f697101bf4fb4f96d07dabaeb5b6a1cc884423fcac3d3805bffb3c8de3e801d641436ca6b1f50aabce4c7b3b1a24eb6977d5a8c84d6cce8ec9ee93d3062a4bd78ff916fbba7ab228838bd61f25759c6ac8650adbe2b346e65681dbafbb934358ca2b1b854bf42f42404a15caf99b785f132b9a20413b2d9d353220656ae271883ca9733430db09b5e8578e9d4fff032b0ee792f429791089d93876a30100a35c420a0686c125005242551df27673e0826a1c38bc028c104e0f958ae1ffb2d5221fd1a36e598065eed6a449567b41c027b6faa461d3aeee8dfb6285661af7fdcfa484fee654b633342eb122fe72d5d68ea4cfc988cabb0df39b8cbd064d489fcbc90bf313f3a29797d479a8fc12cf5b9ead0907a2dca568bc0f40d0fa4a9c3758f9bfd1ac3662a9f04260ef0d2b86a02d23759b210f38830c4a224649186b6e4b87c6b457217c86f502521940caf1e5b2eadb72951a790c94dd74b929232947b01cefd5a1483e127b1b6d216317b581455f9cf96876af837e5f88cc38a46eb2fb6cd7fcc6fce1a264167b86723829ffffc413bb0000000000000032dd6219a95418314b1e071dd59d0e96083e02cb8778069ed54137ce98bd702dead8fc74992d7743d1450faf7de44c2d59ff2dd339b80d3449e9bda5b3a564f01aeefe300165bf3b00d811c7ae866cb1a0a1b87400c2941841cd2d6953308f1a963f1c6d4486e7e45daabf0b066ad8884f4577534d3c9f3d3f3bbe8a1a3088d9b95da1fc901573e26f5b86c7a868429b9b634c9e35dfd0534563160912a43c64bacc8ea1ced7bc1b77a28716700e501905c9e81e190241e0edbf4f894aee4047c5b5fb58a3db4afaf76790690fdc1289236fbfc5f6cff540eb82de8044d17658fb054b198cc288cc43aa5d805a51cadac3e75c8fd82ad015a04932cb6f6b53aa4e8d9d84018ff8db0f756d6b5db4e06a689b52fe8471b9230c2dd14d042c1fea45c3d2452351a4222421366610d80785f7e47474d4ad58116313813d4db3176d93c4e29e5c7562806879ddc75b9cfcf38d6aed015c0f4d52302a51215187bfe254d6065bd142cc9b9e03f32ebc9686ad0d0cb3fcf0afa320a15f37cf591600636a4ef84c756c0d42ab98bc2479f0d5d230359f622447101844430a7555a4cbc702b55a4a6ed964cf399a1a493e40555f622da1643073a786a3425d95090b9b0e20521187e9e20d35f4e061e6201e67e844d88457f751e5519dd30df9251f1ce2836e0bf61eef8fc6ed22e4887186316566278bec46af3823ed53e3e18ca5741124dc53cadb5ff0846cc1c6b9c072be6dea187e8336eb6b6b7029ef79ff3b2999938cc59aafa1618fc4556ce3c81f99414d5d79538a83ee9d8a9ad0b9e57060d4be9c53266f418455d760f423a1642e9edfccede29d21891d7421ad0f1cefe472d0ef84965575419871374727bf5f1dc72057a18ed4d7e0a2ddd6d105eb2cc3718609814c2968f27465b00fb4b4a64359629722320583a05644693e6fcadde0efc12e66a0c8e48311f0550ab8fbc1556b69bb2a5a0c03f1a59d67046d7acd5beb9f7f9ae6eb18580431624d63ffe294ea5497a65ec3891f4c70b26b7b17a9f82145e5d5156d6b3355ad249bb66168bbb745d00c40d6ef42d52a032cf62caeeaec31f4c85ac403cbb0c6756953f0ddbf79da0cfa6ccc1c40de43bc4a10a700b98322e671225e80e663d30192ff5611c44c095351bb69a4e14c11a3d5b0b53e78954699760516134f3148e71a2b0bb04b24bb1a2c2b503f56249e0a2c638ff40e7c2c7d50ef7196fc9893e18c0ac3fc5a4c0d23ee08080f984dc643854b54df4a638af29dc5df79f905c4133ce263f3b2bb55fa7d56fa82795687e6ee5c68cc13d71e44367ea8670409cf2231990cc6d06e5aae2fc3af1537b33b42775b40bba3aa417016fb9dd89f90a89196c104017a68f7527b8b958e38f9646832a7790045fe394ce41bcbd1cbcbe52cd7e56cec7b2856e448fa5d7e837798b899f05a2c2fbe6d9f1a7b193bbf7c70444d6a37810d4d19d359f9cd6b8a6ef2230b735f8bebe0ccec94e44ed95234bfa4a36a2f0ee9fd5ca73d9fafb2ec9e7e43b0b81e73f447bb144a70aaf96acf6ff52c4737e7a4debcd285bdb54e363d842bc9a7d180c16f010fe4078b41c4c3e565c3edd64e61f995ab0086dbdc026dc1825b8c45ed96edd8d2bd9daa699e5da333274d6bee2097c004462848cd16849f95cd2252c4c87058a821ed977ed751b77b0a8fc0966bf3a30c26d49f3185782a7d314e89f039a15ede458538f1ada8eb836a36bb5d82c402e3feebd37e7b7c667a1c82edc8720072789fa5f388039daa731ce74dbd5aa8965b7ee99f6c271035239ca1c34cdc3c57bd8510dee08f74cda37095b1b098997998fa267e0be15de474b2c737936cacccb4ba44112570bbd13f870b55f3763f77724b586d6e26c3e72b20bb13272f2ee331bcabd4a79980a8d2965c20da2a3918c855215fecce95d29bec58f522d3d6d2852c4ac080fffcb3ee7fb98591f99b7cfb7bb124cc20078030756aee8fd284df06cd5f07c13fd56e5381b19e0a3a9f412a8d27428cb6af0078e4dc8ce4836630360a5c3b98ff5e6cbac1d9d29de9838a84d4722ceea3765be3df9984cf139770f3fb986b9cc9185ab787f54be33d46c54de74d94d13f74ec70cfbe1605c00db79fa8de64cd834090a35c80759f83c8fbefcf9a276dde8a8498d084b4619578eccdda2651a475f73367bda96894bb36eb868035251694cbb745feb150555ada09909497ff1d9c8aee7a35b7c8b2fc64ff483f4fd3491ed52304e6010b9bf2af8c5b8e162a383a0bf0bf108ca78f5086132b2b1a29581f323841c2f189509898d932436e5c1e693ed91f0524da026fecaa2b7efab54aeef120be61de457171c58811e0ca8a7600e0ac249aa579d78d2e2b1d6f41a3da4676b6690ca0249251f5b48b9a3820ac5b25a52cc01bc331c24039b6f4bfab72d5838a35629259930dea936f8c60b4f1b189db1fd1b5e7e6c8a842707ad6756d098a9ab543cde3e1d1161983ea91b7322ee2a713be3bad369d8112fdc7f1ac7b5122d55dc5ae443e10db711ddd6619ffbf96068e28911b1f54388413a17958d61ca07465b54699a1351915300cb826d3bf7f4f217bba0ed3195cbd077b67167b9a03040afc237f3bb36edd9fed33d7d6e7c9493fec34be6543880b0b442d8351496f2e8d60d4d984cca743983c0afab9cdedd5a9d774a121e91230d359c27a3d7b4db38ce73db747af3ca06470901f2605c031a7c9b7d1bbb1e838d36a4d39b039e80bcddfaecca906705fe8c844e93d5aee494dc62c7b4fcb6abe09acf925ef422dc09185b53e960795c56500b43faa6e89720aeee724532f89e60e20b12cd4f832b95189bf45b96aa7af10cf8298b44278de1c67e2d71d811240a7aa2d1d6de22e5b8cef4a1f309de3b81c5a028aabdabddc9637974c2dc19b60458f0954bc751b7ae628ac602eb7c52c7fac0c1621ee7757fc5b002ad7e8fb66fc7da0896547abf01ee091c0cfe1d0fc66e6e03599bb2aa7608a72c30203af5eac3915a0b6616b6119c4a09654de2f56e53296d1f8487cd7ec36c86894bab72ec3ce61208f848432d45a27cafcfbf2a2c56b58e017c76ac7e943aff0b4acaf84dfb343d93efb29c518a9d552c36a3e44c6ea948673bc2aa71c5a873d1d301a9c8b02f19c086f922f0b3e4f7d14e8a59c017809188e2e1b4dc6b55fb8ad82b1c04460b5ff2e9b8f47d3e833599519b79ac6d9ab282db4a55654f60396d2e72bf8e2ebbc8c742913359edadfcbda00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x5, {0x3, 0x0, 0x1000003, 0x105, 0x3fe, 0x80, {0x6, 0xfffffffffffffffe, 0x40000, 0x2, 0x10001c2, 0x0, 0x3, 0x5, 0x0, 0xa000, 0x4, 0x0, 0x0, 0x18, 0xfffff800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 18.674434386s ago: executing program 3 (id=901): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x280, 0xe0, 0x2b8, 0xb0000010, 0xe0, 0x5c8f0200, 0x1b0, 0x3a8, 0x3a8, 0x1b0, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0x0, 0xffffffff], [], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x3}, 0x0, 0xa8, 0xe0, 0x700}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x1, 0x2}, {0x1, 0x2, 0x2}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002040)=ANY=[@ANYBLOB="c8020000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000043b9585b00000073b4ffffffffff01ffffffffffffffff0000000000000000000000001000000000000000000000200200000000000000ffffffffff"], 0x2c8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 18.340853923s ago: executing program 3 (id=906): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000003240)={[{@utf8no}, {@fat=@errors_remount}, {@numtail}, {@numtail}, {@rodir}, {@rodir}, {@shortname_lower}, {@fat=@check_strict}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@uni_xlateno}, {@numtail}]}, 0x0, 0x2ad, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 17.808121476s ago: executing program 3 (id=909): readv(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 17.343347427s ago: executing program 3 (id=913): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='ns\x00') exit(0x3) fstat(r1, 0x0) 17.097077672s ago: executing program 33 (id=913): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='ns\x00') exit(0x3) fstat(r1, 0x0) 3.819847671s ago: executing program 5 (id=1014): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f7, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) 3.366993302s ago: executing program 5 (id=1018): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x418da845}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x20c89e, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.068054849s ago: executing program 0 (id=1021): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdc02, {0x7, 0x0, 0x0, r2, 0xd4, 0x7e, 0x9}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 3.058915559s ago: executing program 5 (id=1022): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x2, {0x0, 0x0, 0x4}, 0x1}, 0x18) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r2, 0xfffffffffffffffe, {}, 0xfe}, 0x18) close(0x4) 2.828040334s ago: executing program 0 (id=1024): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2.816715454s ago: executing program 5 (id=1025): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xa, 0x200003c}) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.481388392s ago: executing program 0 (id=1029): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000fc0)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x0, 0x178, 0x178, 0x98, 0xffffffff, 0x240, 0x240, 0x241, 0x98, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0x0, 0xffffffff, 'tunl0\x00', 'ipvlan1\x00', {}, {}, 0x1d, 0x3, 0x40}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00', {}, {}, 0xa5}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000012c0)=0x44fb, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 2.356157045s ago: executing program 0 (id=1031): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f00001f8000/0x4000)=nil, 0x4000}, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = userfaultfd(0x80001) dup3(r0, r1, 0x0) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000000)={{&(0x7f00001f8000/0x4000)=nil, 0x4000}, 0x1}) 2.240082708s ago: executing program 0 (id=1032): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) io_uring_setup(0x3eae, &(0x7f0000000080)) syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x6, 0x5513, &(0x7f0000005d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f000001b300)='./file1\x00', 0x141040, 0x15) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000080)={0x4, 0x4}) 1.488180355s ago: executing program 4 (id=1039): bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r0, &(0x7f00000003c0)={0xfffffd9a, 0x7d, 0xa, {{0x0, 0xa9, 0x3, 0x6, {0x0, 0x1, 0x5}, 0x100000, 0x8, 0x7, 0x2, 0x1, '\x00', 0x1, '\x00', 0x73, '\x17\xe0_|s/\xec\xcf\x1e|~\xf4*wIX\xbe[_\x12\xd4zZs\x85\xc4/\xa2?\xbc=\x82O\xc7\xf7\xf1\r\xd0\x06\x14\xbb\xf1\xbb\x99\xaa\xdb\xf1\xf0\xe3\xdf\x1c\x16{\"\f\x8c0\xd0I\xff\x02):9\xe7\xa6\x9e~\xa9\xa3\xf7\xaaW)o\x96\x1bm+\xcb\xf1\xbf\x0e\xaa\xd6|\"\xf73r+F\x10\xf2P\xcc\x1f\xd7\x7f\xfc\x0e,x\xe5\x10^\xff\xf9\x12\x00\x00\x00\x00\x00\x00', 0x1, '{'}, 0x4, 'GPL\x00'}}, 0xc2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1.344307869s ago: executing program 1 (id=1041): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x3, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x81, 0x4) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x6, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb30}], 0x1, 0x40002042, 0x0) 1.307085569s ago: executing program 4 (id=1042): creat(&(0x7f0000000200)='./file0\x00', 0xc7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x140) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000002a40)={0x2020}, 0x11) 1.068575375s ago: executing program 1 (id=1043): r0 = io_uring_setup(0x6a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40}) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 987.456857ms ago: executing program 4 (id=1044): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) write$P9_RLERROR(r0, &(0x7f0000000000)=ANY=[], 0x11) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 987.221677ms ago: executing program 0 (id=1045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000440)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$eJzs3AuYjlW7OPB1r7UexjTpbZLDsO51P7xpaJkkySGnHJIkCUlOCUmTJAmJcZY0JCHHSXIYkuQwjUnjfD7knDT5pEmSkJBk/S/V3r5v9327vf/f9//b1577d13rsm7Pc9/vWnPPNe963uua+bbXmHot69duRkTinwK//ZMihIgRQowQQlwnhAiEEBXjK8Zfvl5AQco/9yLsX6t5+tVeAbuauP95G/c/b+P+523c/7yN+5+3cf/zNu5/3sb9Zywv2zGv2PU88u7gz//zMn7//18kt9zULzeVu7H3fyOF+5+3cf/zNu5/3sb9z9u4/3kb9/9/v1r/yTXuf97G/WcsL7vanz/zuLrjan//McYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLG877K7QQ4t/m/zDh5z+7gTHGGGOMMcYYY//T+PxXewWMMcYYY4wxxhj7fw+EFEpoEYh8Ir+IEQVErLhGxIlrRUFxnYiI60W8uEEUEjeKwqKIKCqKiQRRXJQQRqCwgkQoSopSIipuEqXFzSJRlBFlxS3CiXIiSdwqyovbRAVxu6go7hCVxJ2isqgiqopq4i5RXdQQNUUtUVvcLeqIuqKeqC/uEQ3EvaKhuE80EveLxuIB0UQ8KJqKh0Qz0Vy0EA+LluIR0Uo8KlqLNqKtaCfa/1/lvyj6iZdEfzFApIiBYpAYLIaIoWKYGC5GiJfFSPGKGCVeFalitBgjXhNjxetinHhDjBcTxETxppgkJospYqqYJqaLNPGWmCHeFjPFO2KWmC3miLkiXcwT88W7YoF4TywU74tF4gOxWCwRS8UykSE+FJliucgSH4kV4mORLVaKVWK1WCPWinVivdggNopNYrPYIraKbWK72CE+ETvFLrFb7BF7xT6xX3wqDojPxEHxucgRX/w388/9h/zeIECABAkaNOSDfBADMRALsRAHcVAQCkIEIhAP8VAICkFhKAxFoSgkQAKUgBKAgEBAUBJKQhSiUBpKQyIkQlkoCw4cJEESlIfboAJUgIpQESpBJagMVaAKVINqUB2qQ02oCbWhNtSBOlAP6sE9cA/cCw2hITSCRtAYGkMTaAJNoSk0g2bQAlpAS2gJraAVtIbW0BbaQntoDx2gA3SEjtAZOkMX6AJdoSskQzJ0g27QHbpDD+gBPaEn9IJe0Bv6QB94EV6El+AlGAB15EAYBINgCAyBYTAchsPLMBJegVfgVUiF0TAGXoPX4HUYB2dhPEyAiTARqsvJMAWmAsnpkAZpMANmwEyYCbNgNsyGuZAO82A+zIcF8B68B+/DIvgAPoAlsASWQQZkQCYshyzIghVwDrJhJayC1bAG1sIaWA8bYD1sgs2wCbbCVtgO2+ET+AR2wS7YA3tgH+yDT+FT+Aw+g1TIgRw4BIfgMByGI3AEciEXjsJROAbH4DgchxNwAk7CKTgNp+AMnIGzcA7Ow3m4ABfgIjyf8HWLfWU2pgp5mZZa5pP5ZIyMkbEyVsbJOFlQFpQRGZHxMl4WkoVkYVlYFpVFZYJMkCVkCYkSJclQlpQlZVRGZWlZWibKRFlWlpVOOpkkk2R5WV5WkBVkRXmHrCTvlJVlFdnJVZPVZHXZ2dWUtWRtWVvWkXVlPVlf1pcNZAPZUDaUjWQj2Vg2lk3kg7KpHAjDoLm83JmWcjS0kmOgtWwj28p28nV4THaQ46Cj7CQ7yyfkBBgPXWUHlyyflt3kFOgun5VT4TnZU06HXvIF2Vv2kX3li7Kf7Oj6ywFyFgyUg+RcGCKHymFyuFwAdeXljtWTr8pUOVqOka/JZfC6HCffkOPlBDlRviknyclyipwqp8npMk2+JWfIt+VM+Y6cJWfLOXKuTJfz5Hz5rlwg35ML5ftykfxALpZL5FK5TGbID2WmXC6z5EdyhfxYZsuVcpVcLdfItXKdXC83yI1yk9wst8itcpvcLnfIT+ROuUvulnvkXrlP7pefygPyM3lQfi5z5BfykPyLPCy/lEfkVzJXfi2Pym/kMfmtPC6/kyfk9/KkPCVPyx/kGfmjPCvPyfPyJ3lB/iwvyl/kJemlUKCkUkqrQOVT+VWMKqBi1TUqTl2rCqrrVERdr+LVDaqQulEVVkVUUVVMJajiqoQyCpVVpEJVUpVSUXWTKq1uVomqjCqrblFOlVNJ6lZVXt2mKqjbVUV1h6qk7lSVVRVVVVVTd6nqqoaqqWqp2upuVUfVVfVUfXWPaqDuVQ3VfaqRul81Vg+oJupB1VQ9pJqp5qqFeli1VI+oVupR1Vq1UW1VO9VePaY6qMdVR9VJdVZPqC7qSdVVPaWS1dOqm3pGdVfPqh7qOdVTPa96qRdUb9VH9VW/qEvKq/5qgEpRA9UgNVgNUUPVMDVcjVAvq5HqFTVKvapS1Wg1Rr2mxqrX1Tj1hhqvJqiJ6k01SU1WU9RUNU1NV2nqLTVDva1mqnfULDVbzVFzVbqap4b9XmnhfyH/7b+TP+rXV9+udqhP1E61S+1We9RetU/tV/vVAXVAHVQHVY7KUYfUIXVYHVZH1BGVq3LVUXVUHVPH1HF1XJ1QJ9RJdUr9pH5QZ9SP6qw6p86pn9QFdUFd/P1rIDRoqZXWOtD5dH4dowvoWH2NjtPX6oL6Oh3R1+t4fYMupG/UhXURXVQX0wm6uC6hjUZtNelQl9SldFTfpEvrm3WiLqPL6lu00+V0kr71n87/s/W11+11B91Bd9QddWfdWXfRXXRX3VUn62TdTXfT3XV33UP30D11T91L99K9dW/dV/fV/XQ/3V/31yk6RQ/Sg/UQPVQP08P1CP2yHqlH6lF6lE7VqXqMHqPH6rF6nB6nx+vxeqKeqCfpSXqKnqKn6Wk6TafpGXqGnqln6ll6lp6j5+h0na7n6/l6gV6gF+qFepFepBfrxXqpXqozdIbO1Jk6S2fpFXqFztYr9Uq9Wq/Wa/VavV6v1xv1Rr1Zb9Zb9VadrXfoHXqn3ql36916r96r9+v9+oA+oA/qgzpH5+hD+pA+rA/rI/qIztW5+qg+qo/pY/q4Pq5P6BP6pD6pT+vT+ow+o8/qs/q8Pq8v6Av6or6oL+lLl499gQxkoAMd5AvyBTFBTBAbxAZxQVxQMCgYRIJIEB/EB4WCG4PCQZGgaFAsSAiKByUCE2BgAwrCoGRQKogGNwWlg5uDxKBMUDa4JXBBuSApuDUoH9wWVAhuDyoGdwSVgjuDykGVoGpQLbgrqB7UCGoGtYLawd1BnaBuUC+oH9wTNAjuDRoG9wWNgvuDxsEDQZPgwaBp8FDQLGgetAgeDloGjwStgkeD1kGboG3QLmj/L63v/dkij7v+ZoBJMQPNIDPYDDFDzTAz3IwwL5uR5hUzyrxqUs1oM8a8Zsaa180484YZbyaYieZNM8lMNlPMVDPNTDdp5i0zw7xtZpp3zCwz28wxc026mVfj90O3WWjeN4vMB2axWWKWmmUmw3xoMs1yk2U+MivMxybbrDSrzGqzxqw168x6s8FsNJvMZrPFbDXbzHazw3xidppdZrfZY/aafWa/+dQcMJ+Zg+Zzk2O+MIfMX8xh86U5Yr4yueZrc9R8Y46Zb81x8505Yb43J80pc9r8YM6YH81Zc86cNz+ZC+Znc9H8Yi4Zf/lwf/ntHTVqzIf5MAZjMBZjMQ7jsCAWxAhGMB7jsRAWwsJYGItiUUzABCyBJfAyQsKSWBKjGMXSWBoTMRHLYll06DAJk7A8lscKWAErYkWshJWwMlbGqlgV78K7sAbWwFpYC+/Gu7Eu1sX6WB8bYANsiA2xETbCxtgYm2ATbIpNsRk2wxbYAltiS2yFrbA1tsa22BbbY3vsgB2wI3bEztgZu2AX7IpdMRmTsRt2w+7YHXtgD+yJPbEX9sLe2Bv7Yl/sh/2wP/bHFEzBQTgIh+AQHIbDcASOwJE4EkfhKEzFVByDY3AsjsVxOA7H4wSciG/iJJyMU3AqTsPpmIZpOANn4EycibNwFs7BOZiO6Tgf5+MCXIALcSEuwkW4GBfjUlyKGZiBmZiJWZiFK3AFZmM2rsJVuAbX4DpchxtwA27CTbgFt+A23IY7cAfuxJ24G3fjXtyL+3E/HsADeBAPYg7m4CE8hIfxMB7BI5iLuXgUj+IxPIbH8TiewBN4Ek/iaTyNZ/AMnsWzeB7P4wX8GS/iL3gJPcZYKWLtNTbOXmsL2utsjC1g/zouaovZBFvclrDGFrZF/iZGa22iLWPL2luss+Vskr31D3FlW8VWtdXsXba6rWFr/iFuYO+1De19tpG939a39/xN3Ng+YJvYR2xT+6htZtvYFradbWkfsa3so7a1bWPb2na2i33SdrVP2WT7tO1mn/lDnGmX2w12o91kN9sD9jN73v5kj9lv7QX7s+1vB9gR9mU70r5iR9lXbaod/Yd4on3TTrKT7RQ71U6z0/8Qz7FzbbqdZ+fbd+0C+94f4gz7oV1ks+xiu8Qutct+jS+vKct+ZFfYj222XWlX2dV2jV1r19n1/77W1Xar3Wa32/32U7vT7rK77R671+77Nb68j4P2c5tjv7BH7Tf2sP3SHrHHba79+tf48v6O2+/sCfu9PWlP2dP2B3vG/mjP2nO/7v/y3n+wv9hL1ltBQJIUaQooH+WnGCpAsXQNxdG1VJCuowhdT/F0AxWiG6kwFaGiVIwSqDiVIENIlohCKkmlKEo3UWm6mRKpDJWlW8hROUqiW6k83UYV6HaqSHdQJbqTKlMVqkrV6C6qTjWoJtWi2nQ31aG6VI/q0z3UgO6lhnQfNaL7qTE9QE3oQWpKD1Ezak4t6GFqSY9QK3qUWlMbakvtqD09Rh3ocepInagzPUFd6EnqSk9RMj1N3egZ6k7PUg96jnrS89SLXqDe1If60ovUj16i/jSAUmggDaLBNISG0jAaTiPoZRpJr9AoepVSaTSNoddoLL1O4+gNGk8TaCK9SZNoMk2hqTSNplMavUUz6G2aSe/QLJpNc2gupdM8mk/v0gJ6jxbS+7SIPqDFtISW0jLKoA8pk5ZTFn1EK+hjyqaVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoE9oJ+2i3bSH9tI+2k+f0gH6jA7S55RDX9Ah+gsdpi/pCH1FufQ1HaVv6Bh9S8fpOzpB39NJOkWn6Qc6Qz/SWTpH5+knukA/00X6hS6RJxFCKEMV6jAI84X5w5iwQBgbXhPGhdeGBcPrwkh4fRgf3hAWCm8MC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Ulg5vDhPDMmHZ8JbQheXCpPDWsHx4W1ghvD2sGN4RVgrvDCuHVcJH7q8W3hVWD2uENcNaYe3w7rBOWDesF9YP7wkbhPeGDcP7wkbh/WGF8IGwSfhg2DR8KGwWNg9bhA+HLcNHwlbho2HrsE3YNmwXtg8fCzuEj4cdw05h5/CJsEv4ZNg1fCpMDp8Ou4XP/On1lHBgOCgcHA4Ovb9PLY0ui2ZEP4xmRpdHs6IfRVdEP45mR1dGV0VXR9dE10bXRddHN0Q3RjdFN0e3RLdGt0W3R72vn184cNIpp13g8rn8LsYVcLHuGhfnrnUF3XUu4q538e4GV8jd6Aq7Iq6oK+YSXHFXwhmHzjpyoSvpSrmou8mVdje7RDe4+W8HiHIuybVz7V1718E97jq6Tq6ze8I94Z50T7qn3FPuadfNPeO6u2ddD/ec6+med8+7F1xv18f1dS+6fu4l198NcCkuxQ1yg9wQN8QNc8PcCDfCjXQj3Sg3yqW6VDfGjXFj3Vg3zo1z4914N9FNdJPcJDfFTXHT3DSX5tLcDDfDzXQz3Sw3y81xc1y6S3fz3Xy3wC1wC91CtyhxkVvsFrulbqnLcBku02W6LJflVrgVLttlu1VulVvj1rh1bp3b4Da4TW6T2+K2uG1um9vhdridbqfb7Xa7vW6v2+/2uwPugDvoDrocl+MOuUPusDvsjrivXK772h1137hj7lt33H3nTrjv3Ul3yp12P7gz7kd31p1z591P7oL72V10v7hLzru0yFuRGZG3IzMj70RmRWZH5kTmRtIj8yLzI+9GFkTeiyyMvB9ZFPkgsjiyJLI0siySEfkwkhlZHsmKfBRZEfk4kh1ZGVkVWR1ZE1kb8b74ztCX9KV81N/kS/ubfaIv48v6W7zz5XySv9WX97f5Cv52X9Hf4Sv5O31lX8VX9Y/61r6Nb+vb+fb+Md/BP+47+k6+s3/Cd/FP+q7+KZ/sn/bd/DO+u3/W9/DP+Z7+ed/Lv+B7+z6+r3/R9/Mv+f5+gE/xA/0gP9gP8UP9MD/cj/Av+5H+FT/Kv+pT/Wg/xr/mx/rX/Tj/hh/vJ/iJ/k0/yU/2U/xUP81P92n+LT/Dv+1n+nf8LD/bz/Fzfbqf5+f7d/0C/55f6N/3i/wHfrFf4pf6ZT7Df+gz/XKf5T/yK/zHPtuv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/Df+J3+l1+t9/j9/p9fr//1B/wn/mD/nOf47/wh/xf/GH/pT/iv/K5/mt/1H/jj/lv/XH/nT/hv/cn/Sl/2v/gz/gf/Vl/zp/3P/kL/md/0f/iL/GvpDHGGGOM/ZeoP7k+8O/8n/x9XDZICHHtrmK5/7HmlsK/zYfKhC4RIcTTA3o1/7dRp05KSsrv92YrEZRaIoSIXMnPJ67EK0Vn8aRIFp1E+b+7vqGyzwX6k/rRO4SI/aucGHElvlL/tn9Q/7EnJmZWCs/H/yf1lwiRWOpKTgFxJb5Sv8I/qF+kw5+sv8CXaUJ0/KucOHElvlI/STwunhHJf3MnY4wxxhhjjDH2m6Gyao8/e36+/HyeoK/k5BdX4j97PmeMMcYYY4wxxtjV91yfvk89lpzcqQdPeMITnvz75Gr/ZGKMMcYYY4z9q1059F/tlTDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY3nX/48/J3a198gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xdbf8nAAD//yx2QLk=") syz_usb_connect(0x3, 0x2d, 0x0, 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') 695.950864ms ago: executing program 1 (id=1046): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 671.003814ms ago: executing program 1 (id=1047): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) timerfd_create(0x1, 0x0) 548.435887ms ago: executing program 4 (id=1048): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x801}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x6, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0xd209f6d814827b17) 486.714749ms ago: executing program 5 (id=1049): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020200000200bf"], 0x10}, 0x1, 0x7}, 0x10) close(r2) socket$key(0xf, 0x3, 0x2) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x48) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) 486.469538ms ago: executing program 1 (id=1050): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000000)='tracefs\x00', 0x0, 0x0) 244.090214ms ago: executing program 5 (id=1051): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x42082, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230055) close(r2) 179.272705ms ago: executing program 4 (id=1052): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(0x3) 66.438838ms ago: executing program 1 (id=1053): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) r0 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000040)={0x0, 0x30b5, 0x800, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 0s ago: executing program 4 (id=1054): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) write$sndseq(r1, &(0x7f00000003c0)=[{0x5, 0x7, 0xb, 0xb, @time={0xd7, 0x39}, {0x8, 0x5}, {0xc, 0x8}, @note={0x10, 0x75, 0x4b, 0xf, 0xba}}], 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. [ 86.669463][ T5764] cgroup: Unknown subsys name 'net' [ 86.822332][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.656690][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.399060][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.408200][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.416574][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.425776][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.445090][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.454824][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.457761][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.468020][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.478282][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.478296][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.484404][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.494547][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.506548][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.507400][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.522143][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.529548][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.535989][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.540700][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.546721][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.552394][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.559545][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.566001][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.582060][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.603541][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.126649][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 91.202275][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 91.220178][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 91.376406][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.384582][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.391927][ T5778] bridge_slave_0: entered allmulticast mode [ 91.401073][ T5778] bridge_slave_0: entered promiscuous mode [ 91.409768][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 91.433095][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.440354][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.447923][ T5778] bridge_slave_1: entered allmulticast mode [ 91.455312][ T5778] bridge_slave_1: entered promiscuous mode [ 91.542223][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.549563][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.556875][ T5791] bridge_slave_0: entered allmulticast mode [ 91.564634][ T5791] bridge_slave_0: entered promiscuous mode [ 91.572866][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.580256][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.587736][ T5777] bridge_slave_0: entered allmulticast mode [ 91.595152][ T5777] bridge_slave_0: entered promiscuous mode [ 91.620185][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.630191][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.640534][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.648159][ T5791] bridge_slave_1: entered allmulticast mode [ 91.655960][ T5791] bridge_slave_1: entered promiscuous mode [ 91.679656][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.686988][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.698070][ T5777] bridge_slave_1: entered allmulticast mode [ 91.706079][ T5777] bridge_slave_1: entered promiscuous mode [ 91.731647][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.801054][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.813740][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.835892][ T5778] team0: Port device team_slave_0 added [ 91.857079][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.869216][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.891667][ T5778] team0: Port device team_slave_1 added [ 91.898450][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.905857][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.913253][ T5783] bridge_slave_0: entered allmulticast mode [ 91.920839][ T5783] bridge_slave_0: entered promiscuous mode [ 91.952091][ T5777] team0: Port device team_slave_0 added [ 91.970241][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.980428][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.987811][ T5783] bridge_slave_1: entered allmulticast mode [ 91.995759][ T5783] bridge_slave_1: entered promiscuous mode [ 92.014276][ T5777] team0: Port device team_slave_1 added [ 92.054120][ T5791] team0: Port device team_slave_0 added [ 92.074425][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.081446][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.111110][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.126245][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.133556][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.159724][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.188689][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.199815][ T5791] team0: Port device team_slave_1 added [ 92.207975][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.236225][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.243403][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.273704][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.321295][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.328408][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.354960][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.369100][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.376407][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.402654][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.415232][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.422223][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.451723][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.529991][ T5783] team0: Port device team_slave_0 added [ 92.564827][ T5778] hsr_slave_0: entered promiscuous mode [ 92.571355][ T5778] hsr_slave_1: entered promiscuous mode [ 92.581750][ T5783] team0: Port device team_slave_1 added [ 92.604796][ T5791] hsr_slave_0: entered promiscuous mode [ 92.611270][ T5791] hsr_slave_1: entered promiscuous mode [ 92.619579][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.627597][ T5791] Cannot create hsr debugfs directory [ 92.643866][ T5790] Bluetooth: hci3: command tx timeout [ 92.644150][ T5786] Bluetooth: hci0: command tx timeout [ 92.649843][ T5793] Bluetooth: hci1: command tx timeout [ 92.655721][ T5787] Bluetooth: hci2: command tx timeout [ 92.693714][ T5777] hsr_slave_0: entered promiscuous mode [ 92.700134][ T5777] hsr_slave_1: entered promiscuous mode [ 92.706722][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.714665][ T5777] Cannot create hsr debugfs directory [ 92.759555][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.766733][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.793223][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.841253][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.848382][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.878268][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.966622][ T5783] hsr_slave_0: entered promiscuous mode [ 92.973881][ T5783] hsr_slave_1: entered promiscuous mode [ 92.980275][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.988831][ T5783] Cannot create hsr debugfs directory [ 93.343093][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.367401][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.391426][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.402186][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.458435][ T5791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.477804][ T5791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.489935][ T5791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.508604][ T5791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.603910][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.614187][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.625677][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.639869][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.772938][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.784789][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.804661][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.816088][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.854406][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.905644][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.926553][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.969376][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.976793][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.989209][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.996422][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.028094][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.062040][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.069314][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.126965][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.134201][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.191811][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.239778][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.268930][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.276167][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.310102][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.317344][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.378354][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.425589][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.485974][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.493309][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.548912][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.556508][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.619259][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.726110][ T5787] Bluetooth: hci1: command tx timeout [ 94.731590][ T5787] Bluetooth: hci3: command tx timeout [ 94.733287][ T5793] Bluetooth: hci2: command tx timeout [ 94.739987][ T5787] Bluetooth: hci0: command tx timeout [ 94.749715][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.908436][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.948875][ T5791] veth0_vlan: entered promiscuous mode [ 95.012755][ T5791] veth1_vlan: entered promiscuous mode [ 95.170506][ T5778] veth0_vlan: entered promiscuous mode [ 95.188308][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.197838][ T5791] veth0_macvtap: entered promiscuous mode [ 95.212078][ T5791] veth1_macvtap: entered promiscuous mode [ 95.226090][ T5778] veth1_vlan: entered promiscuous mode [ 95.314610][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.324924][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.341329][ T5778] veth0_macvtap: entered promiscuous mode [ 95.354021][ T5778] veth1_macvtap: entered promiscuous mode [ 95.381506][ T5777] veth0_vlan: entered promiscuous mode [ 95.393824][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.420575][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.432517][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.446720][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.462660][ T5791] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.471784][ T5791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.481095][ T5791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.490980][ T5791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.511517][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.522377][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.537694][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.549204][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.558364][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.567958][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.577286][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.590221][ T5777] veth1_vlan: entered promiscuous mode [ 95.737304][ T5783] veth0_vlan: entered promiscuous mode [ 95.785452][ T5783] veth1_vlan: entered promiscuous mode [ 95.811720][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.814899][ T5777] veth0_macvtap: entered promiscuous mode [ 95.834523][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.859595][ T5777] veth1_macvtap: entered promiscuous mode [ 95.911785][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.920142][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.935506][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.960487][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.969910][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.989481][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.999477][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.011297][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.025017][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.086507][ T5783] veth0_macvtap: entered promiscuous mode [ 96.098652][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.109777][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.120079][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.130633][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.142794][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.160725][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.171383][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.181873][ T5783] veth1_macvtap: entered promiscuous mode [ 96.205175][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.214215][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.223507][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.232255][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.369373][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.388163][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.401863][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.418981][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.429394][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.443321][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.474971][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.533357][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.550783][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.562670][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.578820][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.590326][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.606468][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.620833][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.634017][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.651316][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.660742][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.703656][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.802214][ T5850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5'. [ 96.814028][ T5787] Bluetooth: hci2: command tx timeout [ 96.819491][ T5787] Bluetooth: hci3: command tx timeout [ 96.826093][ T5790] Bluetooth: hci1: command tx timeout [ 96.831595][ T5790] Bluetooth: hci0: command tx timeout [ 96.838134][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.849620][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.862917][ T5850] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5'. [ 96.999793][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.022670][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.111147][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.124755][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.239529][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.271684][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.305081][ T177] cfg80211: failed to load regulatory.db [ 97.375747][ T5863] syz.1.2[5863]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 97.408468][ T5863] loop1: detected capacity change from 0 to 512 [ 97.437799][ T5863] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.492699][ T5863] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.576053][ T5863] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.2: bad orphan inode 131083 [ 97.609754][ T5863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.015607][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.231379][ T5885] loop1: detected capacity change from 0 to 512 [ 98.297631][ T5885] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.17: inode has both inline data and extents flags [ 98.316752][ T5885] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.17: couldn't read orphan inode 15 (err -117) [ 98.352421][ T5885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.589475][ T5885] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 98.683764][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.883177][ T5793] Bluetooth: hci3: command tx timeout [ 98.888701][ T5787] Bluetooth: hci0: command tx timeout [ 98.894192][ T5790] Bluetooth: hci1: command tx timeout [ 98.894209][ T5786] Bluetooth: hci2: command tx timeout [ 99.118245][ T5908] loop2: detected capacity change from 0 to 128 [ 99.149471][ T5908] EXT4-fs: inline encryption not supported [ 99.234303][ T5908] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 99.277523][ T5916] loop1: detected capacity change from 0 to 256 [ 99.338615][ T5908] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.632094][ T5791] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.779101][ T5927] netlink: 51 bytes leftover after parsing attributes in process `syz.2.33'. [ 99.970335][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 100.017503][ T5938] loop1: detected capacity change from 0 to 256 [ 100.046778][ T5938] FAT-fs (loop1): Directory bread(block 1285) failed [ 100.091648][ T5938] FAT-fs (loop1): Directory bread(block 1286) failed [ 100.103734][ T5938] FAT-fs (loop1): Directory bread(block 1287) failed [ 100.133356][ T5938] FAT-fs (loop1): Directory bread(block 1288) failed [ 100.170435][ T5938] FAT-fs (loop1): Directory bread(block 1285) failed [ 100.205959][ T5938] FAT-fs (loop1): Directory bread(block 1286) failed [ 100.227348][ T5938] FAT-fs (loop1): Directory bread(block 1287) failed [ 100.250468][ T5938] FAT-fs (loop1): Directory bread(block 1288) failed [ 100.282246][ T5943] FAT-fs (loop1): Directory bread(block 1285) failed [ 100.302839][ T5943] FAT-fs (loop1): Directory bread(block 1286) failed [ 100.470606][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.534765][ T5947] team0: Port device bond0 added [ 100.543289][ T5949] bridge0: port 3(team0) entered blocking state [ 100.562216][ T5949] bridge0: port 3(team0) entered disabled state [ 100.603426][ T5949] team0: entered allmulticast mode [ 100.608629][ T5949] team_slave_0: entered allmulticast mode [ 100.643658][ T5949] team_slave_1: entered allmulticast mode [ 100.663097][ T5949] bond0: entered allmulticast mode [ 100.693324][ T5949] bond_slave_0: entered allmulticast mode [ 100.703251][ T5949] bond_slave_1: entered allmulticast mode [ 100.726060][ T5949] team0: entered promiscuous mode [ 100.731174][ T5949] team_slave_0: entered promiscuous mode [ 100.769373][ T5949] team_slave_1: entered promiscuous mode [ 100.791684][ T5949] bond0: entered promiscuous mode [ 100.797226][ T5949] bond_slave_0: entered promiscuous mode [ 100.803475][ T5949] bond_slave_1: entered promiscuous mode [ 100.811986][ T5949] bridge0: port 3(team0) entered blocking state [ 100.818713][ T5949] bridge0: port 3(team0) entered forwarding state [ 100.836453][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 100.893444][ T5955] netlink: 16 bytes leftover after parsing attributes in process `syz.0.43'. [ 101.085493][ T5961] Zero length message leads to an empty skb [ 101.811557][ T5976] netlink: 'syz.3.53': attribute type 6 has an invalid length. [ 101.820815][ T5976] netlink: 'syz.3.53': attribute type 7 has an invalid length. [ 101.829035][ T5976] netlink: 'syz.3.53': attribute type 8 has an invalid length. [ 102.565602][ T5997] netlink: 428 bytes leftover after parsing attributes in process `syz.1.62'. [ 102.579639][ T5997] netlink: 32 bytes leftover after parsing attributes in process `syz.1.62'. [ 103.453647][ T2195] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.674303][ T2195] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 103.712408][ T2195] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 103.727522][ T2195] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.751839][ T2195] usb 4-1: config 0 descriptor?? [ 104.095427][ T6029] netlink: 'syz.0.78': attribute type 1 has an invalid length. [ 104.218822][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.278776][ T2195] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 104.313376][ T2195] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 104.353049][ T2195] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 104.360282][ T2195] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 104.392778][ T2195] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 104.423555][ T2195] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 104.451377][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.453384][ T2195] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 104.490282][ T2195] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 104.498012][ T2195] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 104.510155][ T2195] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 104.517775][ T2195] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 104.529939][ T2195] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 104.541522][ T2195] logitech 0003:046D:C29C.0001: item fetching failed at offset 26/36 [ 104.555689][ T2195] logitech 0003:046D:C29C.0001: parse failed [ 104.562090][ T2195] logitech: probe of 0003:046D:C29C.0001 failed with error -22 [ 104.588783][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.603551][ T2195] usb 4-1: USB disconnect, device number 2 [ 104.687092][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.695517][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.712187][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.720683][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.732758][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.744971][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 105.752497][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.413249][ T6079] syz.1.93 uses obsolete (PF_INET,SOCK_PACKET) [ 106.928852][ T6059] chnl_net:caif_netlink_parms(): no params data found [ 107.711048][ T6112] netlink: 'syz.1.104': attribute type 16 has an invalid length. [ 107.728191][ T6112] netlink: 'syz.1.104': attribute type 17 has an invalid length. [ 107.843763][ T5786] Bluetooth: hci3: command tx timeout [ 107.887590][ T6112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.903529][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.912286][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'. [ 108.091165][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.098967][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 108.115228][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.130935][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.140126][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.153608][ T6059] bridge_slave_0: entered allmulticast mode [ 108.171889][ T6059] bridge_slave_0: entered promiscuous mode [ 108.178208][ T9] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 108.198583][ T6059] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.212406][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.222072][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.239115][ T9] usb 4-1: config 0 descriptor?? [ 108.253108][ T6059] bridge_slave_1: entered allmulticast mode [ 108.279901][ T6059] bridge_slave_1: entered promiscuous mode [ 108.302151][ T49] hsr_slave_0: left promiscuous mode [ 108.321427][ T49] hsr_slave_1: left promiscuous mode [ 108.334267][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.342079][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.365150][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.373518][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.386246][ T49] team0: left allmulticast mode [ 108.391211][ T49] team_slave_0: left allmulticast mode [ 108.424479][ T49] team_slave_1: left allmulticast mode [ 108.430072][ T49] bond0: left allmulticast mode [ 108.446392][ T49] bond_slave_0: left allmulticast mode [ 108.451968][ T49] bond_slave_1: left allmulticast mode [ 108.473905][ T49] team0: left promiscuous mode [ 108.478871][ T49] team_slave_0: left promiscuous mode [ 108.497480][ T49] team_slave_1: left promiscuous mode [ 108.504178][ T49] bond0: left promiscuous mode [ 108.509095][ T49] bond_slave_0: left promiscuous mode [ 108.515362][ T49] bond_slave_1: left promiscuous mode [ 108.522809][ T49] bridge0: port 3(team0) entered disabled state [ 108.549732][ T49] bridge_slave_1: left allmulticast mode [ 108.560184][ T49] bridge_slave_1: left promiscuous mode [ 108.584975][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.619893][ T49] bridge_slave_0: left allmulticast mode [ 108.627613][ T49] bridge_slave_0: left promiscuous mode [ 108.635122][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.704916][ T49] veth1_macvtap: left promiscuous mode [ 108.718280][ T49] veth0_macvtap: left promiscuous mode [ 108.738638][ T49] veth1_vlan: left promiscuous mode [ 108.749453][ T49] veth0_vlan: left promiscuous mode [ 108.909267][ T9] usb 4-1: string descriptor 0 read error: -71 [ 108.960074][ T9] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 108.983285][ T9] letsketch: probe of 0003:6161:4D15.0002 failed with error -32 [ 109.032484][ T9] usb 4-1: USB disconnect, device number 3 [ 109.135252][ T49] bond1 (unregistering): Released all slaves [ 109.923191][ T5786] Bluetooth: hci3: command tx timeout [ 110.192872][ T49] team0 (unregistering): Port device team_slave_1 removed [ 110.304570][ T49] team0 (unregistering): Port device team_slave_0 removed [ 110.427918][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.461782][ T6168] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.578817][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.092310][ T49] team0 (unregistering): Port device bond0 removed [ 111.134744][ T49] bond0 (unregistering): Released all slaves [ 111.317066][ T6176] bridge1: entered promiscuous mode [ 111.328944][ T6176] bridge1: entered allmulticast mode [ 111.453691][ T6059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.497114][ T6059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.603922][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 111.612842][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 111.671221][ T6186] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.680449][ T6186] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.689620][ T6186] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.699243][ T6186] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.745469][ T6059] team0: Port device team_slave_0 added [ 111.762209][ T6190] loop1: detected capacity change from 0 to 2048 [ 111.793202][ T6059] team0: Port device team_slave_1 added [ 111.832665][ T6190] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18881, location=18881 [ 111.939631][ T6059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.956346][ T6190] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.983059][ T6059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.009361][ T5786] Bluetooth: hci3: command tx timeout [ 112.076021][ T6059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.094429][ T28] audit: type=1800 audit(1784315490.376:2): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.125" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 112.122240][ T6059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.163586][ T6059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.214287][ T6059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.239998][ T6196] netlink: 'syz.3.126': attribute type 1 has an invalid length. [ 112.357347][ T6196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.461111][ T6197] bond1: (slave geneve2): making interface the new active one [ 112.495894][ T6197] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 112.660382][ T6197] syz.3.126 (6197) used greatest stack depth: 20104 bytes left [ 112.709317][ T6059] hsr_slave_0: entered promiscuous mode [ 112.727346][ T6059] hsr_slave_1: entered promiscuous mode [ 112.783223][ T6059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.808725][ T6059] Cannot create hsr debugfs directory [ 113.476413][ T6059] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.736235][ T6059] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.759658][ T6059] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.801740][ T6059] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.084350][ T5786] Bluetooth: hci3: command tx timeout [ 114.188201][ T6059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.271347][ T6059] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.342493][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.350506][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.402909][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.410194][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.866975][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 115.077084][ T6263] loop0: detected capacity change from 0 to 1024 [ 115.247529][ T6059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.506435][ T6274] warning: `syz.1.145' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.760546][ T6282] loop3: detected capacity change from 0 to 128 [ 115.826270][ T6282] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 115.854285][ T6282] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.306497][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.377403][ T6301] netlink: 20 bytes leftover after parsing attributes in process `syz.1.151'. [ 116.412568][ T6059] veth0_vlan: entered promiscuous mode [ 116.509862][ T6059] veth1_vlan: entered promiscuous mode [ 116.534083][ T6301] nbd: socks must be embedded in a SOCK_ITEM attr [ 116.636462][ T6059] veth0_macvtap: entered promiscuous mode [ 116.677618][ T6059] veth1_macvtap: entered promiscuous mode [ 116.684058][ T6308] loop0: detected capacity change from 0 to 2048 [ 116.730048][ T6308] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.829883][ T6059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.876559][ T6059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.918456][ T6059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.956542][ T6059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.005725][ T6059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.053724][ T6059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.085656][ T6059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.107107][ T5795] udevd[5795]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 117.128073][ T6059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.143447][ T6059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.153997][ T6059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.170882][ T6059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.194521][ T6059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.207125][ T6059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.264400][ T6059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.279708][ T6319] netlink: 51 bytes leftover after parsing attributes in process `syz.3.155'. [ 117.321784][ T6059] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.370062][ T6059] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.398902][ T6059] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.422186][ T6059] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.693813][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.719874][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.821710][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.867766][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.299482][ T6323] loop1: detected capacity change from 0 to 32768 [ 118.310339][ T6323] ======================================================= [ 118.310339][ T6323] WARNING: The mand mount option has been deprecated and [ 118.310339][ T6323] and is ignored by this kernel. Remove the mand [ 118.310339][ T6323] option from the mount to silence this warning. [ 118.310339][ T6323] ======================================================= [ 118.652074][ T6323] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 118.843164][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.936132][ T6323] syz.1.156 (6323) used greatest stack depth: 18840 bytes left [ 119.028572][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 119.044811][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 119.086183][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 119.113036][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.131459][ T9] usb 5-1: Product: syz [ 119.141614][ T9] usb 5-1: Manufacturer: syz [ 119.151771][ T9] usb 5-1: SerialNumber: syz [ 119.506432][ T6376] Set syz1 is full, maxelem 14 reached [ 119.884276][ T9] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 119.916638][ T9] usb 5-1: USB disconnect, device number 2 [ 119.979909][ T6388] Illegal XDP return value 32768 on prog (id 34) dev syz_tun, expect packet loss! [ 121.173056][ T27] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.408107][ T27] usb 5-1: unable to get BOS descriptor or descriptor too short [ 121.430320][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.466594][ T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.498215][ T27] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 121.517639][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.547400][ T27] usb 5-1: Product: syz [ 121.564343][ T27] usb 5-1: Manufacturer: syz [ 121.569029][ T27] usb 5-1: SerialNumber: syz [ 121.638368][ T27] usb 5-1: selecting invalid altsetting 1 [ 121.686418][ T27] usb 5-1: unit 6 not found! [ 121.809329][ T6422] loop3: detected capacity change from 0 to 32768 [ 121.946287][ T6422] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.306692][ T6422] XFS (loop3): Ending clean mount [ 122.494439][ T6422] XFS (loop3): syz.3.187 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 122.650107][ T5778] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.673194][ T27] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 122.815963][ T27] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 122.858228][ T27] usb 5-1: USB disconnect, device number 3 [ 122.972592][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.288867][ T6478] process 'syz.0.194' launched './file0' with NULL argv: empty string added [ 123.755170][ T6494] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.676092][ T6526] loop4: detected capacity change from 0 to 2048 [ 125.762690][ T6526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.104617][ T6529] mmap: syz.0.206 (6529) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 127.066770][ T6542] loop1: detected capacity change from 0 to 4096 [ 127.257032][ T6542] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 127.343914][ T6549] dccp_xmit_packet: Payload too large (65475) for featneg. [ 128.079019][ T6562] Process accounting resumed [ 128.210149][ T28] audit: type=1326 audit(1784315506.496:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.1.222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b439de99 code=0x7ffc0000 [ 128.259335][ T28] audit: type=1326 audit(1784315506.546:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.1.222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b439de99 code=0x7ffc0000 [ 128.334736][ T28] audit: type=1326 audit(1784315506.546:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.1.222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b439de99 code=0x7ffc0000 [ 128.400893][ T28] audit: type=1326 audit(1784315506.546:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.1.222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b439de99 code=0x7ffc0000 [ 128.482135][ T28] audit: type=1326 audit(1784315506.546:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.1.222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39b439de99 code=0x7ffc0000 [ 128.577651][ T28] audit: type=1326 audit(1784315506.546:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.1.222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b439de99 code=0x7ffc0000 [ 128.658544][ T28] audit: type=1326 audit(1784315506.546:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.1.222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b439de99 code=0x7ffc0000 [ 128.719311][ T28] audit: type=1326 audit(1784315506.576:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.1.222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b439de99 code=0x7ffc0000 [ 128.790769][ T28] audit: type=1326 audit(1784315506.586:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.1.222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39b439de99 code=0x7ffc0000 [ 128.852675][ T6581] batadv_slave_1: entered promiscuous mode [ 128.876924][ T28] audit: type=1326 audit(1784315506.586:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.1.222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b439de99 code=0x7ffc0000 [ 128.967970][ T6579] batadv_slave_1: left promiscuous mode [ 129.304079][ T5824] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 129.633643][ T5824] usb 5-1: unable to get BOS descriptor or descriptor too short [ 129.679241][ T5824] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 129.693412][ T5824] usb 5-1: can't read configurations, error -71 [ 129.747799][ T6592] loop3: detected capacity change from 0 to 2048 [ 129.764436][ T6592] EXT4-fs: Ignoring removed orlov option [ 129.854579][ T6592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.920456][ T6592] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.121864][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.926043][ T6621] overlayfs: failed to clone upperpath [ 131.038953][ T6625] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.063907][ T6625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.071657][ T6625] IPv6: NLM_F_CREATE should be set when creating new route [ 131.107553][ T6627] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.115052][ T6627] IPv6: NLM_F_CREATE should be set when creating new route [ 131.722455][ T6645] ip6gre1: entered allmulticast mode [ 131.735387][ T42] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.348187][ T6657] loop0: detected capacity change from 0 to 256 [ 132.515065][ T6657] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 132.637156][ T27] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 132.682071][ T27] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.144647][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.151500][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.614604][ T6663] loop4: detected capacity change from 0 to 32768 [ 133.661169][ T6663] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.257 (6663) [ 133.786510][ T6663] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 133.827644][ T6663] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 133.856850][ T6663] BTRFS info (device loop4): setting nodatacow, compression disabled [ 133.890435][ T6663] BTRFS info (device loop4): force clearing of disk cache [ 133.915381][ T6663] BTRFS info (device loop4): turning off barriers [ 133.943893][ T6663] BTRFS info (device loop4): use no compression [ 133.977906][ T6663] BTRFS info (device loop4): disabling free space tree [ 133.990892][ T6663] BTRFS info (device loop4): enabling ssd optimizations [ 134.030782][ T6663] BTRFS info (device loop4): using spread ssd allocation scheme [ 134.062095][ T6663] BTRFS info (device loop4): not using ssd optimizations [ 134.092576][ T6663] BTRFS info (device loop4): not using spread ssd allocation scheme [ 134.356770][ T6663] BTRFS info (device loop4): rebuilding free space tree [ 134.556845][ T6663] BTRFS info (device loop4): disabling free space tree [ 134.591636][ T6663] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 134.629496][ T6663] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 134.716622][ T6663] BTRFS info (device loop4): checking UUID tree [ 135.337732][ T6059] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 135.443226][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.707766][ T6749] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.577402][ T6778] overlayfs: failed to clone lowerpath [ 136.616583][ T6778] overlayfs: failed to clone lowerpath [ 137.619806][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 138.125450][ T6823] io-wq is not configured for unbound workers [ 139.349245][ T6839] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 140.016056][ T6867] loop4: detected capacity change from 0 to 8192 [ 140.038362][ T6873] overlayfs: failed to resolve './file0': -2 [ 140.100221][ T6867] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 140.149039][ T6867] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 140.207114][ T6867] REISERFS (device loop4): using ordered data mode [ 140.247091][ T6867] reiserfs: using flush barriers [ 140.271519][ T6867] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 140.303930][ T6867] REISERFS (device loop4): checking transaction log (loop4) [ 140.368395][ T6867] REISERFS (device loop4): Using r5 hash to sort names [ 140.427195][ T6867] REISERFS (device loop4): using 3.5.x disk format [ 140.480201][ T6867] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 140.758242][ T2195] libceph: connect (1)[c::]:6789 error -101 [ 140.773681][ T2195] libceph: mon0 (1)[c::]:6789 connect error [ 140.818902][ T6867] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3713, free_space(entry_count) 2 [ 140.842251][ T2195] libceph: connect (1)[c::]:6789 error -101 [ 140.863119][ T2195] libceph: mon0 (1)[c::]:6789 connect error [ 140.886403][ T6867] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 140.909690][ T6867] REISERFS (device loop4): Remounting filesystem read-only [ 140.921483][ T6867] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 140.983069][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 141.125449][ T2195] libceph: connect (1)[c::]:6789 error -101 [ 141.131618][ T2195] libceph: mon0 (1)[c::]:6789 connect error [ 141.175395][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.198041][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.223571][ T8] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 141.253676][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.275439][ T8] usb 1-1: config 0 descriptor?? [ 141.551182][ T6891] ceph: No mds server is up or the cluster is laggy [ 141.763450][ T6917] overlayfs: failed to decode file handle (len=13, type=251, flags=0, err=-22) [ 141.943162][ T8] usb 1-1: string descriptor 0 read error: -22 [ 142.134018][ T8] uclogic 0003:256C:006D.0004: interface is invalid, ignoring [ 142.252284][ T6932] loop3: detected capacity change from 0 to 1024 [ 142.313771][ T6932] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.330658][ T6934] syz.1.326[6934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.357240][ T6934] syz.1.326[6934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.406643][ T27] usb 1-1: USB disconnect, device number 2 [ 142.592364][ T6943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.700218][ T6946] netlink: 'syz.1.331': attribute type 19 has an invalid length. [ 142.723198][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.913705][ T6950] netlink: 'syz.3.332': attribute type 1 has an invalid length. [ 142.935894][ T6950] netlink: 'syz.3.332': attribute type 2 has an invalid length. [ 142.964108][ T6950] netlink: 'syz.3.332': attribute type 1 has an invalid length. [ 142.982118][ T6950] netlink: 'syz.3.332': attribute type 2 has an invalid length. [ 143.508045][ T6973] netlink: 'syz.1.339': attribute type 14 has an invalid length. [ 143.534005][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 143.586915][ T6973] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.595845][ T6973] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.605082][ T6973] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.614098][ T6973] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.674979][ T6973] netlink: 'syz.1.339': attribute type 14 has an invalid length. [ 143.697127][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 144.220946][ T6967] loop3: detected capacity change from 0 to 32768 [ 144.238676][ T6967] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.338 (6967) [ 144.314904][ T6967] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 144.338694][ T6967] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 144.349113][ T6960] vxcan3: entered promiscuous mode [ 144.360534][ T6967] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 144.389757][ T6967] BTRFS info (device loop3): use zstd compression, level 3 [ 144.411660][ T6967] BTRFS info (device loop3): using free space tree [ 144.546555][ T6967] BTRFS info (device loop3): enabling ssd optimizations [ 144.589681][ T6967] BTRFS info (device loop3): auto enabling async discard [ 144.863075][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 144.863090][ T28] audit: type=1800 audit(1784315523.146:32): pid=7019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.338" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 146.485878][ T5778] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 148.593684][ T5824] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 148.823250][ T5824] usb 1-1: Using ep0 maxpacket: 8 [ 148.848048][ T5824] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 148.870422][ T5824] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.888242][ T5824] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.931401][ T5824] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.956087][ T5824] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.003002][ T5824] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.025293][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.213234][ T7135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.280289][ T5824] usb 1-1: usb_control_msg returned -32 [ 149.286301][ T5824] usbtmc 1-1:16.0: can't read capabilities [ 149.548029][ T7141] bridge1: entered promiscuous mode [ 149.560100][ T7141] bridge1: entered allmulticast mode [ 150.125796][ T7162] loop3: detected capacity change from 0 to 1024 [ 150.143216][ T5824] IPVS: starting estimator thread 0... [ 150.154893][ T7159] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 150.263888][ T7164] IPVS: using max 17 ests per chain, 40800 per kthread [ 150.352138][ T5824] usb 1-1: USB disconnect, device number 3 [ 150.368952][ T7152] loop4: detected capacity change from 0 to 32768 [ 150.429975][ T7152] loop4: p1 p3 < > [ 150.769578][ T5140] loop4: p1 p3 < > [ 151.038354][ T5795] udevd[5795]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 151.074372][ T6228] udevd[6228]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 151.187396][ T5795] udevd[5795]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 151.213690][ T5779] udevd[5779]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 151.947110][ T7219] netlink: 'syz.0.418': attribute type 7 has an invalid length. [ 151.963715][ T7219] netlink: 'syz.0.418': attribute type 7 has an invalid length. [ 152.149155][ T7223] input: syz0 as /devices/virtual/input/input5 [ 152.462773][ T7233] loop4: detected capacity change from 0 to 4096 [ 152.501329][ T7233] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 152.518817][ T7233] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 152.557743][ T7233] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 152.604203][ T7233] ntfs: volume version 3.1. [ 152.634450][ T7233] ntfs: (device loop4): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 152.659137][ T7233] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 152.690971][ T7233] ntfs: (device loop4): load_and_init_quota(): Failed to load $Quota/$Q index. [ 152.712895][ T7233] ntfs: (device loop4): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 153.745444][ T7265] netlink: 'syz.4.437': attribute type 18 has an invalid length. [ 153.763641][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'. [ 153.790061][ T7265] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.799544][ T7265] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.808652][ T7265] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.817442][ T7265] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.845096][ T7265] netlink: 'syz.4.437': attribute type 18 has an invalid length. [ 153.853095][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'. [ 154.288496][ T7276] overlayfs: failed to clone upperpath [ 154.315171][ T7276] overlayfs: failed to clone upperpath [ 154.950615][ T7301] netlink: 27 bytes leftover after parsing attributes in process `syz.4.452'. [ 155.233977][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.455'. [ 155.659334][ T7324] loop3: detected capacity change from 0 to 2048 [ 155.673738][ T7324] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.680352][ T7324] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.687223][ T7324] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.725821][ T7324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.859253][ T7324] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.461: bg 0: block 234: padding at end of block bitmap is not set [ 155.879499][ T7324] EXT4-fs (loop3): Remounting filesystem read-only [ 155.938321][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.433197][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 156.625871][ T7348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.653893][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 156.674877][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.692323][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.714603][ T27] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 156.733167][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.752618][ T27] usb 4-1: config 0 descriptor?? [ 156.787358][ T27] hub 4-1:0.0: USB hub found [ 156.803451][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.996481][ T27] hub 4-1:0.0: 1 port detected [ 157.650189][ T27] hub 4-1:0.0: activate --> -90 [ 158.009642][ T7377] netlink: 14 bytes leftover after parsing attributes in process `syz.0.480'. [ 158.052739][ T27] usb 4-1-port1: config error [ 158.053638][ T9] usb 4-1: USB disconnect, device number 4 [ 159.123028][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 159.147065][ T7396] netlink: 16 bytes leftover after parsing attributes in process `syz.3.489'. [ 159.159899][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 159.192211][ T7396] netlink: 16 bytes leftover after parsing attributes in process `syz.3.489'. [ 159.611662][ T7411] loop4: detected capacity change from 0 to 512 [ 159.661739][ T7411] EXT4-fs: Mount option(s) incompatible with ext2 [ 159.949861][ T7419] loop3: detected capacity change from 0 to 512 [ 159.990266][ T7419] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 160.102500][ T7419] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.497: invalid indirect mapped block 32768 (level 2) [ 160.139869][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.501'. [ 160.193712][ T7419] EXT4-fs (loop3): 1 orphan inode deleted [ 160.210776][ T7427] vxlan0: entered promiscuous mode [ 160.233035][ T7419] EXT4-fs (loop3): 1 truncate cleaned up [ 160.244953][ T7419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.357961][ T7419] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1430: inode #12: block 7: comm syz.3.497: path /118/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 160.408310][ T7432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.502'. [ 160.419798][ T7434] EXT4-fs error (device loop3): ext4_check_all_de:666: inode #12: block 7: comm syz.3.497: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 160.563726][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.898595][ T7450] loop3: detected capacity change from 0 to 1024 [ 160.907886][ T7450] EXT4-fs: Ignoring removed bh option [ 160.954078][ T7450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 160.966445][ T7450] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.215452][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 161.829100][ T7474] capability: warning: `syz.0.517' uses 32-bit capabilities (legacy support in use) [ 161.936374][ T7478] batman_adv: batadv0: Adding interface: ip6gretap1 [ 161.956890][ T7478] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.021779][ T7478] batman_adv: batadv0: Interface activated: ip6gretap1 [ 162.554137][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'. [ 164.853169][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 165.043270][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 165.055286][ T9] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 165.073095][ T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 165.091855][ T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 165.113061][ T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 165.129857][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 165.140802][ T9] usb 1-1: config 0 has no interface number 0 [ 165.147830][ T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 165.179810][ T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 165.200570][ T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 165.225062][ T9] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.259356][ T9] usb 1-1: config 0 interface 125 has no altsetting 0 [ 165.269478][ T9] usb 1-1: config 0 interface 125 has no altsetting 2 [ 165.290502][ T9] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 165.320205][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.343971][ T9] usb 1-1: Product: syz [ 165.348213][ T9] usb 1-1: Manufacturer: syz [ 165.352861][ T9] usb 1-1: SerialNumber: syz [ 165.401694][ T9] usb 1-1: config 0 descriptor?? [ 165.419182][ T9] usb 1-1: selecting invalid altsetting 2 [ 165.433932][ T7561] netlink: 'syz.4.555': attribute type 1 has an invalid length. [ 165.456328][ T7561] netlink: 'syz.4.555': attribute type 4 has an invalid length. [ 165.472301][ T7561] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.555'. [ 165.653877][ T7569] trusted_key: syz.3.560 sent an empty control message without MSG_MORE. [ 166.246781][ T9] parport0: fix this legacy no-device port driver! [ 166.516031][ T5823] usb 1-1: USB disconnect, device number 4 [ 166.758260][ T7589] netlink: 'syz.4.566': attribute type 4 has an invalid length. [ 168.435637][ T7627] loop3: detected capacity change from 0 to 512 [ 168.451640][ T7627] EXT4-fs: Ignoring removed bh option [ 168.496580][ T7627] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.581: corrupted in-inode xattr: e_value size too large [ 168.527971][ T7627] EXT4-fs (loop3): Remounting filesystem read-only [ 168.544032][ T7627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.660687][ T7633] netlink: 'syz.4.583': attribute type 1 has an invalid length. [ 168.679094][ T7633] netlink: 'syz.4.583': attribute type 22 has an invalid length. [ 168.699165][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.720868][ T7633] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.730659][ T7633] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.298033][ T7648] overlayfs: failed to clone upperpath [ 169.510433][ T7650] bond1: entered allmulticast mode [ 169.636730][ T7654] bond1: (slave macvlan4): Opening slave failed [ 170.110404][ T7643] loop0: detected capacity change from 0 to 40427 [ 170.149111][ T7643] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 170.177012][ T7643] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 170.217762][ T7643] F2FS-fs (loop0): Image doesn't support compression [ 170.241231][ T7643] F2FS-fs (loop0): Image doesn't support compression [ 170.278771][ T7643] F2FS-fs (loop0): invalid crc value [ 170.506179][ T7643] F2FS-fs (loop0): Start checkpoint disabled! [ 170.603031][ T7643] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 170.618190][ T7643] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 170.785649][ T28] audit: type=1800 audit(1784315549.076:33): pid=7643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.587" name="file0" dev="loop0" ino=14 res=0 errno=0 [ 170.898992][ T42] kworker/u4:2: attempt to access beyond end of device [ 170.898992][ T42] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 170.927238][ T42] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 170.940169][ T42] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 171.703615][ T5824] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 171.726210][ T7691] netlink: 132 bytes leftover after parsing attributes in process `syz.1.607'. [ 171.937336][ T5824] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 171.946749][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.972994][ T5824] usb 4-1: Product: syz [ 171.988435][ T5824] usb 4-1: Manufacturer: syz [ 172.004261][ T5824] usb 4-1: SerialNumber: syz [ 172.358202][ T5824] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 172.394360][ T5824] snd-usb-audio: probe of 4-1:1.1 failed with error -2 [ 172.415444][ T5824] usb 4-1: USB disconnect, device number 5 [ 173.205579][ T7719] 9pnet: p9_errstr2errno: server reported unknown error Xí®q¸dÀ [ 173.393748][ T7709] loop0: detected capacity change from 0 to 131072 [ 173.405743][ T7709] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 173.412508][ T7709] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 173.424163][ T7709] F2FS-fs (loop0): invalid crc value [ 173.457418][ T7709] F2FS-fs (loop0): Found nat_bits in checkpoint [ 173.519124][ T7709] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 173.526442][ T7709] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 173.615304][ T7709] F2FS-fs (loop0): Stopped filesystem due to reason: 0 [ 173.807230][ T7734] netlink: 'syz.4.625': attribute type 1 has an invalid length. [ 173.856777][ T7734] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.026223][ T7734] bond2: (slave macvlan1): making interface the new active one [ 174.046333][ T7734] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 175.071647][ T7756] netlink: 'syz.3.634': attribute type 1 has an invalid length. [ 175.108729][ T7756] netlink: 1339 bytes leftover after parsing attributes in process `syz.3.634'. [ 176.074946][ T7763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.330754][ T7798] binder: 7797:7798 ioctl c0306201 2000000001c0 returned -14 [ 176.406063][ T5786] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 176.416402][ T5786] Bluetooth: hci1: Injecting HCI hardware error event [ 176.428989][ T5786] Bluetooth: hci1: hardware error 0x00 [ 176.557090][ T5793] Bluetooth: hci1: unexpected event for opcode 0x100c [ 176.733500][ T7803] loop4: detected capacity change from 0 to 8192 [ 176.782074][ T7803] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 176.841221][ T7803] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 176.863990][ T7803] REISERFS (device loop4): using ordered data mode [ 176.870580][ T7803] reiserfs: using flush barriers [ 176.901997][ T7803] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 176.963861][ T7803] REISERFS (device loop4): checking transaction log (loop4) [ 177.188280][ T7803] REISERFS (device loop4): Using tea hash to sort names [ 177.242217][ T7803] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 177.324570][ T5823] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 177.523477][ T5823] usb 4-1: Using ep0 maxpacket: 32 [ 177.550917][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.579962][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.601749][ T5823] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 177.636320][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.685598][ T5823] usb 4-1: config 0 descriptor?? [ 177.706259][ T5823] hub 4-1:0.0: USB hub found [ 178.568001][ T5786] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 179.316297][ T5823] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 179.348690][ T7843] loop4: detected capacity change from 0 to 128 [ 179.358084][ T5823] usbhid 4-1:0.0: can't add hid device: -71 [ 179.370621][ T5823] usbhid: probe of 4-1:0.0 failed with error -71 [ 179.442243][ T5823] usb 4-1: USB disconnect, device number 6 [ 179.532230][ T28] audit: type=1800 audit(1784315557.816:34): pid=7843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.665" name="file2" dev="loop4" ino=1048599 res=0 errno=0 [ 179.582222][ T7843] syz.4.665: attempt to access beyond end of device [ 179.582222][ T7843] loop4: rw=2049, sector=145, nr_sectors = 79 limit=128 [ 179.771130][ T7847] syz.4.665: attempt to access beyond end of device [ 179.771130][ T7847] loop4: rw=2049, sector=145, nr_sectors = 72 limit=128 [ 179.838519][ T7847] syz.4.665: attempt to access beyond end of device [ 179.838519][ T7847] loop4: rw=2049, sector=217, nr_sectors = 1 limit=128 [ 179.956731][ T7847] Buffer I/O error on dev loop4, logical block 217, lost async page write [ 180.003696][ T7847] syz.4.665: attempt to access beyond end of device [ 180.003696][ T7847] loop4: rw=2049, sector=218, nr_sectors = 1 limit=128 [ 180.057590][ T7847] Buffer I/O error on dev loop4, logical block 218, lost async page write [ 180.097001][ T7847] syz.4.665: attempt to access beyond end of device [ 180.097001][ T7847] loop4: rw=2049, sector=219, nr_sectors = 1 limit=128 [ 180.183119][ T7847] Buffer I/O error on dev loop4, logical block 219, lost async page write [ 180.233167][ T7847] syz.4.665: attempt to access beyond end of device [ 180.233167][ T7847] loop4: rw=2049, sector=220, nr_sectors = 1 limit=128 [ 180.297357][ T7847] Buffer I/O error on dev loop4, logical block 220, lost async page write [ 180.337681][ T7847] syz.4.665: attempt to access beyond end of device [ 180.337681][ T7847] loop4: rw=2049, sector=221, nr_sectors = 1 limit=128 [ 180.402665][ T7847] Buffer I/O error on dev loop4, logical block 221, lost async page write [ 180.415104][ T7847] syz.4.665: attempt to access beyond end of device [ 180.415104][ T7847] loop4: rw=2049, sector=222, nr_sectors = 1 limit=128 [ 180.452998][ T7847] Buffer I/O error on dev loop4, logical block 222, lost async page write [ 180.469859][ T7847] syz.4.665: attempt to access beyond end of device [ 180.469859][ T7847] loop4: rw=2049, sector=223, nr_sectors = 1 limit=128 [ 180.488336][ T7847] Buffer I/O error on dev loop4, logical block 223, lost async page write [ 180.769252][ T7866] geneve2: entered promiscuous mode [ 180.967368][ T7871] overlayfs: statfs failed on './file0' [ 183.683148][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 183.978025][ T7960] overlayfs: failed to clone upperpath [ 184.085101][ T7964] loop0: detected capacity change from 0 to 256 [ 184.180451][ T7964] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 184.894684][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'. [ 185.005604][ T7983] loop3: detected capacity change from 0 to 4096 [ 185.185566][ T7983] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 185.307888][ T7992] netlink: 'syz.1.705': attribute type 1 has an invalid length. [ 185.311663][ T7983] ntfs3: loop3: Failed to load $Extend (-22). [ 185.351947][ T7983] ntfs3: loop3: Failed to initialize $Extend. [ 185.507302][ T7992] bond1: entered promiscuous mode [ 185.560154][ T7992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.793632][ T7995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.811387][ T7995] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 185.846847][ T7995] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 185.923244][ T7995] bond1: (slave ip6gre2): making interface the new active one [ 185.940333][ T7995] ip6gre2: entered promiscuous mode [ 185.948857][ T7995] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 186.184273][ T8003] syzkaller1: entered promiscuous mode [ 186.189846][ T8003] syzkaller1: entered allmulticast mode [ 186.190067][ T8007] loop4: detected capacity change from 0 to 128 [ 186.442242][ T8013] netlink: 1335 bytes leftover after parsing attributes in process `syz.1.712'. [ 187.413817][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802cdd2400: rx timeout, send abort [ 187.914054][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802df8b400: rx timeout, send abort [ 187.924458][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802cdd2400: abort rx timeout. Force session deactivation [ 188.003457][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 188.203400][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 188.214753][ T9] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 188.243040][ T9] usb 1-1: config 2 has no interface number 0 [ 188.269617][ T9] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 188.310703][ T9] usb 1-1: config 2 interface 88 has no altsetting 0 [ 188.334927][ T9] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 188.353293][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 188.371675][ T9] usb 1-1: Product: syz [ 188.376103][ T9] usb 1-1: Manufacturer: syz [ 188.380754][ T9] usb 1-1: SerialNumber: syz [ 188.403824][ T8058] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 188.422455][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802df8b400: abort rx timeout. Force session deactivation [ 188.661519][ T8058] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 188.821234][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'. [ 188.854175][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'. [ 189.898307][ T9] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 189.925281][ T9] asix 1-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 189.963770][ T9] asix: probe of 1-1:2.88 failed with error -71 [ 190.013154][ T9] usb 1-1: USB disconnect, device number 5 [ 191.165388][ T8103] loop0: detected capacity change from 0 to 16 [ 191.206114][ T8103] erofs: (device loop0): mounted with root inode @ nid 36. [ 191.577914][ T8106] loop0: detected capacity change from 0 to 128 [ 192.989894][ T8128] netlink: 'syz.3.755': attribute type 5 has an invalid length. [ 193.469436][ T8140] gretap1: entered promiscuous mode [ 194.192253][ T8142] loop3: detected capacity change from 0 to 32768 [ 194.260733][ T8142] loop3: p1 p3 < > [ 194.579328][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.585894][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.819173][ T5795] udevd[5795]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 194.834984][ T6228] udevd[6228]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 195.125380][ T8173] input: syz0 as /devices/virtual/input/input6 [ 195.153161][ T8173] input: failed to attach handler leds to device input6, error: -6 [ 195.474989][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.779'. [ 195.494438][ T8167] loop3: detected capacity change from 0 to 32768 [ 195.630467][ T8167] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 195.693325][ T8167] XFS (loop3): Ending clean mount [ 195.886783][ T5778] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 196.802067][ T8200] loop4: detected capacity change from 0 to 40427 [ 196.828497][ T8200] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 196.848406][ T8200] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 196.878832][ T8200] F2FS-fs (loop4): Found nat_bits in checkpoint [ 197.025256][ T8200] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 197.032472][ T8200] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 197.118033][ T8200] syz.4.783: attempt to access beyond end of device [ 197.118033][ T8200] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 197.249652][ T6059] syz-executor: attempt to access beyond end of device [ 197.249652][ T6059] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 197.292641][ T6059] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 197.528220][ T8234] loop3: detected capacity change from 0 to 256 [ 197.554162][ T8234] exfat: Deprecated parameter 'utf8' [ 197.634557][ T8234] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 197.970699][ T8239] loop0: detected capacity change from 0 to 1024 [ 199.320289][ T8278] loop3: detected capacity change from 0 to 4096 [ 199.333194][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 199.433341][ T8279] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.556675][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 199.577764][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.613615][ T9] usb 1-1: Product: syz [ 199.617865][ T9] usb 1-1: Manufacturer: syz [ 199.643038][ T9] usb 1-1: SerialNumber: syz [ 199.664447][ T9] usb 1-1: config 0 descriptor?? [ 199.914533][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 200.045257][ T5826] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 200.248450][ T5826] usb 4-1: Using ep0 maxpacket: 16 [ 200.265947][ T5826] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.283057][ T5826] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.300278][ T5826] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.310656][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.321039][ T5826] usb 4-1: Product: syz [ 200.326691][ T5826] usb 4-1: Manufacturer: syz [ 200.331397][ T5826] usb 4-1: SerialNumber: syz [ 200.446054][ T8292] overlayfs: failed to clone upperpath [ 200.558253][ T5826] usb 4-1: 0:2 : does not exist [ 200.587180][ T5826] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 200.651675][ T5826] usb 4-1: USB disconnect, device number 7 [ 200.761820][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.927460][ T9] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 200.943270][ T9] usb 1-1: USB disconnect, device number 6 [ 201.810942][ T8328] loop0: detected capacity change from 0 to 2048 [ 201.878619][ T8328] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.952551][ T8366] loop0: detected capacity change from 0 to 512 [ 203.005285][ T8366] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 203.492435][ T8380] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.846'. [ 203.558306][ T8378] loop0: detected capacity change from 0 to 4096 [ 203.646903][ T8378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.703319][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.848'. [ 203.712427][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.848'. [ 203.723853][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.848'. [ 203.732810][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.848'. [ 204.082252][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.235903][ T8397] loop3: detected capacity change from 0 to 256 [ 204.307260][ T8397] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 204.323517][ T8399] Failed to get privilege flags for destination (handle=0x0:0x0) [ 206.593385][ T5823] IPVS: starting estimator thread 0... [ 206.693098][ T8416] IPVS: using max 17 ests per chain, 40800 per kthread [ 207.806881][ T28] audit: type=1326 audit(1784315586.096:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.873" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b439de99 code=0x7ffc0000 [ 207.873100][ T28] audit: type=1326 audit(1784315586.126:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.873" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b439de99 code=0x7ffc0000 [ 207.968969][ T28] audit: type=1326 audit(1784315586.126:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.873" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b439de99 code=0x7ffc0000 [ 208.031046][ T28] audit: type=1326 audit(1784315586.126:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.873" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b439de99 code=0x7ffc0000 [ 208.101070][ T28] audit: type=1326 audit(1784315586.126:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.873" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f39b439de99 code=0x7ffc0000 [ 208.163169][ T28] audit: type=1326 audit(1784315586.126:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.873" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b439de99 code=0x7ffc0000 [ 208.253191][ T28] audit: type=1326 audit(1784315586.126:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.873" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b439de99 code=0x7ffc0000 [ 208.313023][ T28] audit: type=1326 audit(1784315586.126:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.873" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b439de99 code=0x7ffc0000 [ 208.386518][ T28] audit: type=1326 audit(1784315586.126:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.873" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b439de99 code=0x7ffc0000 [ 208.466609][ T8464] loop4: detected capacity change from 0 to 256 [ 208.483709][ T28] audit: type=1326 audit(1784315586.126:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.873" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b439de99 code=0x7ffc0000 [ 209.758744][ T8502] tipc: Started in network mode [ 209.768316][ T8502] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711 [ 209.788848][ T8502] tipc: Enabling of bearer rejected, failed to enable media [ 210.341060][ T8518] netlink: 528 bytes leftover after parsing attributes in process `syz.3.901'. [ 210.797054][ T8532] loop3: detected capacity change from 0 to 128 [ 212.326490][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.340811][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.350799][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.372206][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.387979][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.400313][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.945230][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.926'. [ 213.030606][ T8556] chnl_net:caif_netlink_parms(): no params data found [ 213.251079][ T8556] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.258887][ T8556] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.295431][ T8556] bridge_slave_0: entered allmulticast mode [ 213.316203][ T8556] bridge_slave_0: entered promiscuous mode [ 213.353409][ T8556] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.360639][ T8556] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.423310][ T8556] bridge_slave_1: entered allmulticast mode [ 213.430913][ T8556] bridge_slave_1: entered promiscuous mode [ 213.536498][ T8556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.564833][ T8556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.711762][ T8556] team0: Port device team_slave_0 added [ 213.749958][ T8556] team0: Port device team_slave_1 added [ 213.807414][ T8556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.818300][ T8556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.848173][ T8556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.880154][ T8556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.888216][ T8556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.935516][ T8556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.100250][ T8556] hsr_slave_0: entered promiscuous mode [ 214.110919][ T8556] hsr_slave_1: entered promiscuous mode [ 214.122678][ T8556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.131711][ T8556] Cannot create hsr debugfs directory [ 214.483466][ T5786] Bluetooth: hci1: command tx timeout [ 214.747438][ T8556] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 214.761745][ T8556] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 214.778630][ T8556] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 214.800596][ T8556] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 215.036933][ T8556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.102550][ T8556] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.132696][ T7930] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.139961][ T7930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.189845][ T4220] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.197059][ T4220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.626089][ T8556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.011422][ T8556] veth0_vlan: entered promiscuous mode [ 216.028991][ T8556] veth1_vlan: entered promiscuous mode [ 216.076123][ T8556] veth0_macvtap: entered promiscuous mode [ 216.099834][ T8556] veth1_macvtap: entered promiscuous mode [ 216.158835][ T8556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.174220][ T8556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.190044][ T8556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.200686][ T8556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.212340][ T8556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.223523][ T8556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.233678][ T8556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.245260][ T8556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.260791][ T8556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.287658][ T8556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.302033][ T8556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.320710][ T8556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.331970][ T8556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.350193][ T8556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.371079][ T8556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.381805][ T8556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.399880][ T8556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.419936][ T8556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.448375][ T8556] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.477254][ T8556] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.489540][ T8556] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.500954][ T8556] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.570119][ T5787] Bluetooth: hci1: command tx timeout [ 217.131784][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 217.138060][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 217.600281][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.653949][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.716105][ T5824] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 217.727927][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.740010][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.933408][ T5824] usb 1-1: Using ep0 maxpacket: 16 [ 217.945636][ T5824] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 217.971537][ T5824] usb 1-1: config 0 has no interface number 0 [ 217.983246][ T5824] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 218.005666][ T5824] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 218.022145][ T5824] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 218.032325][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.040509][ T5824] usb 1-1: Product: syz [ 218.045122][ T5824] usb 1-1: Manufacturer: syz [ 218.049783][ T5824] usb 1-1: SerialNumber: syz [ 218.066286][ T5824] usb 1-1: config 0 descriptor?? [ 218.075533][ T8649] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 218.093367][ T8649] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 218.327540][ T8649] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 218.337043][ T8649] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 218.563504][ T5824] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 218.643721][ T5793] Bluetooth: hci1: command tx timeout [ 219.561082][ T5824] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 219.585346][ T5824] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 219.614969][ T5824] asix: probe of 1-1:0.34 failed with error -71 [ 219.652099][ T5824] usb 1-1: USB disconnect, device number 7 [ 220.723631][ T5793] Bluetooth: hci1: command tx timeout [ 221.275950][ T8728] loop0: detected capacity change from 0 to 1024 [ 221.325994][ T8728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.344164][ T8728] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.375171][ T8728] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.982: bg 0: block 112: padding at end of block bitmap is not set [ 221.402704][ T8728] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 221.420273][ T8728] EXT4-fs (loop0): This should not happen!! Data will be lost [ 221.420273][ T8728] [ 221.430797][ T8728] EXT4-fs (loop0): Total free blocks count 0 [ 221.434589][ T28] kauditd_printk_skb: 422 callbacks suppressed [ 221.434631][ T28] audit: type=1800 audit(1784315599.716:467): pid=8736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.982" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 221.438669][ T8728] EXT4-fs (loop0): Free/Dirty block details [ 221.472099][ T8735] loop5: detected capacity change from 0 to 128 [ 221.478698][ T8728] EXT4-fs (loop0): free_blocks=0 [ 221.478794][ T8728] EXT4-fs (loop0): dirty_blocks=64 [ 221.478812][ T8728] EXT4-fs (loop0): Block reservation details [ 221.478827][ T8728] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 221.489399][ T8737] EXT4-fs (loop0): shut down requested (1) [ 222.073079][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 222.206937][ T8739] loop4: detected capacity change from 0 to 32768 [ 222.269854][ T8739] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 222.291203][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.307198][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.316927][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.333049][ T8] usb 1-1: Product: syz [ 222.337315][ T8] usb 1-1: Manufacturer: syz [ 222.343508][ T8] usb 1-1: SerialNumber: syz [ 222.525558][ T8739] XFS (loop4): Ending clean mount [ 222.612758][ T8739] XFS (loop4): User initiated shutdown received. [ 222.644214][ T8739] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 222.689487][ T8739] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 222.762514][ T6059] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 223.086220][ T8763] loop5: detected capacity change from 0 to 128 [ 223.159913][ T8763] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.210733][ T8763] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 223.389641][ T8] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 223.396601][ T8] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 223.410676][ T8] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 223.456112][ T8556] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.813627][ T8780] gre2: entered promiscuous mode [ 223.829637][ T8] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 223.933316][ T8] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 223.973258][ T8] usb 1-1: USB disconnect, device number 8 [ 223.984126][ T8] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 224.912520][ T8813] sctp: [Deprecated]: syz.0.1010 (pid 8813) Use of int in maxseg socket option. [ 224.912520][ T8813] Use struct sctp_assoc_value instead [ 225.177884][ T8822] loop5: detected capacity change from 0 to 1024 [ 225.196121][ T8822] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 225.232512][ T8822] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 225.251426][ T8822] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 225.305394][ T8822] EXT4-fs error (device loop5): ext4_get_journal_inode:5820: inode #5: comm syz.5.1014: unexpected bad inode w/o EXT4_IGET_BAD [ 225.332455][ T8822] EXT4-fs (loop5): no journal found [ 225.334345][ T8824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1015'. [ 225.351045][ T8822] EXT4-fs (loop5): can't get journal size [ 225.368371][ T8822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 225.518409][ T8556] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.474360][ T5823] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 226.512621][ T8859] loop4: detected capacity change from 0 to 256 [ 226.570197][ T8859] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 226.694841][ T5823] usb 6-1: Using ep0 maxpacket: 32 [ 226.716223][ T5823] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 226.731124][ T5823] usb 6-1: config 0 has no interface number 0 [ 226.738510][ T5823] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.757417][ T5823] usb 6-1: config 0 interface 85 has no altsetting 0 [ 226.768482][ T5823] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 226.785617][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.798757][ T5823] usb 6-1: Product: syz [ 226.813164][ T5823] usb 6-1: Manufacturer: syz [ 226.817892][ T5823] usb 6-1: SerialNumber: syz [ 226.845407][ T5823] usb 6-1: config 0 descriptor?? [ 227.471528][ T8863] loop0: detected capacity change from 0 to 40427 [ 227.491482][ T8863] F2FS-fs (loop0): invalid crc value [ 227.519381][ T5823] appletouch 6-1:0.85: Geyser mode initialized. [ 227.532992][ T8863] F2FS-fs (loop0): Found nat_bits in checkpoint [ 227.552811][ T5823] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input7 [ 227.726880][ T8863] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 227.754484][ T56] usb 6-1: USB disconnect, device number 2 [ 227.840184][ T56] appletouch 6-1:0.85: input: appletouch disconnected [ 227.926688][ T5783] syz-executor: attempt to access beyond end of device [ 227.926688][ T5783] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 227.945656][ T5783] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 227.999092][ T8890] loop4: detected capacity change from 0 to 128 [ 228.058688][ T8890] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.090699][ T8890] ext4 filesystem being mounted at /224/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 228.260155][ T8897] "syz.1.1047" (8897) uses obsolete ecb(arc4) skcipher [ 228.351635][ T6059] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.804737][ T8909] tipc: Failed to remove unknown binding: 66,1,1/0:852177631/852177633 [ 228.816171][ T8909] tipc: Failed to remove unknown binding: 66,1,1/0:852177631/852177633 [ 228.965111][ T8913] loop0: detected capacity change from 0 to 256 [ 229.015775][ T8913] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 229.035833][ T7933] [ 229.038404][ T7933] ============================================ [ 229.044575][ T7933] WARNING: possible recursive locking detected [ 229.050741][ T7933] syzkaller #0 Not tainted [ 229.055227][ T7933] -------------------------------------------- [ 229.061395][ T7933] kworker/u4:14/7933 is trying to acquire lock: [ 229.067644][ T7933] ffffe8ffffd5df58 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x624/0xa40 [ 229.076902][ T7933] [ 229.076902][ T7933] but task is already holding lock: [ 229.084293][ T7933] ffffe8ffffd5eaa8 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4bf/0xa40 [ 229.093542][ T7933] [ 229.093542][ T7933] other info that might help us debug this: [ 229.101609][ T7933] Possible unsafe locking scenario: [ 229.101609][ T7933] [ 229.109062][ T7933] CPU0 [ 229.112359][ T7933] ---- [ 229.115646][ T7933] lock(&pd_list->lock); [ 229.119998][ T7933] lock(&pd_list->lock); [ 229.124336][ T7933] [ 229.124336][ T7933] *** DEADLOCK *** [ 229.124336][ T7933] [ 229.132497][ T7933] May be due to missing lock nesting notation [ 229.132497][ T7933] [ 229.140813][ T7933] 3 locks held by kworker/u4:14/7933: [ 229.146186][ T7933] #0: ffff88801928d538 ((wq_completion)pdecrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 229.158143][ T7933] #1: ffffc9001a017d00 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 229.170028][ T7933] #2: ffffe8ffffd5eaa8 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4bf/0xa40 [ 229.179799][ T7933] [ 229.179799][ T7933] stack backtrace: [ 229.185720][ T7933] CPU: 0 PID: 7933 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 229.193382][ T7933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 229.203480][ T7933] Workqueue: pdecrypt_parallel padata_parallel_worker [ 229.210298][ T7933] Call Trace: [ 229.213601][ T7933] [ 229.216643][ T7933] dump_stack_lvl+0x18c/0x250 [ 229.221353][ T7933] ? show_regs_print_info+0x20/0x20 [ 229.226580][ T7933] ? print_deadlock_bug+0x435/0x5d0 [ 229.231804][ T7933] __lock_acquire+0x6809/0x7d80 [ 229.236669][ T7933] ? __lock_acquire+0x7d80/0x7d80 [ 229.241716][ T7933] ? do_raw_spin_unlock+0x121/0x230 [ 229.246939][ T7933] ? verify_lock_unused+0x140/0x140 [ 229.252155][ T7933] ? mark_lock+0x94/0x320 [ 229.256501][ T7933] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 229.262499][ T7933] ? __lock_acquire+0x7d80/0x7d80 [ 229.267542][ T7933] lock_acquire+0x19e/0x420 [ 229.272066][ T7933] ? padata_do_serial+0x624/0xa40 [ 229.277212][ T7933] ? lockdep_hardirqs_on+0x98/0x150 [ 229.282432][ T7933] ? queue_work_on+0x19a/0x1f0 [ 229.287221][ T7933] ? read_lock_is_recursive+0x20/0x20 [ 229.292611][ T7933] ? __rwlock_init+0x150/0x150 [ 229.297390][ T7933] _raw_spin_lock+0x2e/0x40 [ 229.301914][ T7933] ? padata_do_serial+0x624/0xa40 [ 229.306951][ T7933] padata_do_serial+0x624/0xa40 [ 229.311824][ T7933] ? padata_parallel_worker+0x44/0x1c0 [ 229.317293][ T7933] padata_parallel_worker+0x6f/0x1c0 [ 229.322608][ T7933] ? process_scheduled_works+0x975/0x1600 [ 229.328372][ T7933] process_scheduled_works+0xa60/0x1600 [ 229.333954][ T7933] ? worker_attach_to_pool+0x370/0x370 [ 229.339433][ T7933] ? assign_work+0x3cc/0x5d0 [ 229.344035][ T7933] worker_thread+0xa5e/0xfe0 [ 229.348677][ T7933] kthread+0x2fa/0x390 [ 229.352749][ T7933] ? pr_cont_work+0x550/0x550 [ 229.357456][ T7933] ? kthread_blkcg+0xd0/0xd0 [ 229.362060][ T7933] ret_from_fork+0x48/0x80 [ 229.366500][ T7933] ? kthread_blkcg+0xd0/0xd0 [ 229.371119][ T7933] ret_from_fork_asm+0x11/0x20 [ 229.375985][ T7933] [ 232.483416][ T5786] Bluetooth: hci3: command 0x0406 tx timeout