last executing test programs: 3m13.522574775s ago: executing program 2 (id=68): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000d00)={r2, @in6={{0xa, 0x4e21, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfff}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x44040}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000440)={r3, 0xfffffffe}, &(0x7f00000004c0)=0x8) 3m13.36349444s ago: executing program 2 (id=70): r0 = memfd_create(&(0x7f0000000200)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd3:{\r\x91.\xdb\x18\xf68|\xfdxn\x1b\x17\xacMz\x1dc\x1d5\x9fe/\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4\x00\x00\x00\x00\x00\x00\x00\xcdl\xa5\f*Ls-\xfbg\xb4\x051\x11\x8di\xba\r(\xb9%i\x9f\xea\xe2\xbcHE\xb7\xf6R<\xdd\x03\xed\x94LC\x85\xfe\x8b;\xe9\x93:M\x1b+y\x03r\x9c\xa4\xfcU\xcaw\xd9\x05rFY\xaa\xf5\x18.\xbc~\xf4\xc2^\x9ce]\xa9\xb7=\xaa3i\xd0W/\xfa\x92N\xf04\xe2\xab\xb4\xeb\xff', 0x0) ftruncate(r0, 0x8800000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) sendfile(r3, r0, 0x0, 0x1000009) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x80) 3m13.047353038s ago: executing program 2 (id=73): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000400000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 3m12.945046501s ago: executing program 2 (id=74): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1527, &(0x7f0000002c40)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000100)='?', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 3m12.692464898s ago: executing program 2 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3m12.516652502s ago: executing program 2 (id=77): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8}]}, 0x5e}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m12.153990312s ago: executing program 32 (id=77): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8}]}, 0x5e}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m3.049773294s ago: executing program 0 (id=121): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x254fe) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000240)=""/242, 0x40000, 0x20, 0x0, 0x0) 3m2.620622475s ago: executing program 0 (id=123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14001180090001006c61737400000000040002801400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 3m2.360327222s ago: executing program 0 (id=126): r0 = io_uring_setup(0x3309, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x3, 0xfa}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3m2.111461879s ago: executing program 0 (id=128): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1527, &(0x7f0000002c40)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000100)='?', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 3m1.485288996s ago: executing program 0 (id=133): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x80000000}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 3m0.963525519s ago: executing program 0 (id=135): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r3}, &(0x7f0000001380), &(0x7f00000013c0)=r0}, 0x20) 3m0.624100879s ago: executing program 33 (id=135): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r3}, &(0x7f0000001380), &(0x7f00000013c0)=r0}, 0x20) 2m46.383247497s ago: executing program 1 (id=195): epoll_create1(0x80000) r0 = socket$unix(0x1, 0x5, 0x0) close(r0) socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r1 = io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0xeec2, 0x800, 0x2, 0x116}) close_range(r1, r1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) 2m45.420038383s ago: executing program 1 (id=204): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x800) 2m45.14798461s ago: executing program 1 (id=206): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x100, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) 2m45.017189694s ago: executing program 1 (id=208): creat(&(0x7f00000000c0)='./file0\x00', 0x3) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) syz_emit_ethernet(0x32, &(0x7f0000000440)={@link_local, @random="6edce30d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xc0, 0x100}}}}}}}, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2m44.834812708s ago: executing program 1 (id=209): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m44.595978454s ago: executing program 1 (id=211): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 2m29.216049863s ago: executing program 34 (id=211): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 2m16.16729316s ago: executing program 4 (id=305): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x800000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x202a488, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x2) 2m15.779277311s ago: executing program 4 (id=308): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bind$tipc(r0, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 2m15.554218477s ago: executing program 4 (id=309): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 2m12.896403547s ago: executing program 4 (id=316): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 2m12.664550763s ago: executing program 4 (id=317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000600)={0x2, 0x0, [{0x400000b0, 0x0, 0x5}, {0x400000b1, 0x0, 0x7f}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]}) 2m12.231931585s ago: executing program 4 (id=320): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000005000000000000000200000d0000000000000000020000000000000000001800030000000000000e"], &(0x7f00000000c0)=""/169, 0x49, 0xa9, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="d1cc67"], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 2m12.112576248s ago: executing program 35 (id=320): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000005000000000000000200000d0000000000000000020000000000000000001800030000000000000e"], &(0x7f00000000c0)=""/169, 0x49, 0xa9, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="d1cc67"], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 29.775637959s ago: executing program 6 (id=1199): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x100}], 0x18, 0x8005}, 0x40040) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@deltfilter={0x43c, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0x3, 0xffe0}, {0x9}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0xffffff21, 0x9, 0x8000, 0x10001, 0x3, 0x80000000, 0xb4cb, 0x5, 0x2, 0xfffffeff, 0x370b2c2, 0x5, 0x2, 0x1b92, 0xa, 0x5, 0x6d58, 0x81, 0x6, 0xfffffffc, 0x6f, 0x7f, 0x3, 0x80, 0x7, 0x7, 0x12fd96d2, 0xfffff000, 0x40, 0x7, 0xa, 0x2, 0x3, 0x5, 0x6, 0x401, 0x1000, 0x0, 0xd, 0x6, 0xa, 0x800, 0x8, 0x7, 0x8, 0xfffffffa, 0x20000, 0x8, 0x6, 0x80, 0x1, 0x8, 0x73, 0x800, 0x351, 0x70b0, 0x1, 0x1, 0x1dd2, 0x51d22a98, 0x0, 0x3, 0x8000, 0xf, 0xfffff81f, 0x3, 0x7, 0x5, 0x3, 0x400, 0x8001, 0xfffffffa, 0x1000, 0x293, 0x7, 0x4, 0x80, 0x9, 0x5, 0x2, 0x1, 0x200, 0x7, 0x80000001, 0x4, 0x10, 0x7, 0x7, 0x3a, 0xfffffffd, 0x4, 0x3, 0x7f, 0xfbf, 0x100, 0x8, 0x2, 0xe, 0x401, 0x1, 0xfffff801, 0x4, 0x7fffffff, 0x8, 0x80000001, 0x10, 0xffffffff, 0x800, 0x9, 0x3, 0x80, 0x8, 0x3, 0x396e, 0x200, 0xffffffff, 0x10, 0x81, 0x0, 0x80000001, 0x4, 0xb, 0x2f, 0x6, 0x5, 0x316, 0x4, 0xc880eca, 0xffff, 0x9, 0x401, 0xf, 0x3, 0x8, 0x0, 0x923, 0x5, 0x8001, 0x400000, 0x1ff, 0x2, 0x3, 0x7fffffff, 0x6, 0x2, 0x3, 0x25a, 0x6a, 0x6, 0x9, 0x9, 0xb4, 0x217, 0x8f, 0x9, 0x2c, 0x2, 0x9, 0x7, 0x9, 0x100, 0x4, 0x6, 0x7, 0x7, 0x3, 0x6, 0x0, 0x7fffffff, 0x0, 0x9, 0x2, 0xb6c, 0x4, 0x8, 0x3, 0x401, 0x3, 0x0, 0xa1, 0x7f, 0x80000001, 0x7, 0x9, 0x800, 0x7, 0x1000, 0xe9, 0x3, 0x6, 0xffffffff, 0x3, 0xae9, 0xba3, 0x4, 0x3ab8, 0xac, 0x8001, 0x2c562366, 0x9, 0xfffffff7, 0x1, 0x3, 0x657, 0x4196, 0x0, 0x8, 0x0, 0xb, 0x3ff, 0x7, 0x5, 0x2, 0x3, 0x41, 0xfffffffe, 0x8, 0x0, 0x8, 0x269, 0x0, 0xffff70e1, 0x40000000, 0x8, 0x7, 0x1000, 0x4, 0x1, 0x80, 0x8000000, 0x0, 0x7f, 0x67, 0x6, 0xf, 0xbfca, 0x2, 0x8, 0x1, 0xc, 0x66a7633e, 0x9e4, 0x10000, 0x9, 0x3, 0x4, 0x1, 0x3, 0xad2, 0x7, 0x80, 0xfffffffe, 0x9, 0x39, 0xfffe]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x11}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2}}], 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="b9e0e7c56300698c0ba00a0d339c", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 29.456068187s ago: executing program 6 (id=1202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="01000000000000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48485}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 28.930203041s ago: executing program 6 (id=1206): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9443c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 27.699917694s ago: executing program 6 (id=1214): syz_mount_image$exfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[], 0x7f, 0x1519, &(0x7f00000021c0)="$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") mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mlock(&(0x7f000068d000/0x1000)=nil, 0x1000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 27.314185384s ago: executing program 6 (id=1218): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr=0x64010100, 0x4e24, 0x6, 'lblcr\x00', 0x4, 0x5, 0x166}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x6, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x4, 0x72}, 0x2c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x37}, {@rand_addr=0x64010102, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) 25.724006726s ago: executing program 6 (id=1233): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) recvmmsg(r0, &(0x7f0000000d40), 0x40000000000038f, 0x10020, 0x0) 25.367971146s ago: executing program 36 (id=1233): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) recvmmsg(r0, &(0x7f0000000d40), 0x40000000000038f, 0x10020, 0x0) 3.862380027s ago: executing program 3 (id=1419): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20e8a1, 0x1c881, 0x8, 0xd1}) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x5ecf, 0xc000, 0x7, 0x20002f6}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.145150446s ago: executing program 3 (id=1422): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.00520663s ago: executing program 8 (id=1424): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) bind$inet(r0, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) 2.731875478s ago: executing program 5 (id=1426): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f00000007c0)=""/4095, 0xfff}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0xc040) 2.520030533s ago: executing program 5 (id=1427): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebd", 0xc5}], 0x1}}], 0x1, 0x4000000) write(r0, &(0x7f0000001f00)="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", 0x77c) 2.361049567s ago: executing program 5 (id=1428): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x10) r1 = syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000380)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='127.0.0.1:20000:/\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000600)='ceph\x00', 0x0, 0x0) 2.129044693s ago: executing program 3 (id=1429): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xb, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x76, 0x1, 0x0, 0x0, 0x8, 0x10, 0x10, 0xff, 0x0, '\x00', 0x0, 0x7f}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0xe, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x8, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x64}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x82, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x3, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc6}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x3, 0x3, 0x4}]}}) 1.955637698s ago: executing program 3 (id=1430): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x40, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c37693ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r2 = fsmount(r0, 0x1, 0x0) fchdir(r2) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.89506343s ago: executing program 8 (id=1431): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x100000000000041, 0x2) 1.723211235s ago: executing program 7 (id=1432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x5, 0x7, 0x4}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20000050) 1.629604887s ago: executing program 8 (id=1434): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x800000}, 0x8) close(r2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.51606335s ago: executing program 3 (id=1435): r0 = timerfd_create(0x7, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x51}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.51587148s ago: executing program 7 (id=1436): r0 = socket(0xa, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xc, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e61, 0x0, @mcast1, 0x80000000}}}, &(0x7f0000000040)=0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e1b, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xfff9, 0x4}, 0x90) 1.50197473s ago: executing program 8 (id=1437): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x400c044) 1.395407503s ago: executing program 7 (id=1438): setns(0xc9, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b563f35a315a"}, @NL80211_ATTR_IE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000000) 1.303549046s ago: executing program 5 (id=1439): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x12) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)="14", 0x1}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000240)="3e66366466420f388152ea65d38aa6e67fa6420f0666b89d000f00d8c4820993a46b5c1e0000660f231cb8010000000f01d942c1d20d2e653ef623b805000000b9feffffff0f01d9", 0x48}], 0x1, 0x18, 0x0, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 1.14099788s ago: executing program 3 (id=1440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 1.106314891s ago: executing program 5 (id=1441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0x3) 1.076094681s ago: executing program 7 (id=1442): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) 557.197076ms ago: executing program 8 (id=1443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x1418, &(0x7f00000003c0)={0x0, 0x2303, 0x0, 0x0, 0x237}, &(0x7f0000002740)=0x0, &(0x7f0000000080), &(0x7f0000000180)) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x4000000) 131.913917ms ago: executing program 7 (id=1444): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 118.713447ms ago: executing program 8 (id=1445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x1}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r3, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) 78.620128ms ago: executing program 5 (id=1446): syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x7) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000000101010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x4000) 0s ago: executing program 7 (id=1447): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000240)="140800000000009465f381ab50", 0x0, 0xffffff00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x57, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {0x7530, 0x7530, 0x35, 0x0, @opaque="fa00"/45}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x80) kernel console output (not intermixed with test programs): :aa:3f) already exists on: batadv_slave_1 [ 100.862400][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.895757][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.906887][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.931844][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.962881][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.982385][ T6095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.023820][ T6095] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.042890][ T6095] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.059849][ T6095] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.075825][ T6095] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.314187][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.350385][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.467336][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.475207][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.684827][ T6302] ip_tables: iptables: counters copy to user failed while replacing table [ 101.755852][ T2132] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.880764][ T6311] loop0: detected capacity change from 0 to 256 [ 101.909883][ T6311] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0x14e42e2d, utbl_chksum : 0xe619d30d) [ 101.968240][ T2132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.022950][ T2132] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 102.040231][ T6314] loop4: detected capacity change from 0 to 512 [ 102.065899][ T2132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.163606][ T2132] usb 2-1: config 0 descriptor?? [ 102.467562][ T2132] usbhid 2-1:0.0: can't add hid device: -71 [ 102.473714][ T2132] usbhid: probe of 2-1:0.0 failed with error -71 [ 102.514839][ T2132] usb 2-1: USB disconnect, device number 2 [ 102.579240][ T6324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.131'. [ 102.689050][ T6324] netlink: 144 bytes leftover after parsing attributes in process `syz.4.131'. [ 102.977947][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.035952][ T2132] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.081912][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.198904][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.258885][ T2132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.287547][ T2132] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 103.298322][ T2132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.312291][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.342048][ T2132] usb 2-1: config 0 descriptor?? [ 104.135176][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.145091][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.153648][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.168141][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.197293][ T2132] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 104.207242][ T2132] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 104.216859][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 104.226673][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.573901][ T6357] loop3: detected capacity change from 0 to 32768 [ 104.625118][ T6357] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.141 (6357) [ 104.686172][ T6357] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 104.723662][ T6357] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 104.743565][ T6357] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 104.753629][ T6357] BTRFS info (device loop3): use zstd compression, level 3 [ 104.766987][ T6357] BTRFS info (device loop3): using free space tree [ 104.770629][ T5832] usb 2-1: USB disconnect, device number 3 [ 104.773646][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 105.006362][ T6357] BTRFS info (device loop3): enabling ssd optimizations [ 105.013372][ T6357] BTRFS info (device loop3): auto enabling async discard [ 105.112999][ T28] audit: type=1800 audit(1787848892.529:4): pid=6357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.141" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 105.133220][ T28] audit: type=1800 audit(1787848892.539:5): pid=6357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.141" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 105.154541][ T49] bond1: (slave gretap1): Releasing active interface [ 105.546057][ T8] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 106.223169][ T6361] chnl_net:caif_netlink_parms(): no params data found [ 106.266287][ T51] Bluetooth: hci0: command tx timeout [ 106.385574][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 106.400272][ T8] usb 4-1: no configurations [ 106.404926][ T8] usb 4-1: can't read configurations, error -22 [ 107.098091][ T49] hsr_slave_0: left promiscuous mode [ 107.107739][ T5772] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 107.137128][ T49] hsr_slave_1: left promiscuous mode [ 107.161406][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.175973][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.212211][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.225844][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.264816][ T49] bridge_slave_1: left allmulticast mode [ 107.286009][ T49] bridge_slave_1: left promiscuous mode [ 107.303365][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.367402][ T49] bridge_slave_0: left allmulticast mode [ 107.386576][ T49] bridge_slave_0: left promiscuous mode [ 107.406157][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.548795][ T49] veth1_macvtap: left promiscuous mode [ 107.566267][ T49] veth0_macvtap: left promiscuous mode [ 107.571996][ T49] veth1_vlan: left promiscuous mode [ 107.593352][ T49] veth0_vlan: left promiscuous mode [ 108.002562][ T49] bond1 (unregistering): Released all slaves [ 108.346044][ T51] Bluetooth: hci0: command tx timeout [ 108.403573][ T49] team0 (unregistering): Port device team_slave_1 removed [ 108.443441][ T49] team0 (unregistering): Port device team_slave_0 removed [ 108.485419][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.527873][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.800287][ T49] bond0 (unregistering): Released all slaves [ 108.945322][ T6361] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.960765][ T6361] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.982312][ T6361] bridge_slave_0: entered allmulticast mode [ 108.997974][ T6361] bridge_slave_0: entered promiscuous mode [ 109.015939][ T6361] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.023150][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.030637][ T6361] bridge_slave_1: entered allmulticast mode [ 109.038015][ T6361] bridge_slave_1: entered promiscuous mode [ 109.078947][ T6361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.110747][ T6361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.152289][ T6361] team0: Port device team_slave_0 added [ 109.176769][ T6361] team0: Port device team_slave_1 added [ 109.225167][ T6361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.234143][ T6361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.261125][ T6361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.288338][ T6361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.297807][ T6361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.324205][ T6361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.384604][ T6361] hsr_slave_0: entered promiscuous mode [ 109.392414][ T6361] hsr_slave_1: entered promiscuous mode [ 109.638234][ T6361] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.662504][ T6361] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.675570][ T6361] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.698955][ T6361] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.733949][ T6361] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.741174][ T6361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.749477][ T6361] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.756660][ T6361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.852256][ T6361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.878202][ T4430] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.892515][ T4430] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.919927][ T6361] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.954311][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.961533][ T5935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.990079][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.997523][ T5935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.062241][ T6361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.315289][ T6361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.416324][ T51] Bluetooth: hci0: command tx timeout [ 110.643543][ T6361] veth0_vlan: entered promiscuous mode [ 110.671165][ T6361] veth1_vlan: entered promiscuous mode [ 110.720829][ T6361] veth0_macvtap: entered promiscuous mode [ 110.737607][ T6361] veth1_macvtap: entered promiscuous mode [ 110.761489][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.772539][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.782913][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.793674][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.803908][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.815535][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.829522][ T6361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.854209][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.869326][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.881017][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.903977][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.922284][ T6361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.939214][ T6361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.954392][ T6361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.970707][ T6361] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.981941][ T6361] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.996399][ T6361] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.005132][ T6361] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.124896][ T5935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.134381][ T5935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.178653][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.187524][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.359047][ T6509] loop4: detected capacity change from 0 to 512 [ 111.444378][ T6509] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.161: Unrecognised inode hash code 255 [ 111.466183][ T6509] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.161: Corrupt directory, running e2fsck is recommended [ 111.537767][ T6509] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 111.591572][ T6509] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.161: corrupted in-inode xattr: invalid ea_ino [ 111.644391][ T6509] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.161: couldn't read orphan inode 15 (err -117) [ 111.682869][ T6509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.805460][ T6509] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.161: Unrecognised inode hash code 255 [ 111.874144][ T6509] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.161: Corrupt directory, running e2fsck is recommended [ 111.923835][ T6528] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.161: Unrecognised inode hash code 255 [ 111.965017][ T6528] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.161: Corrupt directory, running e2fsck is recommended [ 111.989650][ T6509] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.161: Unrecognised inode hash code 255 [ 112.026968][ T6509] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.161: Corrupt directory, running e2fsck is recommended [ 112.074967][ T6509] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.161: Unrecognised inode hash code 255 [ 112.091038][ T6509] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.161: Corrupt directory, running e2fsck is recommended [ 112.141039][ T6509] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.161: Unrecognised inode hash code 255 [ 112.173329][ T6509] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.161: Corrupt directory, running e2fsck is recommended [ 112.206549][ T6528] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #2: block 4: comm syz.4.161: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 112.281751][ T6535] netlink: 24 bytes leftover after parsing attributes in process `syz.5.157'. [ 112.336936][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.362652][ T6095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.498318][ T51] Bluetooth: hci0: command tx timeout [ 112.517143][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 112.531679][ T8] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 112.543076][ T8] usb 2-1: config 0 has no interface number 0 [ 112.549349][ T8] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.575375][ T8] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 112.606484][ T8] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 112.619464][ T8] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 112.644537][ T8] usb 2-1: Product: syz [ 112.680468][ T8] usb 2-1: SerialNumber: syz [ 112.711121][ T8] usb 2-1: config 0 descriptor?? [ 112.751418][ T8] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 112.786072][ T8] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input6 [ 112.985717][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 113.142415][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.166'. [ 113.783431][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 113.792420][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 113.804518][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 113.811822][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 113.819019][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 113.826229][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 113.833475][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 113.840700][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 113.850369][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 113.859523][ T8] usb 2-1: USB disconnect, device number 4 [ 113.860069][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 113.860093][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 113.913434][ T8] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 113.920096][ T5812] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 114.137743][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.178177][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.220733][ T5812] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.252475][ T5812] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.281697][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.303779][ T5812] usb 4-1: config 0 descriptor?? [ 114.750456][ T5812] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 114.823430][ T5812] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 115.243977][ T6625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.268298][ T6625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.610812][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 115.904785][ T6635] loop1: detected capacity change from 0 to 512 [ 115.954240][ T6635] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 116.011482][ T6635] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 116.034676][ T6635] EXT4-fs (loop1): orphan cleanup on readonly fs [ 116.041175][ T6635] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.185: bad orphan inode 3 [ 116.055837][ T6635] EXT4-fs (loop1): Remounting filesystem read-only [ 116.075527][ T6635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 116.097438][ T6635] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.185: dx entry: limit 0 != root limit 125 [ 116.111645][ T6635] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.185: Corrupt directory, running e2fsck is recommended [ 116.127744][ T6635] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.185: dx entry: limit 0 != root limit 125 [ 116.140783][ T6635] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.185: Corrupt directory, running e2fsck is recommended [ 116.166866][ T6635] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.185: dx entry: limit 0 != root limit 125 [ 116.189385][ T6635] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.185: Corrupt directory, running e2fsck is recommended [ 116.211698][ T6635] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.185: dx entry: limit 0 != root limit 125 [ 116.241919][ T6635] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.185: Corrupt directory, running e2fsck is recommended [ 116.257145][ T6635] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.185: dx entry: limit 0 != root limit 125 [ 116.269625][ T6635] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.185: Corrupt directory, running e2fsck is recommended [ 116.329178][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 117.070747][ T5832] usb 4-1: USB disconnect, device number 6 [ 117.150061][ T6675] netlink: 'syz.4.193': attribute type 1 has an invalid length. [ 117.805876][ T6692] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 118.988862][ T6007] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 119.200617][ T6007] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.224273][ T6007] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 119.245025][ T6007] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.261078][ T6007] usb 4-1: config 0 descriptor?? [ 119.308023][ T6740] loop5: detected capacity change from 0 to 1024 [ 119.318127][ T6740] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.344943][ T6740] EXT4-fs: Ignoring removed bh option [ 119.388179][ T6740] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a00ec01c, mo2=0002] [ 119.403042][ T6740] System zones: 0-1, 3-12 [ 119.417093][ T6740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.490018][ T6007] usbhid 4-1:0.0: can't add hid device: -71 [ 119.504499][ T6007] usbhid: probe of 4-1:0.0 failed with error -71 [ 119.518537][ T6007] usb 4-1: USB disconnect, device number 7 [ 119.893429][ T6361] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.026130][ T6007] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 120.210279][ T6007] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.241879][ T6007] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 120.260545][ T6775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.216'. [ 120.286349][ T6007] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.317081][ T6007] usb 4-1: config 0 descriptor?? [ 120.354257][ T6775] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 121.180037][ T6007] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 121.197772][ T6007] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 121.330680][ T6803] loop4: detected capacity change from 0 to 1024 [ 121.347447][ T6803] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.359531][ T6803] EXT4-fs: Ignoring removed bh option [ 121.396296][ T6803] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a00ec01c, mo2=0002] [ 121.412678][ T6803] System zones: 0-1, 3-12 [ 121.419286][ T6803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.656125][ T2132] usb 4-1: USB disconnect, device number 8 [ 121.662053][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 121.974254][ T6095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.682416][ T6843] nvme_fabrics: missing parameter 'transport=%s' [ 122.701755][ T6843] nvme_fabrics: missing parameter 'nqn=%s' [ 132.979727][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.987137][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.787215][ T7090] netlink: 24 bytes leftover after parsing attributes in process `syz.5.237'. [ 135.458563][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.468574][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 135.476985][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 135.485542][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 135.494076][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 135.502991][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 135.634954][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.812040][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.059592][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.100710][ T7106] chnl_net:caif_netlink_parms(): no params data found [ 136.151868][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.439454][ T7106] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.446879][ T7106] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.454280][ T7106] bridge_slave_0: entered allmulticast mode [ 136.461584][ T7106] bridge_slave_0: entered promiscuous mode [ 136.473696][ T7106] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.481049][ T7106] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.488410][ T7106] bridge_slave_1: entered allmulticast mode [ 136.496151][ T7106] bridge_slave_1: entered promiscuous mode [ 136.523543][ T7106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.536266][ T7106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.563356][ T7106] team0: Port device team_slave_0 added [ 136.584399][ T7106] team0: Port device team_slave_1 added [ 136.768507][ T7106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.811965][ T7106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.920622][ T7106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.972969][ T7106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.005735][ T7106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.017935][ T7136] loop5: detected capacity change from 0 to 1764 [ 137.046271][ T7106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.311494][ T7106] hsr_slave_0: entered promiscuous mode [ 137.334999][ T7106] hsr_slave_1: entered promiscuous mode [ 137.353003][ T7106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.365954][ T7106] Cannot create hsr debugfs directory [ 137.546311][ T51] Bluetooth: hci2: command tx timeout [ 138.180783][ T7167] Bluetooth: MGMT ver 1.22 [ 138.206744][ T7161] bridge0: port 3(wlan1) entered blocking state [ 138.222667][ T7167] loop3: detected capacity change from 0 to 1024 [ 138.230090][ T7161] bridge0: port 3(wlan1) entered disabled state [ 138.254044][ T7161] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 138.287787][ T7167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.300094][ T7161] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 138.309790][ T7161] bridge0: port 3(wlan1) entered blocking state [ 138.316674][ T7161] bridge0: port 3(wlan1) entered forwarding state [ 138.426801][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.810905][ T5935] bridge0: port 3(wlan1) entered disabled state [ 139.075541][ T7106] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 139.238802][ T7106] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 139.250060][ T7106] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 139.297095][ T7106] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 139.616041][ T5778] Bluetooth: hci2: command tx timeout [ 139.684479][ T42] hsr_slave_0: left promiscuous mode [ 139.737067][ T42] hsr_slave_1: left promiscuous mode [ 139.790937][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.803743][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.824973][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.856548][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.872724][ T42] bridge_slave_1: left allmulticast mode [ 139.885957][ T42] bridge_slave_1: left promiscuous mode [ 139.899943][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.914237][ T42] bridge_slave_0: left allmulticast mode [ 139.930970][ T42] bridge_slave_0: left promiscuous mode [ 139.959945][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.065157][ T7210] loop3: detected capacity change from 0 to 512 [ 140.076774][ T42] veth1_macvtap: left promiscuous mode [ 140.082374][ T42] veth0_macvtap: left promiscuous mode [ 140.111541][ T7210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.134847][ T42] veth1_vlan: left promiscuous mode [ 140.176493][ T42] veth0_vlan: left promiscuous mode [ 140.224262][ T7210] EXT4-fs error (device loop3): ext4_validate_block_bitmap:421: comm syz.3.260: bg 0: bad block bitmap checksum [ 140.263235][ T5778] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.270385][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 140.450126][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.621899][ T7223] netlink: 156 bytes leftover after parsing attributes in process `syz.3.261'. [ 140.746968][ T7226] netlink: 20 bytes leftover after parsing attributes in process `syz.3.261'. [ 141.238153][ T6007] IPVS: starting estimator thread 0... [ 141.345963][ T7233] IPVS: using max 19 ests per chain, 45600 per kthread [ 141.455622][ T7237] loop4: detected capacity change from 0 to 2048 [ 141.590786][ T7237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.696264][ T51] Bluetooth: hci2: command tx timeout [ 141.767908][ T7237] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz.4.267: Invalid inode table block 10568646295092588463 in block_group 0 [ 141.769333][ T7245] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 141.837539][ T7245] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 141.897120][ T6095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.992412][ T42] team0 (unregistering): Port device team_slave_1 removed [ 142.123172][ T42] team0 (unregistering): Port device team_slave_0 removed [ 142.228217][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.301180][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.418335][ T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 142.435898][ T51] Bluetooth: hci1: Injecting HCI hardware error event [ 142.456782][ T5778] Bluetooth: hci1: hardware error 0x00 [ 142.677072][ T42] bond0 (unregistering): Released all slaves [ 142.999454][ T7106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.080050][ T7106] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.132171][ T6755] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.139391][ T6755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.261044][ T6755] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.268272][ T6755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.532005][ T42] IPVS: stop unused estimator thread 0... [ 143.784823][ T51] Bluetooth: hci2: command tx timeout [ 144.403211][ T7106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.503670][ T5778] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 145.016695][ T5832] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 145.208404][ T5832] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 145.248991][ T5832] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.272922][ T5832] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 145.299033][ T7106] veth0_vlan: entered promiscuous mode [ 145.317085][ T5832] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.344360][ T7106] veth1_vlan: entered promiscuous mode [ 145.363770][ T5832] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 145.381495][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 145.404504][ T5832] usb 6-1: Product: syz [ 145.415033][ T5832] usb 6-1: Manufacturer: syz [ 145.437744][ T5832] cdc_wdm 6-1:1.0: skipping garbage [ 145.446459][ T7106] veth0_macvtap: entered promiscuous mode [ 145.464116][ T5832] cdc_wdm 6-1:1.0: skipping garbage [ 145.483636][ T7106] veth1_macvtap: entered promiscuous mode [ 145.499954][ T5832] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 145.516641][ T5832] cdc_wdm 6-1:1.0: Unknown control protocol [ 145.540876][ T7106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.558566][ T7106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.582497][ T7106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.599029][ T7106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.609907][ T7106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.625894][ T7106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.661041][ T7106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.688352][ T7106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.709643][ T8] usb 6-1: USB disconnect, device number 2 [ 145.731064][ T7106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.748055][ T7106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.759020][ T7106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.769506][ T7106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.781024][ T7106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.793100][ T7106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.825630][ T7106] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.834563][ T7106] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.844940][ T7106] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.856764][ T7106] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.981708][ T6753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.992201][ T6753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.071549][ T4430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.085144][ T4430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.252957][ T7349] block device autoloading is deprecated and will be removed. [ 146.296002][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 146.488767][ T8] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 146.524709][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.579291][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 146.614390][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.664126][ T8] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 146.708159][ T8] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 146.730346][ T8] usb 6-1: Product: syz [ 146.752935][ T8] usb 6-1: Manufacturer: syz [ 146.775321][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 146.801589][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 146.831205][ T8] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 146.850918][ T8] cdc_wdm 6-1:1.0: Unknown control protocol [ 147.556679][ T7391] loop4: detected capacity change from 0 to 256 [ 147.604965][ T7391] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 147.706798][ T7394] netlink: 144 bytes leftover after parsing attributes in process `syz.3.304'. [ 148.131603][ T7407] loop3: detected capacity change from 0 to 128 [ 148.468757][ T7407] syz.3.306: attempt to access beyond end of device [ 148.468757][ T7407] loop3: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 148.608976][ T7414] syz.3.306: attempt to access beyond end of device [ 148.608976][ T7414] loop3: rw=2049, sector=170, nr_sectors = 22 limit=128 [ 148.842864][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 148.843085][ T6012] usb 6-1: USB disconnect, device number 3 [ 148.849744][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 148.861483][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 149.446114][ T6012] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 149.659586][ T6012] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.683690][ T6012] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 149.713650][ T6012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.747653][ T6012] usb 6-1: config 0 descriptor?? [ 149.796759][ T8] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 149.987897][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 149.996262][ T6012] usbhid 6-1:0.0: can't add hid device: -71 [ 150.006500][ T8] usb 4-1: not running at top speed; connect to a high speed hub [ 150.008908][ T6012] usbhid: probe of 6-1:0.0 failed with error -71 [ 150.021415][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.042115][ T8] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 150.049263][ T6012] usb 6-1: USB disconnect, device number 4 [ 150.074859][ T8] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 150.102980][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.124631][ T8] usb 4-1: Product: syz [ 150.129206][ T8] usb 4-1: Manufacturer: syz [ 150.133868][ T8] usb 4-1: SerialNumber: syz [ 150.372896][ T8] usb 4-1: 0:2 : does not exist [ 150.378451][ T8] usb 4-1: unit 6 not found! [ 150.437332][ T8] usb 4-1: USB disconnect, device number 9 [ 150.505398][ T7141] udevd[7141]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.646527][ T6012] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 150.840661][ T6012] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.851800][ T6012] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 150.861326][ T6012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.873152][ T6012] usb 6-1: config 0 descriptor?? [ 151.093913][ T28] audit: type=1326 audit(1787848938.499:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.4.316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e4f9e0d9 code=0x7ffc0000 [ 151.117685][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.183759][ T28] audit: type=1326 audit(1787848938.539:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.4.316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e4f9e0d9 code=0x7ffc0000 [ 151.212381][ T28] audit: type=1326 audit(1787848938.549:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.4.316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f91e4f9cf47 code=0x7ffc0000 [ 151.236105][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.247528][ T28] audit: type=1326 audit(1787848938.549:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.4.316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e4f9e0d9 code=0x7ffc0000 [ 151.283244][ T28] audit: type=1326 audit(1787848938.559:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.4.316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f91e4f9e0d9 code=0x7ffc0000 [ 151.327393][ T28] audit: type=1326 audit(1787848938.559:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.4.316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e4f9e0d9 code=0x7ffc0000 [ 151.351323][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.358182][ T28] audit: type=1326 audit(1787848938.559:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.4.316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e4f9e0d9 code=0x7ffc0000 [ 151.381978][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.388918][ T28] audit: type=1326 audit(1787848938.559:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.4.316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f91e4f9e0d9 code=0x7ffc0000 [ 151.429755][ T28] audit: type=1326 audit(1787848938.559:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.4.316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e4f9e0d9 code=0x7ffc0000 [ 151.453580][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.487440][ T28] audit: type=1326 audit(1787848938.559:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.4.316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e4f9e0d9 code=0x7ffc0000 [ 151.749754][ T6012] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 151.779989][ T6012] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input8 [ 151.845869][ T5812] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 152.040495][ T5812] usb 4-1: Using ep0 maxpacket: 16 [ 152.084452][ T5812] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 152.115819][ T5812] usb 4-1: config 0 has no interface number 0 [ 152.141789][ T5812] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 152.156776][ T6007] usb 6-1: USB disconnect, device number 5 [ 152.162755][ C1] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 152.183877][ T5812] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 152.210447][ T5812] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 152.227300][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 152.256315][ T5812] usb 4-1: Product: syz [ 152.260550][ T5812] usb 4-1: SerialNumber: syz [ 152.287978][ T5812] usb 4-1: config 0 descriptor?? [ 152.309054][ T5812] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 152.330447][ T5812] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input9 [ 152.431685][ T6753] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.458602][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.469667][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.478149][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.509149][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.517767][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.526853][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.576911][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 152.731058][ T6753] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.473190][ T7515] xt_hashlimit: size too large, truncated to 1048576 [ 153.621735][ T6753] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.639292][ T7516] xt_hashlimit: size too large, truncated to 1048576 [ 154.512389][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 154.519630][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 154.527010][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 154.534188][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 154.541390][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 154.548603][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 154.556160][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 154.563416][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 154.570617][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 154.577964][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 155.018353][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 155.162091][ T5778] Bluetooth: hci3: command tx timeout [ 155.213104][ T8] usb 4-1: USB disconnect, device number 10 [ 156.233930][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 156.233944][ T28] audit: type=1326 audit(1787848943.649:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097939e0d9 code=0x7ffc0000 [ 156.286616][ T8] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 156.336659][ T28] audit: type=1326 audit(1787848943.649:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097939e0d9 code=0x7ffc0000 [ 156.346066][ T6753] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.433783][ T28] audit: type=1326 audit(1787848943.719:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f097939e0d9 code=0x7ffc0000 [ 156.504519][ T28] audit: type=1326 audit(1787848943.719:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097939e0d9 code=0x7ffc0000 [ 156.611902][ T28] audit: type=1326 audit(1787848943.719:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097939e0d9 code=0x7ffc0000 [ 156.715796][ T28] audit: type=1326 audit(1787848943.719:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f097939e0d9 code=0x7ffc0000 [ 156.773855][ T28] audit: type=1326 audit(1787848943.719:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097939e0d9 code=0x7ffc0000 [ 156.833686][ T28] audit: type=1326 audit(1787848943.719:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f097939e0d9 code=0x7ffc0000 [ 156.867382][ T28] audit: type=1326 audit(1787848943.719:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097939e0d9 code=0x7ffc0000 [ 156.898074][ T28] audit: type=1326 audit(1787848943.739:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f097939e0d9 code=0x7ffc0000 [ 157.203545][ T7502] chnl_net:caif_netlink_parms(): no params data found [ 157.217184][ T5778] Bluetooth: hci3: command tx timeout [ 157.763064][ T7502] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.786024][ T7502] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.813654][ T7502] bridge_slave_0: entered allmulticast mode [ 157.827181][ T7502] bridge_slave_0: entered promiscuous mode [ 157.867550][ T7502] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.886195][ T7502] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.914763][ T7502] bridge_slave_1: entered allmulticast mode [ 157.927105][ T7502] bridge_slave_1: entered promiscuous mode [ 158.155075][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.5.337'. [ 158.175316][ T7568] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.185098][ T7568] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.194143][ T7568] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.203158][ T7568] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.241860][ T7568] Zero length message leads to an empty skb [ 158.393359][ T7502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.407553][ T7570] loop3: detected capacity change from 0 to 256 [ 158.440521][ T7502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.703944][ T7502] team0: Port device team_slave_0 added [ 158.750476][ T7502] team0: Port device team_slave_1 added [ 158.966648][ T7502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.990855][ T7502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.086122][ T7502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.228423][ T7502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.235424][ T7502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.306368][ T5778] Bluetooth: hci3: command tx timeout [ 159.361095][ T7595] loop3: detected capacity change from 0 to 512 [ 159.376129][ T7502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.408494][ T7595] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 159.465738][ T6753] hsr_slave_0: left promiscuous mode [ 159.482590][ T7595] EXT4-fs (loop3): 1 truncate cleaned up [ 159.489626][ T6753] hsr_slave_1: left promiscuous mode [ 159.500726][ T7595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.542524][ T6753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.604343][ T6753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.672090][ T6753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.705605][ T6753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.749751][ T6753] bridge_slave_1: left allmulticast mode [ 159.768987][ T6753] bridge_slave_1: left promiscuous mode [ 159.782390][ T6753] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.829647][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.853826][ T6753] bridge_slave_0: left allmulticast mode [ 159.864503][ T6753] bridge_slave_0: left promiscuous mode [ 159.903642][ T6753] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.910782][ T7593] loop5: detected capacity change from 0 to 32768 [ 159.956109][ T7593] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.343 (7593) [ 159.996800][ T7593] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 160.036479][ T7593] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 160.048098][ T7593] BTRFS info (device loop5): turning on sync discard [ 160.057176][ T7593] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 160.067822][ T6753] veth1_macvtap: left promiscuous mode [ 160.069009][ T7593] BTRFS info (device loop5): use zstd compression, level 3 [ 160.081302][ T7593] BTRFS info (device loop5): turning on async discard [ 160.086843][ T6753] veth0_macvtap: left promiscuous mode [ 160.094357][ T6753] veth1_vlan: left promiscuous mode [ 160.103176][ T6753] veth0_vlan: left promiscuous mode [ 160.121930][ T7593] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 160.156024][ T7593] BTRFS info (device loop5): trying to use backup root at mount time [ 160.164176][ T7593] BTRFS info (device loop5): enabling auto defrag [ 160.195771][ T7593] BTRFS info (device loop5): turning on flush-on-commit [ 160.215736][ T7593] BTRFS info (device loop5): using free space tree [ 160.312049][ T6759] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 160.352930][ T7593] BTRFS error (device loop5): failed to load root extent [ 160.388142][ T7593] BTRFS warning (device loop5): try to load backup roots slot 1 [ 160.406749][ T6753] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 160.420907][ T6753] bond1 (unregistering): Released all slaves [ 160.423907][ T4430] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 160.450263][ T7593] BTRFS warning (device loop5): couldn't read tree root [ 160.477150][ T7593] BTRFS warning (device loop5): try to load backup roots slot 2 [ 160.485368][ T6754] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 160.503126][ T7593] BTRFS warning (device loop5): couldn't read tree root [ 160.511348][ T7593] BTRFS warning (device loop5): try to load backup roots slot 3 [ 160.548939][ T7593] BTRFS info (device loop5): enabling ssd optimizations [ 160.574466][ T7593] BTRFS info (device loop5): rebuilding free space tree [ 160.681998][ T7593] BTRFS info (device loop5): checking UUID tree [ 160.895080][ T7593] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 161.389768][ T5778] Bluetooth: hci3: command tx timeout [ 161.506686][ T7639] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 161.866020][ T5807] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 161.948531][ T6753] team0 (unregistering): Port device team_slave_1 removed [ 162.032056][ T6753] team0 (unregistering): Port device team_slave_0 removed [ 162.070342][ T5807] usb 7-1: Using ep0 maxpacket: 32 [ 162.087089][ T5807] usb 7-1: config 2 has an invalid interface number: 88 but max is 0 [ 162.095217][ T5807] usb 7-1: config 2 has no interface number 0 [ 162.114332][ T5807] usb 7-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 162.133981][ T5807] usb 7-1: config 2 interface 88 has no altsetting 0 [ 162.144004][ T6753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.155559][ T5807] usb 7-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 162.179215][ T5807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 162.187547][ T5807] usb 7-1: Product: syz [ 162.203933][ T5807] usb 7-1: Manufacturer: syz [ 162.210550][ T5807] usb 7-1: SerialNumber: syz [ 162.232383][ T7646] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 162.287887][ T6753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.483035][ T7646] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 163.102088][ T6753] bond0 (unregistering): Released all slaves [ 163.387742][ T7502] hsr_slave_0: entered promiscuous mode [ 163.408155][ T7502] hsr_slave_1: entered promiscuous mode [ 163.420940][ T7502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.436128][ T7502] Cannot create hsr debugfs directory [ 163.589244][ T5807] asix 7-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 163.605874][ T5807] asix: probe of 7-1:2.88 failed with error -71 [ 163.644252][ T5807] usb 7-1: USB disconnect, device number 2 [ 163.978919][ T6753] IPVS: stop unused estimator thread 0... [ 163.982343][ T7502] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 164.019834][ T7502] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 164.051362][ T7502] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 164.086355][ T7502] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 164.297677][ T7502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.352519][ T7502] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.397763][ T6759] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.404970][ T6759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.433415][ T6759] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.440736][ T6759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.469271][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.6.367'. [ 165.081818][ T7502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.198272][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.5.373'. [ 165.225132][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.5.373'. [ 166.413411][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.375'. [ 166.556929][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bc22c00: rx timeout, send abort [ 168.216398][ T7747] fuse: Bad value for 'fd' [ 168.224327][ T7502] veth0_vlan: entered promiscuous mode [ 168.264651][ T7502] veth1_vlan: entered promiscuous mode [ 168.356778][ T7502] veth0_macvtap: entered promiscuous mode [ 168.386478][ T7502] veth1_macvtap: entered promiscuous mode [ 168.441789][ T7502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.490358][ T7502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.515769][ T7502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.528712][ T7502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.539092][ T7502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.550048][ T7502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.569654][ T7502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.604749][ T7502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.640897][ T7502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.667793][ T7502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.700677][ T7502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.732120][ T7502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.758187][ T7502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.784438][ T7502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.832908][ T7502] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.868578][ T7502] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.895468][ T7502] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.930064][ T7502] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.219995][ T6754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.234155][ T6754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.320555][ T6759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.341573][ T6759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.447351][ T7771] loop3: detected capacity change from 0 to 16 [ 169.488380][ T7771] erofs: Unknown parameter '01777777777777777777777|V$G;%gROzIAfnsTeM [ 169.488380][ T7771] g\' [ 170.482131][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.7.394'. [ 170.491311][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.7.394'. [ 170.503498][ T7812] netlink: 'syz.7.394': attribute type 15 has an invalid length. [ 170.551967][ T7812] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 170.561286][ T7812] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 170.570034][ T7812] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 170.578988][ T7812] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 170.602925][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.7.394'. [ 170.611864][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.7.394'. [ 170.621109][ T7812] netlink: 'syz.7.394': attribute type 15 has an invalid length. [ 170.641520][ T7812] netdevsim netdevsim7 netdevsim0: set [0, 1] type 1 family 0 port 60387 - 0 [ 170.650855][ T7812] netdevsim netdevsim7 netdevsim1: set [0, 1] type 1 family 0 port 60387 - 0 [ 170.659889][ T7812] netdevsim netdevsim7 netdevsim2: set [0, 1] type 1 family 0 port 60387 - 0 [ 170.668756][ T7812] netdevsim netdevsim7 netdevsim3: set [0, 1] type 1 family 0 port 60387 - 0 [ 172.466365][ T7853] netlink: 12 bytes leftover after parsing attributes in process `syz.6.401'. [ 172.559111][ T7853] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.567985][ T7853] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.576896][ T7853] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.585579][ T7853] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.654329][ T7853] netlink: 12 bytes leftover after parsing attributes in process `syz.6.401'. [ 174.006303][ T6007] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 174.195898][ T6007] usb 7-1: Using ep0 maxpacket: 32 [ 174.208908][ T6007] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 174.225836][ T6007] usb 7-1: config 0 has no interface number 0 [ 174.246727][ T6007] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.289063][ T6007] usb 7-1: config 0 interface 85 has no altsetting 0 [ 174.324581][ T6007] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 174.340455][ T6007] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.359673][ T6007] usb 7-1: Product: syz [ 174.375146][ T6007] usb 7-1: Manufacturer: syz [ 174.390094][ T6007] usb 7-1: SerialNumber: syz [ 174.407575][ T6007] usb 7-1: config 0 descriptor?? [ 174.917505][ T7907] loop3: detected capacity change from 0 to 32768 [ 174.945206][ T7907] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.414 (7907) [ 175.005169][ T7907] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 175.019705][ T7907] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 175.029618][ T7907] BTRFS info (device loop3): turning on sync discard [ 175.039406][ T7907] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 175.092790][ T6007] appletouch 7-1:0.85: Geyser mode initialized. [ 175.103866][ T7907] BTRFS info (device loop3): use zstd compression, level 3 [ 175.132635][ T7907] BTRFS info (device loop3): turning on async discard [ 175.160887][ T6007] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input10 [ 175.174537][ T7907] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 175.221360][ T7907] BTRFS info (device loop3): trying to use backup root at mount time [ 175.245795][ T7907] BTRFS info (device loop3): enabling auto defrag [ 175.274924][ T7907] BTRFS info (device loop3): turning on flush-on-commit [ 175.315836][ T7907] BTRFS info (device loop3): using free space tree [ 175.482483][ T6759] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 175.514403][ T7907] BTRFS error (device loop3): failed to load root extent [ 175.526404][ T7907] BTRFS warning (device loop3): try to load backup roots slot 1 [ 175.576907][ T6755] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 175.603144][ T7907] BTRFS warning (device loop3): couldn't read tree root [ 175.636026][ T7907] BTRFS warning (device loop3): try to load backup roots slot 2 [ 175.680216][ T6759] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 175.716494][ T7907] BTRFS warning (device loop3): couldn't read tree root [ 175.723569][ T7907] BTRFS warning (device loop3): try to load backup roots slot 3 [ 175.819708][ T7907] BTRFS info (device loop3): enabling ssd optimizations [ 175.841610][ T7907] BTRFS info (device loop3): rebuilding free space tree [ 175.904595][ T5812] usb 7-1: USB disconnect, device number 3 [ 175.934232][ T7907] BTRFS info (device loop3): checking UUID tree [ 175.977115][ T5812] appletouch 7-1:0.85: input: appletouch disconnected [ 176.185569][ T7907] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.202208][ T7968] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.425'. [ 176.218538][ T7968] netlink: 24 bytes leftover after parsing attributes in process `syz.6.425'. [ 176.248850][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.7.426'. [ 176.485831][ T7967] hsr_slave_1 (unregistering): left promiscuous mode [ 177.171803][ T7996] netlink: 7 bytes leftover after parsing attributes in process `syz.6.433'. [ 177.407088][ T8000] IPVS: Scheduler module ip_vs_sip not found [ 177.526946][ T8013] netlink: 'syz.3.437': attribute type 1 has an invalid length. [ 177.683934][ T8013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.741302][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 177.741315][ T28] audit: type=1326 audit(1787848965.159:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.7.440" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19d7d9e0d9 code=0x0 [ 177.781089][ T8015] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 177.817372][ T42] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 178.244542][ T8018] bond1 (unregistering): (slave gretap1): Removing an active aggregator [ 178.255618][ T8018] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 178.280195][ T8018] bond1 (unregistering): Released all slaves [ 178.628009][ T8054] overlayfs: failed to clone upperpath [ 178.753583][ T8058] tipc: Failed to remove unknown binding: 66,0,0/0:3897989467/3897989468 [ 179.013739][ T8072] bridge_slave_0: left allmulticast mode [ 179.033817][ T8072] bridge_slave_0: left promiscuous mode [ 179.049871][ T8072] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.117342][ T8072] bridge_slave_1: left allmulticast mode [ 179.123099][ T8072] bridge_slave_1: left promiscuous mode [ 179.171998][ T8072] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.221824][ T8072] bond0: (slave bond_slave_0): Releasing backup interface [ 179.270053][ T8072] bond0: (slave bond_slave_1): Releasing backup interface [ 179.425200][ T8072] team0: Port device team_slave_0 removed [ 179.461647][ T8072] team0: Port device team_slave_1 removed [ 179.509846][ T8072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.537343][ T8072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.560285][ T8072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.584706][ T8072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.632439][ T8076] netlink: 28 bytes leftover after parsing attributes in process `syz.7.453'. [ 180.266390][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.6.459'. [ 180.370583][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.6.459'. [ 180.506276][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.6.459'. [ 183.662845][ T8220] raw_sendmsg: syz.3.480 forgot to set AF_INET. Fix it! [ 184.668316][ T8243] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 184.696595][ T8243] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 184.713372][ T8243] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 184.730366][ T8243] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 184.762732][ T8243] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 184.778459][ T8243] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 184.792241][ T8243] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 184.810870][ T8243] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 184.893657][ T8243] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 184.914092][ T8243] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 185.046364][ T8264] overlayfs: failed to clone upperpath [ 185.686598][ T8277] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 187.192176][ T8309] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.199951][ T8309] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.983217][ T8309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.043405][ T8309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.518911][ T8309] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.528849][ T8309] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.538296][ T8309] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.548299][ T8309] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.691207][ T8316] dummy0: entered promiscuous mode [ 188.699184][ T8316] dummy0: left promiscuous mode [ 188.717675][ T8332] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.512'. [ 188.732226][ T8332] netlink: 24 bytes leftover after parsing attributes in process `syz.7.512'. [ 188.744205][ T8349] netlink: 12 bytes leftover after parsing attributes in process `syz.5.518'. [ 188.830060][ T28] audit: type=1326 audit(1787848976.249:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.6.521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e8b9e0d9 code=0x7ffc0000 [ 188.869885][ T8349] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.925856][ T28] audit: type=1326 audit(1787848976.249:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.6.521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e8b9e0d9 code=0x7ffc0000 [ 188.950149][ T28] audit: type=1326 audit(1787848976.269:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.6.521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e8b9e0d9 code=0x7ffc0000 [ 188.989978][ T28] audit: type=1326 audit(1787848976.279:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.6.521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e8b9e0d9 code=0x7ffc0000 [ 189.028032][ T28] audit: type=1326 audit(1787848976.279:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.6.521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f43e8b9e0d9 code=0x7ffc0000 [ 189.060208][ T28] audit: type=1326 audit(1787848976.309:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.6.521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e8b9e0d9 code=0x7ffc0000 [ 189.081491][ T8350] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 189.131755][ T8351] netlink: 'syz.5.518': attribute type 10 has an invalid length. [ 189.158568][ T8351] netlink: 40 bytes leftover after parsing attributes in process `syz.5.518'. [ 189.200469][ T8351] dummy0: entered promiscuous mode [ 189.204950][ T28] audit: type=1326 audit(1787848976.339:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.6.521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e8b9e0d9 code=0x7ffc0000 [ 189.230669][ T8351] bond1: (slave dummy0): Releasing backup interface [ 189.240596][ T28] audit: type=1326 audit(1787848976.339:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.6.521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e8b9e0d9 code=0x7ffc0000 [ 189.272727][ T28] audit: type=1326 audit(1787848976.449:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.6.521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f43e8b9e0d9 code=0x7ffc0000 [ 189.369031][ T28] audit: type=1326 audit(1787848976.449:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.6.521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f43e8b9e0d9 code=0x7ffc0000 [ 189.637918][ T8373] loop6: detected capacity change from 0 to 256 [ 189.688593][ T8373] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 189.762128][ T8373] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 190.433014][ T6012] IPVS: starting estimator thread 0... [ 190.546225][ T8403] IPVS: using max 18 ests per chain, 43200 per kthread [ 190.641784][ T8412] netlink: 28 bytes leftover after parsing attributes in process `syz.3.536'. [ 192.002428][ T8432] overlayfs: failed to clone upperpath [ 192.290648][ T8434] loop7: detected capacity change from 0 to 2048 [ 192.384604][ T8434] loop7: p1 < > p4 < > [ 192.394159][ T8434] loop7: partition table partially beyond EOD, truncated [ 192.423118][ T8434] loop7: p4 start 42180 is beyond EOD, truncated [ 193.155994][ T5811] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 193.364204][ T5811] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 193.385781][ T5811] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 193.409635][ T5811] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 193.433939][ T5811] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.457991][ T8450] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 193.487852][ T5811] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 193.828983][ T5807] usb 7-1: USB disconnect, device number 4 [ 193.895983][ T8477] netlink: 220 bytes leftover after parsing attributes in process `syz.5.558'. [ 194.423270][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.430163][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.478774][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 195.478787][ T28] audit: type=1326 audit(1787848982.899:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8526 comm="syz.5.570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe99e0d9 code=0x7ffc0000 [ 195.564312][ T28] audit: type=1326 audit(1787848982.929:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8526 comm="syz.5.570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe99e0d9 code=0x7ffc0000 [ 195.612295][ T28] audit: type=1326 audit(1787848982.949:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8526 comm="syz.5.570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe99e0d9 code=0x7ffc0000 [ 195.649248][ T28] audit: type=1326 audit(1787848982.949:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8526 comm="syz.5.570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe99e0d9 code=0x7ffc0000 [ 195.681615][ T28] audit: type=1326 audit(1787848982.949:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8526 comm="syz.5.570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f5ebe99e0d9 code=0x7ffc0000 [ 195.792198][ T28] audit: type=1326 audit(1787848982.949:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8526 comm="syz.5.570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe99e0d9 code=0x7ffc0000 [ 195.823633][ T28] audit: type=1326 audit(1787848982.949:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8526 comm="syz.5.570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe99e0d9 code=0x7ffc0000 [ 195.832050][ T8537] loop7: detected capacity change from 0 to 2048 [ 195.891655][ T8537] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 195.904834][ T8546] loop6: detected capacity change from 0 to 1035 [ 195.913840][ T8537] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 195.924116][ T28] audit: type=1326 audit(1787848982.949:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8526 comm="syz.5.570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe99e0d9 code=0x7ffc0000 [ 195.932897][ T8537] UDF-fs: Scanning with blocksize 512 failed [ 195.995988][ T8546] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.021749][ T8546] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.057004][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.575'. [ 196.103140][ T8537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.125806][ T28] audit: type=1326 audit(1787848982.949:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8526 comm="syz.5.570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5ebe99e0d9 code=0x7ffc0000 [ 196.197015][ T28] audit: type=1326 audit(1787848982.949:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8526 comm="syz.5.570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe99e0d9 code=0x7ffc0000 [ 196.249577][ T8551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.295537][ T8555] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 196.307578][ T7106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.365928][ T8556] netlink: 'syz.3.575': attribute type 10 has an invalid length. [ 196.405798][ T8556] netlink: 40 bytes leftover after parsing attributes in process `syz.3.575'. [ 196.414726][ T8556] dummy0: entered promiscuous mode [ 196.470307][ T8556] bond1: (slave dummy0): Releasing backup interface [ 196.510854][ T8561] netlink: 'syz.6.576': attribute type 1 has an invalid length. [ 196.563166][ T8561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.614480][ T8563] bond1: (slave ip6erspan0): making interface the new active one [ 196.624999][ T8563] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 198.515891][ T8] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 198.757983][ T8] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 198.781999][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.806370][ T8] usb 8-1: Product: syz [ 198.810589][ T8] usb 8-1: Manufacturer: syz [ 198.815194][ T8] usb 8-1: SerialNumber: syz [ 199.299406][ T8] rtl8150 8-1:1.0: couldn't reset the device [ 199.313157][ T8] rtl8150: probe of 8-1:1.0 failed with error -5 [ 199.345354][ T8] usb 8-1: USB disconnect, device number 2 [ 200.993127][ T8720] netlink: 'syz.7.619': attribute type 1 has an invalid length. [ 201.047952][ T8720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.329355][ T8724] bond1: (slave veth3): Enslaving as an active interface with a down link [ 201.377180][ T8729] veth0_virt_wifi: entered promiscuous mode [ 201.444497][ T8729] bond1: (slave veth0_virt_wifi): making interface the new active one [ 201.481032][ T8729] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 201.757343][ T8744] netlink: 209216 bytes leftover after parsing attributes in process `syz.5.625'. [ 201.775971][ T8744] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 202.393512][ T8771] can0: slcan on ttyS3. [ 202.508405][ T8771] can0 (unregistered): slcan off ttyS3. [ 202.785493][ T8784] serio: Serial port ttyS3 [ 203.222269][ T8793] batman_adv: batadv0: Adding interface: dummy0 [ 203.233276][ T8793] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.271570][ T8793] batman_adv: batadv0: Interface activated: dummy0 [ 203.301428][ T8794] batadv0: mtu less than device minimum [ 203.321057][ T8794] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.334149][ T8794] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.346638][ T8794] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.359131][ T8794] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.371651][ T8794] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.384170][ T8794] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.396643][ T8794] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.409167][ T8794] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 205.123121][ T8848] netlink: 'syz.7.660': attribute type 1 has an invalid length. [ 205.206624][ T8848] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.236135][ T8850] batman_adv: batadv0: Interface deactivated: dummy0 [ 205.333112][ T8850] batman_adv: batadv0: Removing interface: dummy0 [ 205.368041][ T8850] bond2: (slave dummy0): making interface the new active one [ 205.393881][ T8850] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 206.032789][ T8848] bond2 (unregistering): (slave dummy0): Releasing active interface [ 206.044004][ T8848] bond2 (unregistering): Released all slaves [ 206.075424][ T8867] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.666'. [ 206.433537][ T8878] sctp: [Deprecated]: syz.6.670 (pid 8878) Use of int in max_burst socket option deprecated. [ 206.433537][ T8878] Use struct sctp_assoc_value instead [ 206.683354][ T8881] loop6: detected capacity change from 0 to 2048 [ 206.744821][ T8881] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.796241][ T8881] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 206.844898][ T7106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.347461][ T8907] netlink: 188 bytes leftover after parsing attributes in process `syz.3.682'. [ 207.360543][ T8907] netlink: 105 bytes leftover after parsing attributes in process `syz.3.682'. [ 207.461845][ T8895] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.469659][ T8895] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.226737][ T8895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.284277][ T8895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.776522][ T8895] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.785600][ T8895] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.795061][ T8895] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.803999][ T8895] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.889868][ T8895] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.899082][ T8895] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.908334][ T8895] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.917563][ T8895] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.952852][ T8907] netlink: 105 bytes leftover after parsing attributes in process `syz.3.682'. [ 209.094889][ T8923] loop6: detected capacity change from 0 to 512 [ 209.153671][ T8923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.183421][ T8923] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.378288][ T7106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.781925][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.6.697'. [ 210.044933][ T8951] io-wq is not configured for unbound workers [ 210.778821][ T8970] loop7: detected capacity change from 0 to 256 [ 211.239027][ T8982] loop6: detected capacity change from 0 to 1024 [ 212.445791][ T6012] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 212.658358][ T6012] usb 8-1: unable to get BOS descriptor or descriptor too short [ 212.676790][ T6012] usb 8-1: not running at top speed; connect to a high speed hub [ 212.687180][ T6012] usb 8-1: config 1 has an invalid interface number: 116 but max is 0 [ 212.709507][ T6012] usb 8-1: config 1 has no interface number 0 [ 212.725813][ T6012] usb 8-1: config 1 interface 116 altsetting 15 has an invalid endpoint with address 0x80, skipping [ 212.747065][ T6012] usb 8-1: config 1 interface 116 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 212.771560][ T6012] usb 8-1: config 1 interface 116 altsetting 15 has an invalid endpoint with address 0xA1, skipping [ 212.784345][ T6012] usb 8-1: config 1 interface 116 altsetting 15 endpoint 0x3 has invalid maxpacket 7067, setting to 64 [ 212.798681][ T6012] usb 8-1: config 1 interface 116 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.838207][ T6012] usb 8-1: config 1 interface 116 has no altsetting 0 [ 212.858047][ T6012] usb 8-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 212.871818][ T6012] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.880081][ T6012] usb 8-1: Product: syz [ 212.884274][ T6012] usb 8-1: Manufacturer: syz [ 212.897051][ T6012] usb 8-1: SerialNumber: syz [ 212.924904][ T9004] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 212.945820][ T9004] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 212.953155][ T9004] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 213.201895][ T9004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.212475][ T9004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.233462][ T9004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.255081][ T9004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.286105][ T9004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.306263][ T9004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.332185][ T9004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.362111][ T9004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.403519][ T6012] ums-usbat 8-1:1.116: USB Mass Storage device detected [ 213.508499][ T6012] usb 8-1: USB disconnect, device number 3 [ 214.229707][ T9054] loop7: detected capacity change from 0 to 512 [ 214.256274][ T9054] EXT4-fs error (device loop7): ext4_orphan_get:1404: inode #15: comm syz.7.751: iget: bad i_size value: 38620345925642 [ 214.270008][ T9054] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.751: couldn't read orphan inode 15 (err -117) [ 214.284636][ T9054] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.404718][ T9054] EXT4-fs error (device loop7): ext4_validate_block_bitmap:430: comm syz.7.751: bg 0: block 5: invalid block bitmap [ 214.421772][ T9054] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1364 with error 28 [ 214.436054][ T9054] EXT4-fs (loop7): This should not happen!! Data will be lost [ 214.436054][ T9054] [ 214.446018][ T9054] EXT4-fs (loop7): Total free blocks count 0 [ 214.452098][ T9054] EXT4-fs (loop7): Free/Dirty block details [ 214.465940][ T9054] EXT4-fs (loop7): free_blocks=0 [ 214.471136][ T9054] EXT4-fs (loop7): dirty_blocks=1368 [ 214.477026][ T9054] EXT4-fs (loop7): Block reservation details [ 214.483163][ T9054] EXT4-fs (loop7): i_reserved_data_blocks=1368 [ 214.687727][ T7502] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.107061][ T9075] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.748'. [ 216.258647][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.760'. [ 216.335245][ T9099] 8021q: adding VLAN 0 to HW filter on device team1 [ 216.655123][ T9117] loop6: detected capacity change from 0 to 512 [ 216.681072][ T9117] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.767: iget: bad i_size value: 38620345925642 [ 216.708058][ T9117] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.767: couldn't read orphan inode 15 (err -117) [ 216.779782][ T9117] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.873259][ T9125] netlink: 12 bytes leftover after parsing attributes in process `syz.7.771'. [ 216.907500][ T9125] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.973875][ T9117] EXT4-fs error (device loop6): ext4_validate_block_bitmap:430: comm syz.6.767: bg 0: block 5: invalid block bitmap [ 217.042386][ T9117] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 256 with error 28 [ 217.088149][ T9117] EXT4-fs (loop6): This should not happen!! Data will be lost [ 217.088149][ T9117] [ 217.126711][ T9117] EXT4-fs (loop6): Total free blocks count 0 [ 217.152283][ T9117] EXT4-fs (loop6): Free/Dirty block details [ 217.176171][ T9117] EXT4-fs (loop6): free_blocks=0 [ 217.190497][ T9117] EXT4-fs (loop6): dirty_blocks=260 [ 217.220596][ T9117] EXT4-fs (loop6): Block reservation details [ 217.252070][ T9117] EXT4-fs (loop6): i_reserved_data_blocks=260 [ 217.418164][ T7106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.060039][ T9204] netlink: 'syz.3.800': attribute type 1 has an invalid length. [ 219.137552][ T9204] bond2: entered promiscuous mode [ 219.142640][ T9204] bond2: entered allmulticast mode [ 219.177100][ T9204] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.200014][ T9211] erspan1: entered allmulticast mode [ 219.209539][ T9211] bond2: (slave erspan1): making interface the new active one [ 219.218351][ T9211] erspan1: entered promiscuous mode [ 219.229698][ T9211] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 219.230315][ T9209] kvm: pic: level sensitive irq not supported [ 219.257713][ T9209] kvm: pic: single mode not supported [ 219.264076][ T9209] kvm: pic: level sensitive irq not supported [ 219.288716][ T9211] syz.3.800 (9211) used greatest stack depth: 19592 bytes left [ 219.540386][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.5.805'. [ 219.696295][ C1] net_ratelimit: 11 callbacks suppressed [ 219.696314][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 221.117674][ T28] kauditd_printk_skb: 117 callbacks suppressed [ 221.117691][ T28] audit: type=1326 audit(1787849008.539:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9254 comm="syz.5.815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ebe99e0d9 code=0x0 [ 221.183018][ T9253] netlink: 'syz.7.814': attribute type 10 has an invalid length. [ 221.228308][ T9253] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 221.545997][ T5778] Bluetooth: hci3: command 0x0405 tx timeout [ 223.203119][ T9304] netlink: 24 bytes leftover after parsing attributes in process `syz.3.836'. [ 223.230188][ T9306] loop7: detected capacity change from 0 to 1024 [ 223.264856][ T9306] EXT4-fs: Ignoring removed orlov option [ 223.370098][ T9306] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.524867][ T28] audit: type=1804 audit(1787849010.929:259): pid=9306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.837" name="/newroot/113/bus/bus" dev="loop7" ino=18 res=1 errno=0 [ 223.572488][ T28] audit: type=1804 audit(1787849010.979:260): pid=9306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.837" name="/newroot/113/bus/bus" dev="loop7" ino=18 res=1 errno=0 [ 223.750235][ T7502] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.683434][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.849'. [ 225.043295][ T9355] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.852'. [ 225.955627][ T9368] capability: warning: `syz.5.858' uses 32-bit capabilities (legacy support in use) [ 226.042077][ T9370] MTDSB: Device #1 doesn't appear to exist [ 226.042077][ T9370] [ 226.475545][ T9388] netlink: 144 bytes leftover after parsing attributes in process `syz.6.865'. [ 227.138431][ T9408] netlink: 'syz.6.875': attribute type 10 has an invalid length. [ 227.154080][ T9408] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 227.225788][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 227.254568][ T9410] netlink: 'syz.5.876': attribute type 4 has an invalid length. [ 227.328349][ T9413] netlink: 'syz.5.876': attribute type 4 has an invalid length. [ 227.710496][ T28] audit: type=1326 audit(1787849015.129:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.3.884" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f097939e0d9 code=0x0 [ 227.913553][ T9432] netlink: 8 bytes leftover after parsing attributes in process `syz.7.885'. [ 228.212305][ T9438] loop7: detected capacity change from 0 to 512 [ 228.220682][ T9438] EXT4-fs: Ignoring removed orlov option [ 228.250380][ T9438] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 228.307608][ T9438] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 228.339392][ T9438] EXT4-fs error (device loop7): ext4_iget_extra_inode:4740: inode #15: comm syz.7.888: corrupted in-inode xattr: e_value size too large [ 228.364424][ T9438] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.888: couldn't read orphan inode 15 (err -117) [ 228.386958][ T9438] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.683802][ T7502] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.350783][ T9481] netlink: 24 bytes leftover after parsing attributes in process `syz.6.905'. [ 229.391233][ T9485] netlink: 84 bytes leftover after parsing attributes in process `syz.3.907'. [ 229.440107][ T9481] netlink: 24 bytes leftover after parsing attributes in process `syz.6.905'. [ 230.452988][ T9520] loop6: detected capacity change from 0 to 512 [ 230.512866][ T9520] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.922: iget: bad i_size value: -1099511627766 [ 230.573734][ T9520] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.922: couldn't read orphan inode 15 (err -117) [ 230.591074][ T9520] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.660524][ T7106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.202823][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.6.931'. [ 231.294481][ T9548] trusted_key: syz.3.933 sent an empty control message without MSG_MORE. [ 231.650561][ T9563] 8021q: VLANs not supported on syzkaller0 [ 232.025195][ T9577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.944'. [ 232.663049][ T9602] loop7: detected capacity change from 0 to 512 [ 232.735900][ T9602] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 232.794591][ T9607] netlink: 168 bytes leftover after parsing attributes in process `syz.5.953'. [ 232.809121][ T9602] EXT4-fs (loop7): 1 truncate cleaned up [ 232.823248][ T9602] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.989534][ T9612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.955'. [ 233.060943][ T9612] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.131515][ T9612] macvlan2: entered promiscuous mode [ 233.137649][ T9612] macvlan2: entered allmulticast mode [ 233.147217][ T9612] bond2: entered promiscuous mode [ 233.153085][ T9612] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 233.181871][ T9612] bond2: left promiscuous mode [ 233.248340][ T7502] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.370463][ T9616] netlink: 24 bytes leftover after parsing attributes in process `syz.6.956'. [ 233.618773][ T9625] netlink: 'syz.3.958': attribute type 1 has an invalid length. [ 233.951366][ T9637] netlink: 44 bytes leftover after parsing attributes in process `syz.5.965'. [ 233.991844][ T9637] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.999613][ T9637] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.069958][ T9642] netlink: 32 bytes leftover after parsing attributes in process `syz.5.965'. [ 234.461977][ T9653] __nla_validate_parse: 2 callbacks suppressed [ 234.461994][ T9653] netlink: 24 bytes leftover after parsing attributes in process `syz.6.971'. [ 234.584333][ T9660] loop7: detected capacity change from 0 to 128 [ 234.612589][ T9660] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 234.773682][ T9660] UDF-fs: error (device loop7): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 236.040905][ T9704] capability: warning: `syz.6.990' uses deprecated v2 capabilities in a way that may be insecure [ 237.563549][ T9750] loop7: detected capacity change from 0 to 128 [ 237.614226][ T9750] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 237.681109][ T9750] ext4 filesystem being mounted at /155/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 237.741181][ T9756] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 237.990446][ T7502] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 238.957633][ T9800] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.1026'. [ 239.017160][ T9800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1026'. [ 240.293257][ T9819] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -6351, delta: 1 [ 240.318235][ T9819] ref_ctr increment failed for inode: 0x550 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888079bc2f80 [ 240.521817][ T9830] netlink: 'syz.5.1040': attribute type 1 has an invalid length. [ 240.561721][ T9830] 8021q: adding VLAN 0 to HW filter on device bond3 [ 240.693948][ T9830] bond3: (slave veth3): Enslaving as an active interface with a down link [ 240.720315][ T9835] veth0_virt_wifi: entered promiscuous mode [ 240.772549][ T9835] bond3: (slave veth0_virt_wifi): making interface the new active one [ 240.824193][ T9835] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 240.857382][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1041'. [ 240.985782][ T9830] bond3: (slave veth0_virt_wifi): Releasing active interface [ 242.280215][ T9887] netlink: 15051 bytes leftover after parsing attributes in process `syz.6.1060'. [ 242.713279][ T9906] netlink: 'syz.7.1067': attribute type 2 has an invalid length. [ 242.722112][ T9906] netlink: 11575 bytes leftover after parsing attributes in process `syz.7.1067'. [ 243.749408][ T28] audit: type=1326 audit(1787849031.159:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.7.1083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d7d9e0d9 code=0x7ffc0000 [ 243.792246][ T5809] kernel write not supported for file bpf-prog (pid: 5809 comm: kworker/0:4) [ 243.831668][ T28] audit: type=1326 audit(1787849031.159:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.7.1083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d7d9e0d9 code=0x7ffc0000 [ 243.885775][ T28] audit: type=1326 audit(1787849031.169:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.7.1083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19d7d9e0d9 code=0x7ffc0000 [ 243.968955][ T28] audit: type=1326 audit(1787849031.169:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.7.1083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d7d9e0d9 code=0x7ffc0000 [ 244.033749][ T9927] loop6: detected capacity change from 0 to 32768 [ 244.039567][ T28] audit: type=1326 audit(1787849031.169:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.7.1083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f19d7d9e0d9 code=0x7ffc0000 [ 244.109290][ T28] audit: type=1326 audit(1787849031.169:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.7.1083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d7d9e0d9 code=0x7ffc0000 [ 244.142116][ T28] audit: type=1326 audit(1787849031.169:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.7.1083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19d7d5e90e code=0x7ffc0000 [ 244.236052][ T28] audit: type=1326 audit(1787849031.169:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.7.1083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d7d9e0d9 code=0x7ffc0000 [ 244.307573][ T28] audit: type=1326 audit(1787849031.169:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.7.1083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d7d9e0d9 code=0x7ffc0000 [ 244.365755][ T28] audit: type=1326 audit(1787849031.179:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.7.1083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f19d7d9e0d9 code=0x7ffc0000 [ 245.185596][ T9970] netlink: 11575 bytes leftover after parsing attributes in process `syz.7.1092'. [ 246.706484][ T6012] kernel write not supported for file bpf-prog (pid: 6012 comm: kworker/1:9) [ 246.729622][T10009] overlayfs: failed to clone upperpath [ 246.854919][T10014] netlink: 'syz.6.1107': attribute type 1 has an invalid length. [ 246.920552][T10014] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.998122][T10019] bond2: (slave veth9): Enslaving as an active interface with a down link [ 247.084247][T10014] veth0_virt_wifi: entered promiscuous mode [ 247.095449][T10014] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 247.126158][T10014] bond2: (slave veth0_virt_wifi): Releasing active interface [ 247.401999][T10032] veth0_virt_wifi: left promiscuous mode [ 248.439799][T10062] netlink: 'syz.7.1124': attribute type 10 has an invalid length. [ 248.474913][T10062] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.492161][T10062] bond0: (slave team0): Enslaving as an active interface with an up link [ 248.835619][T10071] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1129'. [ 248.938092][T10078] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1131'. [ 249.636491][T10107] loop7: detected capacity change from 0 to 128 [ 249.759810][T10111] 9pnet: p9_errstr2errno: server reported unknown error @cDB|pan [ 249.881600][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1143'. [ 249.891596][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1143'. [ 250.023313][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 250.023327][ T28] audit: type=1326 audit(1787849037.439:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10117 comm="syz.5.1145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe99e0d9 code=0x7ffc0000 [ 250.142694][ T28] audit: type=1326 audit(1787849037.439:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10117 comm="syz.5.1145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe99e0d9 code=0x7ffc0000 [ 250.245735][ T28] audit: type=1326 audit(1787849037.439:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10117 comm="syz.5.1145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe99e0d9 code=0x7ffc0000 [ 250.403563][ T28] audit: type=1326 audit(1787849037.489:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10117 comm="syz.5.1145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5ebe99e0d9 code=0x7ffc0000 [ 250.483513][ T28] audit: type=1326 audit(1787849037.489:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10117 comm="syz.5.1145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe99e0d9 code=0x7ffc0000 [ 250.547763][ T28] audit: type=1326 audit(1787849037.489:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10117 comm="syz.5.1145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe99e0d9 code=0x7ffc0000 [ 250.665842][ T28] audit: type=1326 audit(1787849037.489:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10117 comm="syz.5.1145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe99e0d9 code=0x7ffc0000 [ 250.692251][ T28] audit: type=1326 audit(1787849037.489:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10117 comm="syz.5.1145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe99e0d9 code=0x7ffc0000 [ 250.732051][ T28] audit: type=1326 audit(1787849037.489:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10117 comm="syz.5.1145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe99e0d9 code=0x7ffc0000 [ 250.805918][ T28] audit: type=1326 audit(1787849037.489:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10117 comm="syz.5.1145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5ebe99e0d9 code=0x7ffc0000 [ 250.963663][T10147] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 251.115555][T10153] loop6: detected capacity change from 0 to 2048 [ 251.168300][T10157] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1161'. [ 251.215469][T10153] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.480392][ T7674] udevd[7674]: incorrect ext4 checksum on /dev/loop6 [ 251.554357][ T7674] udevd[7674]: incorrect ext4 checksum on /dev/loop6 [ 251.571836][ T7106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.059652][T10192] loop6: detected capacity change from 0 to 1024 [ 252.071810][T10192] hfsplus: unable to parse mount options [ 252.112027][T10197] bond3: entered allmulticast mode [ 252.156103][T10197] macvlan3: entered promiscuous mode [ 252.161564][T10197] macvlan3: entered allmulticast mode [ 252.168707][T10197] bond3: (slave macvlan3): Opening slave failed [ 252.449669][T10213] loop6: detected capacity change from 0 to 2048 [ 252.485356][T10213] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.506105][T10213] ext4 filesystem being mounted at /201/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 252.635328][T10213] fs-verity: sha512 using implementation "sha512-avx2" [ 252.739191][ T7106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.403493][ T5811] IPVS: starting estimator thread 0... [ 253.509223][T10244] IPVS: using max 23 ests per chain, 55200 per kthread [ 253.632182][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1190'. [ 253.860129][T10256] lo: entered allmulticast mode [ 253.895609][T10256] lo: left allmulticast mode [ 254.204541][ T5811] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 254.254928][ T5811] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 254.415466][T10271] fido_id[10271]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 254.543866][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1202'. [ 255.078417][T10291] ip_tables: iptables: counters copy to user failed while replacing table [ 255.874056][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.880742][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.201208][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1213'. [ 256.217416][T10337] loop6: detected capacity change from 0 to 256 [ 256.240760][T10337] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x4f516b14, utbl_chksum : 0xe619d30d) [ 256.322205][T10340] netlink: 'syz.3.1216': attribute type 1 has an invalid length. [ 256.427438][T10340] 8021q: adding VLAN 0 to HW filter on device bond5 [ 256.437008][T10340] bond4: (slave bond5): making interface the new active one [ 256.445133][T10340] bond4: (slave bond5): Enslaving as an active interface with an up link [ 256.520821][T10340] bond4: entered promiscuous mode [ 256.530629][T10340] bond5: entered promiscuous mode [ 257.762643][T10367] netlink: 'syz.5.1228': attribute type 11 has an invalid length. [ 257.941886][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 258.512251][T10371] dummy0: left promiscuous mode [ 259.027444][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 259.036583][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 259.050732][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 259.061656][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 259.070199][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 259.083581][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 259.163997][T10371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.238118][T10371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.369209][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1236'. [ 259.402427][T10371] veth0_virt_wifi: left promiscuous mode [ 259.625105][T10371] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.634857][T10371] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.644047][T10371] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.669930][T10371] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.819149][T10371] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.828296][T10371] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.837798][T10371] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.846798][T10371] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.233736][T10407] netlink: 'syz.5.1243': attribute type 1 has an invalid length. [ 260.284072][T10407] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.345430][T10411] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 260.390878][T10407] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 260.399642][ T5927] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 260.443537][T10382] chnl_net:caif_netlink_parms(): no params data found [ 260.537818][ T5927] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 260.592442][T10407] netlink: 'syz.5.1243': attribute type 10 has an invalid length. [ 260.600559][T10407] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1243'. [ 260.609764][T10407] dummy0: entered promiscuous mode [ 260.628453][T10407] bond4: (slave dummy0): Removing an active aggregator [ 260.647024][ T5927] bond4: (slave dummy0): link status up again after 0 ms [ 260.652574][T10407] bond4: (slave dummy0): Releasing backup interface [ 260.722318][T10382] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.757800][T10382] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.770248][T10382] bridge_slave_0: entered allmulticast mode [ 260.786963][T10382] bridge_slave_0: entered promiscuous mode [ 260.814042][T10382] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.818391][T10424] loop7: detected capacity change from 0 to 512 [ 260.842323][T10382] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.860664][T10382] bridge_slave_1: entered allmulticast mode [ 260.885476][T10424] EXT4-fs error (device loop7): ext4_orphan_get:1404: inode #15: comm syz.7.1248: iget: bad i_size value: 38620345925642 [ 260.897632][T10382] bridge_slave_1: entered promiscuous mode [ 260.923877][T10424] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.1248: couldn't read orphan inode 15 (err -117) [ 260.983549][T10424] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.052412][T10382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.105897][T10382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.140942][ T51] Bluetooth: hci2: command tx timeout [ 261.273091][T10382] team0: Port device team_slave_0 added [ 261.296863][T10382] team0: Port device team_slave_1 added [ 261.305076][T10437] EXT4-fs error (device loop7): ext4_validate_block_bitmap:430: comm syz.7.1248: bg 0: block 5: invalid block bitmap [ 261.336788][T10437] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 672 with error 28 [ 261.352144][T10382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.365877][T10382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.382963][T10437] EXT4-fs (loop7): This should not happen!! Data will be lost [ 261.382963][T10437] [ 261.397093][T10382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.420198][T10437] EXT4-fs (loop7): Total free blocks count 0 [ 261.426808][T10437] EXT4-fs (loop7): Free/Dirty block details [ 261.429646][T10382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.446972][T10382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.462078][T10437] EXT4-fs (loop7): free_blocks=0 [ 261.484439][T10382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.484721][T10437] EXT4-fs (loop7): dirty_blocks=676 [ 261.552620][T10437] EXT4-fs (loop7): Block reservation details [ 261.562002][T10437] EXT4-fs (loop7): i_reserved_data_blocks=676 [ 261.570670][T10382] hsr_slave_0: entered promiscuous mode [ 261.594928][T10382] hsr_slave_1: entered promiscuous mode [ 261.611823][T10382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.623149][T10382] Cannot create hsr debugfs directory [ 261.809985][ T7502] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.144525][T10382] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 262.162988][T10382] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 262.185405][T10382] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 262.247811][T10382] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 262.532311][T10382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.573972][T10382] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.594133][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.601389][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.703502][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.710754][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.912748][T10382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.226836][ T51] Bluetooth: hci2: command tx timeout [ 263.485646][ C1] sched: RT throttling activated [ 263.987176][T10382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.404499][T10382] veth0_vlan: entered promiscuous mode [ 264.418803][T10382] veth1_vlan: entered promiscuous mode [ 264.464810][T10382] veth0_macvtap: entered promiscuous mode [ 264.475502][T10382] veth1_macvtap: entered promiscuous mode [ 264.521068][T10382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.548647][T10382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.560261][T10382] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.570034][T10382] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.579387][T10382] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.588181][T10382] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.687189][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.700886][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.729830][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.738288][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.059538][T10518] netlink: 'syz.8.1279': attribute type 1 has an invalid length. [ 265.244155][T10518] netlink: 'syz.8.1279': attribute type 10 has an invalid length. [ 265.258533][T10518] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1279'. [ 265.270985][T10518] dummy0: entered promiscuous mode [ 265.299966][ T51] Bluetooth: hci2: command tx timeout [ 265.525419][T10535] team0: Device xfrm0 is of different type [ 265.596644][T10535] tipc: Started in network mode [ 265.601887][T10535] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 265.610623][T10535] tipc: Enabled bearer , priority 0 [ 265.754467][T10542] Illegal XDP return value 2085146665 on prog (id 185) dev N/A, expect packet loss! [ 266.413997][T10559] syz_tun: entered allmulticast mode [ 266.452648][T10559] dvmrp6: entered allmulticast mode [ 266.503507][T10558] syz_tun: left allmulticast mode [ 266.728536][ T5812] tipc: Node number set to 11578026 [ 267.376850][ T51] Bluetooth: hci2: command tx timeout [ 268.254784][T10608] netlink: 136 bytes leftover after parsing attributes in process `syz.8.1313'. [ 270.299119][T10659] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.1330'. [ 270.323846][T10659] netlink: zone id is out of range [ 270.335301][T10659] netlink: zone id is out of range [ 270.347132][T10659] netlink: zone id is out of range [ 270.360929][T10659] netlink: zone id is out of range [ 270.373285][T10659] netlink: zone id is out of range [ 270.386730][T10659] netlink: zone id is out of range [ 270.415790][T10659] netlink: zone id is out of range [ 270.420966][T10659] netlink: zone id is out of range [ 270.461479][T10659] netlink: zone id is out of range [ 270.482538][T10659] netlink: zone id is out of range [ 270.647394][ T6013] libceph: connect (1)[c::]:6789 error -101 [ 270.655321][ T6013] libceph: mon0 (1)[c::]:6789 connect error [ 270.673493][T10664] ceph: No mds server is up or the cluster is laggy [ 270.796567][T10673] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 271.295569][T10685] loop8: detected capacity change from 0 to 512 [ 272.485991][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1352'. [ 272.939543][T10721] netlink: 176 bytes leftover after parsing attributes in process `syz.7.1356'. [ 273.990370][T10745] syz_tun: entered allmulticast mode [ 274.062892][T10742] fuse: root generation should be zero [ 274.256656][T10758] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1371'. [ 276.103416][ T5807] libceph: connect (1)[c::]:6789 error -101 [ 276.127060][ T5807] libceph: mon0 (1)[c::]:6789 connect error [ 276.154412][T10799] ceph: No mds server is up or the cluster is laggy [ 276.488634][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1388'. [ 276.825319][T10817] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 276.886336][T10817] CIFS: Attempting to mount //127.0.0.1/share [ 277.370268][T10825] syz_tun: entered allmulticast mode [ 277.666703][T10817] CIFS: VFS: Error connecting to socket. Aborting operation. [ 277.674480][T10817] CIFS: VFS: cifs_mount failed w/return code = -4 [ 278.416299][ T5778] Bluetooth: hci3: command 0x0405 tx timeout [ 279.840112][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1415'. [ 282.480256][T10917] ceph: No mds server is up or the cluster is laggy [ 282.488067][T10937] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1437'. [ 282.627983][T10937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 282.885428][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1441'. [ 283.884774][T10960] tipc: New replicast peer: 172.20.20.187 [ 283.907568][T10960] ------------[ cut here ]------------ [ 283.913647][T10960] WARNING: CPU: 0 PID: 10960 at net/core/flow_dissector.c:1107 __skb_flow_dissect+0xb05/0x6e70 [ 283.924101][T10960] Modules linked in: [ 283.928084][T10960] CPU: 0 PID: 10960 Comm: syz.8.1445 Not tainted syzkaller #0 [ 283.935654][T10960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.945884][T10960] RIP: 0010:__skb_flow_dissect+0xb05/0x6e70 [ 283.951824][T10960] Code: c6 e8 7f 41 06 f9 85 db 0f 84 9a 06 00 00 80 3d a4 c1 f5 05 01 0f 85 c0 06 00 00 e8 b5 3d 06 f9 e9 d5 f9 ff ff e8 ab 3d 06 f9 <0f> 0b e8 b4 6b 0e 02 89 c3 31 ff 89 c6 e8 49 41 06 f9 85 db 74 18 [ 283.971577][T10960] RSP: 0018:ffffc9000be8e0a0 EFLAGS: 00010283 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 283.977722][T10960] RAX: ffffffff888134c5 RBX: 0000000000000000 RCX: 0000000000080000 [ 283.985771][T10960] RDX: ffffc9000f38a000 RSI: 000000000000c07b RDI: 000000000000c07c [ 283.993862][T10960] RBP: ffffc9000be8e6b8 R08: dffffc0000000000 R09: 1ffffffff223dea0 [ 284.001918][T10960] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: ffffffff8e8cf8f8 [ 284.010009][T10960] R13: 1ffffffff1d19f20 R14: ffffffff8e8cf902 R15: dffffc0000000000 [ 284.018080][T10960] FS: 00007fbdf51b66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 284.027197][T10960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.033832][T10960] CR2: 00005555905fd9f8 CR3: 000000006842f000 CR4: 00000000003506f0 [ 284.041886][T10960] Call Trace: [ 284.045190][T10960] [ 284.048188][T10960] ? __skb_flow_dissect+0x1eb/0x6e70 [ 284.053557][T10960] ? bpf_flow_dissect+0x3f0/0x3f0 [ 284.058699][T10960] ? verify_lock_unused+0x140/0x140 [ 284.063957][T10960] ? mark_lock+0x94/0x320 [ 284.068450][T10960] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 284.074497][T10960] ? nf_conntrack_tuple_taken+0xd0/0xda0 [ 284.080224][T10960] ? __lock_acquire+0x7d80/0x7d80 [ 284.085285][T10960] ? __lock_acquire+0x1262/0x7d80 [ 284.090472][T10960] ? stack_trace_snprint+0xf0/0xf0 [ 284.095663][T10960] ? __siphash_unaligned+0x25c/0x3d0 [ 284.101184][T10960] ? nf_conntrack_tuple_taken+0xd0/0xda0 [ 284.106906][T10960] ? nf_conntrack_tuple_taken+0xd48/0xda0 [ 284.112666][T10960] ? nf_conntrack_tuple_taken+0xd0/0xda0 [ 284.118371][T10960] ? nf_conntrack_in+0xc29/0x15b0 [ 284.123450][T10960] ? nf_conntrack_event_cache+0x110/0x110 [ 284.129260][T10960] ? ___sys_sendmsg+0x2a6/0x360 [ 284.134158][T10960] __skb_get_hash+0xf3/0x2e0 [ 284.138837][T10960] ? __skb_get_hash_symmetric+0x1d0/0x1d0 [ 284.144626][T10960] ? nf_ct_nat_ext_add+0x110/0x110 [ 284.149834][T10960] ? __local_bh_enable_ip+0x13a/0x1c0 [ 284.155245][T10960] nft_trace_init+0x1bb/0x420 [ 284.159993][T10960] ? nf_trace_fill_pkt_info+0x870/0x870 [ 284.165579][T10960] ? ipt_do_table+0x13b3/0x15c0 [ 284.170520][T10960] nft_do_chain+0x1523/0x1620 [ 284.175300][T10960] ? _local_bh_enable+0xa0/0xa0 [ 284.180233][T10960] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 284.186220][T10960] ? nf_nat_inet_fn+0x7da/0xb20 [ 284.191183][T10960] ? nf_nat_packet+0xf0/0xf0 [ 284.195848][T10960] nft_do_chain_ipv4+0x160/0x230 [ 284.200824][T10960] ? nf_tables_netdev_event+0x9d0/0x9d0 [ 284.206530][T10960] ? nf_nat_ipv4_local_fn+0x411/0x560 [ 284.211951][T10960] ? nf_tables_netdev_event+0x9d0/0x9d0 [ 284.217653][T10960] nf_hook_slow+0xbd/0x200 [ 284.222109][T10960] ? nf_hook+0x390/0x390 [ 284.226416][T10960] nf_hook+0x228/0x390 [ 284.230520][T10960] ? nf_hook+0xa2/0x390 [ 284.234700][T10960] ? __ip_local_out+0x5f0/0x5f0 [ 284.239878][T10960] ? nf_hook+0x390/0x390 [ 284.244145][T10960] ? rt_set_nexthop+0x72f/0xa10 [ 284.249070][T10960] ? ip_route_output_key_hash+0x13d/0x330 [ 284.254828][T10960] ? ip_fast_csum+0x1ee/0x2b0 [ 284.259577][T10960] __ip_local_out+0x4db/0x5f0 [ 284.264287][T10960] ? nf_hook+0x390/0x390 [ 284.268603][T10960] ip_local_out+0x2a/0x130 [ 284.273053][T10960] iptunnel_xmit+0x4d0/0x910 [ 284.277741][T10960] udp_tunnel_xmit_skb+0x22f/0x380 [ 284.282894][T10960] tipc_udp_xmit+0x861/0xb40 [ 284.287567][T10960] ? tipc_udp_xmit+0xb7/0xb40 [ 284.292277][T10960] ? tipc_udp_msg2addr+0x1d0/0x1d0 [ 284.297461][T10960] ? __asan_memcpy+0x40/0x70 [ 284.302091][T10960] ? __pskb_copy_fclone+0x978/0x1000 [ 284.307446][T10960] ? __asan_memcpy+0x40/0x70 [ 284.312069][T10960] ? __pskb_copy_fclone+0x978/0x1000 [ 284.317435][T10960] tipc_udp_send_msg+0x27e/0x3e0 [ 284.322409][T10960] tipc_bearer_xmit_skb+0x2ad/0x3f0 [ 284.327674][T10960] ? tipc_bearer_xmit_skb+0xaa/0x3f0 [ 284.333086][T10960] ? tipc_bearer_min_mtu+0x1d0/0x1d0 [ 284.338444][T10960] __tipc_nl_bearer_enable+0x10a7/0x13e0 [ 284.344120][T10960] ? tipc_nl_bearer_disable+0x30/0x30 [ 284.349568][T10960] ? trace_contention_end+0x39/0xe0 [ 284.354805][T10960] ? tipc_nl_bearer_enable+0x17/0x30 [ 284.360168][T10960] ? mutex_lock_nested+0x20/0x20 [ 284.365153][T10960] ? __nla_parse+0x40/0x50 [ 284.369646][T10960] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 284.376216][T10960] ? genl_family_rcv_msg_attrs_parse+0x20a/0x290 [ 284.382612][T10960] tipc_nl_bearer_enable+0x22/0x30 [ 284.387802][T10960] genl_family_rcv_msg_doit+0x21a/0x310 [ 284.393384][T10960] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 284.399376][T10960] ? bpf_lsm_capable+0x9/0x10 [ 284.404088][T10960] ? security_capable+0x89/0xb0 [ 284.409127][T10960] genl_rcv_msg+0x611/0x7a0 [ 284.413672][T10960] ? genl_bind+0x360/0x360 [ 284.418182][T10960] ? __tipc_nl_bearer_enable+0x13e0/0x13e0 [ 284.424024][T10960] ? ref_tracker_free+0x686/0x830 [ 284.429134][T10960] netlink_rcv_skb+0x235/0x4c0 [ 284.433944][T10960] ? genl_bind+0x360/0x360 [ 284.438450][T10960] ? netlink_ack+0x1160/0x1160 [ 284.443266][T10960] ? __lock_acquire+0x7d80/0x7d80 [ 284.448382][T10960] ? down_read+0x1ac/0x2e0 [ 284.452861][T10960] genl_rcv+0x28/0x40 [ 284.456909][T10960] netlink_unicast+0x7b1/0x930 [ 284.461715][T10960] netlink_sendmsg+0x8d0/0xbf0 [ 284.466563][T10960] ? netlink_getsockopt+0x590/0x590 [ 284.471792][T10960] ? apparmor_socket_sendmsg+0x8e/0x330 [ 284.477426][T10960] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 284.482757][T10960] ? security_socket_sendmsg+0x80/0xa0 [ 284.488298][T10960] ? netlink_getsockopt+0x590/0x590 [ 284.493558][T10960] ____sys_sendmsg+0x61b/0x980 [ 284.498416][T10960] ? __asan_memset+0x22/0x40 [ 284.503042][T10960] ? __sys_sendmsg_sock+0x30/0x30 [ 284.508154][T10960] ? __import_iovec+0x5f2/0x850 [ 284.513060][T10960] ? import_iovec+0x73/0xa0 [ 284.517659][T10960] ___sys_sendmsg+0x2a6/0x360 [ 284.522374][T10960] ? __sys_sendmsg+0x2b0/0x2b0 [ 284.527284][T10960] __se_sys_sendmsg+0x1d0/0x2c0 [ 284.532188][T10960] ? __x64_sys_sendmsg+0x80/0x80 [ 284.537233][T10960] ? lockdep_hardirqs_on+0x98/0x150 [ 284.542471][T10960] do_syscall_64+0x55/0xb0 [ 284.546967][T10960] ? clear_bhb_loop+0x40/0x90 [ 284.551679][T10960] ? clear_bhb_loop+0x40/0x90 [ 284.556439][T10960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.562362][T10960] RIP: 0033:0x7fbdf439e0d9 [ 284.566859][T10960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.586541][T10960] RSP: 002b:00007fbdf51b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.594998][T10960] RAX: ffffffffffffffda RBX: 00007fbdf4625fa0 RCX: 00007fbdf439e0d9 [ 284.603054][T10960] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 284.611097][T10960] RBP: 00007fbdf4435024 R08: 0000000000000000 R09: 0000000000000000 [ 284.619162][T10960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.627298][T10960] R13: 00007fbdf4626038 R14: 00007fbdf4625fa0 R15: 00007ffce4288f18 [ 284.635327][T10960] [ 284.638429][T10960] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 284.645740][T10960] CPU: 0 PID: 10960 Comm: syz.8.1445 Not tainted syzkaller #0 [ 284.653225][T10960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.663299][T10960] Call Trace: [ 284.666581][T10960] [ 284.669511][T10960] dump_stack_lvl+0x18c/0x250 [ 284.674201][T10960] ? show_regs_print_info+0x20/0x20 [ 284.679404][T10960] ? load_image+0x420/0x420 [ 284.683916][T10960] panic+0x2ca/0x720 [ 284.687825][T10960] ? bpf_jit_dump+0xd0/0xd0 [ 284.692346][T10960] __warn+0x2e0/0x470 [ 284.696332][T10960] ? __skb_flow_dissect+0xb05/0x6e70 [ 284.701622][T10960] ? __skb_flow_dissect+0xb05/0x6e70 [ 284.706919][T10960] report_bug+0x2be/0x4f0 [ 284.711265][T10960] ? __skb_flow_dissect+0xb05/0x6e70 [ 284.716554][T10960] ? __skb_flow_dissect+0xb05/0x6e70 [ 284.721838][T10960] ? __skb_flow_dissect+0xb07/0x6e70 [ 284.727135][T10960] handle_bug+0xcf/0x120 [ 284.731401][T10960] exc_invalid_op+0x1a/0x50 [ 284.735915][T10960] asm_exc_invalid_op+0x1a/0x20 [ 284.740776][T10960] RIP: 0010:__skb_flow_dissect+0xb05/0x6e70 [ 284.746670][T10960] Code: c6 e8 7f 41 06 f9 85 db 0f 84 9a 06 00 00 80 3d a4 c1 f5 05 01 0f 85 c0 06 00 00 e8 b5 3d 06 f9 e9 d5 f9 ff ff e8 ab 3d 06 f9 <0f> 0b e8 b4 6b 0e 02 89 c3 31 ff 89 c6 e8 49 41 06 f9 85 db 74 18 [ 284.766371][T10960] RSP: 0018:ffffc9000be8e0a0 EFLAGS: 00010283 [ 284.772551][T10960] RAX: ffffffff888134c5 RBX: 0000000000000000 RCX: 0000000000080000 [ 284.780610][T10960] RDX: ffffc9000f38a000 RSI: 000000000000c07b RDI: 000000000000c07c [ 284.788582][T10960] RBP: ffffc9000be8e6b8 R08: dffffc0000000000 R09: 1ffffffff223dea0 [ 284.796588][T10960] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: ffffffff8e8cf8f8 [ 284.804564][T10960] R13: 1ffffffff1d19f20 R14: ffffffff8e8cf902 R15: dffffc0000000000 [ 284.812550][T10960] ? __skb_flow_dissect+0xb05/0x6e70 [ 284.817857][T10960] ? __skb_flow_dissect+0x1eb/0x6e70 [ 284.823172][T10960] ? bpf_flow_dissect+0x3f0/0x3f0 [ 284.828219][T10960] ? verify_lock_unused+0x140/0x140 [ 284.833429][T10960] ? mark_lock+0x94/0x320 [ 284.837763][T10960] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 284.843756][T10960] ? nf_conntrack_tuple_taken+0xd0/0xda0 [ 284.849394][T10960] ? __lock_acquire+0x7d80/0x7d80 [ 284.854417][T10960] ? __lock_acquire+0x1262/0x7d80 [ 284.859441][T10960] ? stack_trace_snprint+0xf0/0xf0 [ 284.864559][T10960] ? __siphash_unaligned+0x25c/0x3d0 [ 284.869850][T10960] ? nf_conntrack_tuple_taken+0xd0/0xda0 [ 284.875569][T10960] ? nf_conntrack_tuple_taken+0xd48/0xda0 [ 284.881290][T10960] ? nf_conntrack_tuple_taken+0xd0/0xda0 [ 284.886923][T10960] ? nf_conntrack_in+0xc29/0x15b0 [ 284.891959][T10960] ? nf_conntrack_event_cache+0x110/0x110 [ 284.897679][T10960] ? ___sys_sendmsg+0x2a6/0x360 [ 284.902536][T10960] __skb_get_hash+0xf3/0x2e0 [ 284.907135][T10960] ? __skb_get_hash_symmetric+0x1d0/0x1d0 [ 284.912880][T10960] ? nf_ct_nat_ext_add+0x110/0x110 [ 284.918004][T10960] ? __local_bh_enable_ip+0x13a/0x1c0 [ 284.923381][T10960] nft_trace_init+0x1bb/0x420 [ 284.928064][T10960] ? nf_trace_fill_pkt_info+0x870/0x870 [ 284.933619][T10960] ? ipt_do_table+0x13b3/0x15c0 [ 284.938517][T10960] nft_do_chain+0x1523/0x1620 [ 284.943226][T10960] ? _local_bh_enable+0xa0/0xa0 [ 284.948094][T10960] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 284.954003][T10960] ? nf_nat_inet_fn+0x7da/0xb20 [ 284.958912][T10960] ? nf_nat_packet+0xf0/0xf0 [ 284.963506][T10960] nft_do_chain_ipv4+0x160/0x230 [ 284.968644][T10960] ? nf_tables_netdev_event+0x9d0/0x9d0 [ 284.974254][T10960] ? nf_nat_ipv4_local_fn+0x411/0x560 [ 284.979646][T10960] ? nf_tables_netdev_event+0x9d0/0x9d0 [ 284.985208][T10960] nf_hook_slow+0xbd/0x200 [ 284.989655][T10960] ? nf_hook+0x390/0x390 [ 284.993909][T10960] nf_hook+0x228/0x390 [ 284.997983][T10960] ? nf_hook+0xa2/0x390 [ 285.002140][T10960] ? __ip_local_out+0x5f0/0x5f0 [ 285.006994][T10960] ? nf_hook+0x390/0x390 [ 285.011238][T10960] ? rt_set_nexthop+0x72f/0xa10 [ 285.016096][T10960] ? ip_route_output_key_hash+0x13d/0x330 [ 285.021832][T10960] ? ip_fast_csum+0x1ee/0x2b0 [ 285.026515][T10960] __ip_local_out+0x4db/0x5f0 [ 285.031316][T10960] ? nf_hook+0x390/0x390 [ 285.035655][T10960] ip_local_out+0x2a/0x130 [ 285.040074][T10960] iptunnel_xmit+0x4d0/0x910 [ 285.044679][T10960] udp_tunnel_xmit_skb+0x22f/0x380 [ 285.049795][T10960] tipc_udp_xmit+0x861/0xb40 [ 285.054405][T10960] ? tipc_udp_xmit+0xb7/0xb40 [ 285.059081][T10960] ? tipc_udp_msg2addr+0x1d0/0x1d0 [ 285.064207][T10960] ? __asan_memcpy+0x40/0x70 [ 285.068796][T10960] ? __pskb_copy_fclone+0x978/0x1000 [ 285.074089][T10960] ? __asan_memcpy+0x40/0x70 [ 285.078680][T10960] ? __pskb_copy_fclone+0x978/0x1000 [ 285.083974][T10960] tipc_udp_send_msg+0x27e/0x3e0 [ 285.088918][T10960] tipc_bearer_xmit_skb+0x2ad/0x3f0 [ 285.094113][T10960] ? tipc_bearer_xmit_skb+0xaa/0x3f0 [ 285.099396][T10960] ? tipc_bearer_min_mtu+0x1d0/0x1d0 [ 285.104683][T10960] __tipc_nl_bearer_enable+0x10a7/0x13e0 [ 285.110361][T10960] ? tipc_nl_bearer_disable+0x30/0x30 [ 285.115739][T10960] ? trace_contention_end+0x39/0xe0 [ 285.120944][T10960] ? tipc_nl_bearer_enable+0x17/0x30 [ 285.126232][T10960] ? mutex_lock_nested+0x20/0x20 [ 285.131437][T10960] ? __nla_parse+0x40/0x50 [ 285.135862][T10960] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 285.142272][T10960] ? genl_family_rcv_msg_attrs_parse+0x20a/0x290 [ 285.148603][T10960] tipc_nl_bearer_enable+0x22/0x30 [ 285.153719][T10960] genl_family_rcv_msg_doit+0x21a/0x310 [ 285.159268][T10960] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 285.165274][T10960] ? bpf_lsm_capable+0x9/0x10 [ 285.169976][T10960] ? security_capable+0x89/0xb0 [ 285.174846][T10960] genl_rcv_msg+0x611/0x7a0 [ 285.179368][T10960] ? genl_bind+0x360/0x360 [ 285.183787][T10960] ? __tipc_nl_bearer_enable+0x13e0/0x13e0 [ 285.189603][T10960] ? ref_tracker_free+0x686/0x830 [ 285.194633][T10960] netlink_rcv_skb+0x235/0x4c0 [ 285.199399][T10960] ? genl_bind+0x360/0x360 [ 285.203813][T10960] ? netlink_ack+0x1160/0x1160 [ 285.208667][T10960] ? __lock_acquire+0x7d80/0x7d80 [ 285.213786][T10960] ? down_read+0x1ac/0x2e0 [ 285.218210][T10960] genl_rcv+0x28/0x40 [ 285.222192][T10960] netlink_unicast+0x7b1/0x930 [ 285.226963][T10960] netlink_sendmsg+0x8d0/0xbf0 [ 285.231847][T10960] ? netlink_getsockopt+0x590/0x590 [ 285.237083][T10960] ? apparmor_socket_sendmsg+0x8e/0x330 [ 285.242636][T10960] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 285.247924][T10960] ? security_socket_sendmsg+0x80/0xa0 [ 285.253380][T10960] ? netlink_getsockopt+0x590/0x590 [ 285.258697][T10960] ____sys_sendmsg+0x61b/0x980 [ 285.263470][T10960] ? __asan_memset+0x22/0x40 [ 285.268078][T10960] ? __sys_sendmsg_sock+0x30/0x30 [ 285.273123][T10960] ? __import_iovec+0x5f2/0x850 [ 285.277988][T10960] ? import_iovec+0x73/0xa0 [ 285.282499][T10960] ___sys_sendmsg+0x2a6/0x360 [ 285.287181][T10960] ? __sys_sendmsg+0x2b0/0x2b0 [ 285.291984][T10960] __se_sys_sendmsg+0x1d0/0x2c0 [ 285.296864][T10960] ? __x64_sys_sendmsg+0x80/0x80 [ 285.301833][T10960] ? lockdep_hardirqs_on+0x98/0x150 [ 285.307048][T10960] do_syscall_64+0x55/0xb0 [ 285.311478][T10960] ? clear_bhb_loop+0x40/0x90 [ 285.316160][T10960] ? clear_bhb_loop+0x40/0x90 [ 285.320845][T10960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.326768][T10960] RIP: 0033:0x7fbdf439e0d9 [ 285.331183][T10960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.350784][T10960] RSP: 002b:00007fbdf51b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.359370][T10960] RAX: ffffffffffffffda RBX: 00007fbdf4625fa0 RCX: 00007fbdf439e0d9 [ 285.367339][T10960] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 285.375304][T10960] RBP: 00007fbdf4435024 R08: 0000000000000000 R09: 0000000000000000 [ 285.383358][T10960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.391357][T10960] R13: 00007fbdf4626038 R14: 00007fbdf4625fa0 R15: 00007ffce4288f18 [ 285.399360][T10960] [ 285.402686][T10960] Kernel Offset: disabled [ 285.407138][T10960] Rebooting in 86400 seconds..