last executing test programs: 11.294388209s ago: executing program 0: socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {0x0}], 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800014000"], 0x80}}, 0x0) 10.220089683s ago: executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x440, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$security_capability(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x0, 0x0, 0x0) dup3(r0, r1, 0x0) 9.914165661s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000013200)={0x0, 0x0, &(0x7f00000131c0)={&(0x7f0000013180)={0x14}, 0x14}}, 0x20008854) 9.605476649s ago: executing program 0: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r1, r0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x3a}, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0xf0, 0x3, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xc5}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x120}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x88}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1032}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffffffe1}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_LABELS_MASK={0x4}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xa9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x20}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x4048040) 9.313217335s ago: executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 9.231029934s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x9}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f0000002c00), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 7.030547884s ago: executing program 4: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r1, r0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x3a}, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0xf0, 0x3, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xc5}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x120}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x88}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1032}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffffffe1}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_LABELS_MASK={0x4}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xa9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x20}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x4048040) 6.785830016s ago: executing program 4: r0 = memfd_secret(0x0) ioctl$KDFONTOP_COPY(r0, 0x5450, 0x0) 6.589707538s ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statfs(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) 6.318609032s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x1f0, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, r7}}, {0x0, 0x0, 0x8, 0x0, 'group_id'}}, {{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4}}, {0x0, 0x0, 0x1, 0x0, '.'}}, {{0x0, 0x0, 0x0, 0x8000000000000}, {0x0, 0x0, 0x6, 0x0, ',/&\\&-'}}]}, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) faccessat(0xffffffffffffffff, 0x0, 0x0) 2.912699819s ago: executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1a4a8a20, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x3a}, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0xf0, 0x3, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xc5}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x120}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x88}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1032}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffffffe1}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_LABELS_MASK={0x4}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xa9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x20}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x4048040) 2.653591655s ago: executing program 3: socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {&(0x7f0000000000)=""/248, 0xf8}, {&(0x7f0000000140)=""/9, 0x9}], 0x3, 0x0, 0x400) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r2, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = gettid() ptrace$getenv(0x4201, r4, 0x101, &(0x7f0000000200)) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001500), 0x588, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) 2.437546274s ago: executing program 2: r0 = timerfd_create(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) 2.173180759s ago: executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000001900), 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000000)) 2.125520967s ago: executing program 4: socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {0x0}], 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800014000"], 0x80}}, 0x0) 2.0022785s ago: executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0xa, 0xbd2, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400}) write$cgroup_devices(r3, &(0x7f0000000400)=ANY=[], 0xffdd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x11, 0x21, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0xc, 0x3, 0x7, 0xfffffffffffffffc, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000000}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x10001, 0x73, &(0x7f0000000280)=""/115, 0x41000, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x200000a, 0x23}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000ec0)=[r1], &(0x7f00000015c0)=[{0x1, 0x5, 0xf, 0x2}, {0x3, 0x6, 0x7, 0x8}, {0x2, 0x5, 0xb, 0xb}, {0x1, 0x2, 0x4}, {0x2, 0x0, 0x0, 0xb}, {0x2, 0x4, 0x10}, {0xfffffffe, 0x4, 0xb, 0x4}, {0x4, 0x4, 0x5, 0x2}, {0x5, 0x1, 0xf, 0x9}], 0x10, 0x7}, 0x90) r4 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x20, 0x200, 0x9, 0x10001, 0x20, 0xffffffffffffffff, 0x9d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) r6 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth1_to_hsr\x00', 0x0}) sendto$packet(r4, &(0x7f00000001c0)="0b030e00e0ff020002004788aa96", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r7}, 0x14) 1.973519739s ago: executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 1.880100447s ago: executing program 5: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) pipe(&(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', 0x0}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xdc03, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 1.773529372s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 1.75429628s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14}, 0x14}}, 0x4800) 1.567324883s ago: executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x18}, 0x18}}, 0x850) 1.437787603s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0xb8eee940bd61a227}, 0x14}}, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x5452, &(0x7f0000000140)={'veth0\x00', {0x2, 0x0, @empty}}) 1.318574386s ago: executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) 1.291658936s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x1f0, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, r7}}, {0x0, 0x0, 0x8, 0x0, 'group_id'}}, {{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4}}, {0x0, 0x0, 0x1, 0x0, '.'}}, {{0x0, 0x0, 0x0, 0x8000000000000}, {0x0, 0x0, 0x6, 0x0, ',/&\\&-'}}]}, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) faccessat(0xffffffffffffffff, 0x0, 0x0) 1.282671721s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x40000) 1.256050101s ago: executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x83, 0x0) ioctl$FIONCLEX(r0, 0x5450) 1.197517941s ago: executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14}, 0x14}}, 0x0) 1.145003698s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x7fff}, @IFLA_BR_MULTI_BOOLOPT={0xc}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.002640452s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000001c0)='./file0\x00', 0x6000400) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xee01) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) sendfile(r3, r5, 0x0, 0xe065) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x2, 0x2, [{}, {0x0, 0x3}]}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000003c0)}, {&(0x7f00000006c0)="fc15fbe5f91439fa5e44ad4afbb36eb6644d34790c407e8e9c4e8f21c42a707391b232463b82245a90b9fe8fb6a90891591e024cf7688d59e30c22fdccdcaf73e8eb1bf30ec18a406eff0198d0442b8b68c31534ed5c9e7c7aa429dcc25d25670a7b894477743ed1760356610a5efedd813f95b64e27add2a802ff546299110ad1f114e5e5e2f3e2e3019c1fbdbd5024f40f1ccf031cdc168b4a84d85ec1ca0693a66dbdb2b83f456b1a44f456e69eac7b2de31b80185567d7b7c2d5526add", 0xbf}, {&(0x7f0000000940)="24d99d6283fe96f1daa245a2eb6f6269cdf0ec1fdf4c1edd6ea18e1150f18d759ea7db55c89be83a7c388af77f0984ffb38f119b159a00def12d4a2435b0f30e3b73cc1c11f96d458450e0d51af2abf1dc4a147709cb0332691230da32840b00389104918c8c697bbf76aa75073b36ca62489576c16f5d3a83ba0ac6077353a33f95429aea177d448b36ecea24bf3968a69ec92d2861bb0f5bbac2b1a52cdb55b6fb83cd95da5d0c296c59dfd1e1e3dd4ffc55f86d34ca2afc1d9d74f23c7319579b369bd054f018d9ed6994105f29ed54b20a32df3b2ee6f77c085300c7fdd703e311c5381732b82f", 0xe9}, {&(0x7f0000000a40)="97eaaec8d2795e537b2a830bebd414bc0738cfd147ef15637b617199b5b8525d8f0c3d072099b964f4b9be0d7f27e8da1d98976fc554a29af5309b116b173e5fadb95295af2531377213de4afa", 0x4d}], 0x4, &(0x7f0000000c80)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x10}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r5, r1, r4, r6, r2, r2, r3, r4, r2]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80, 0x40080}}], 0x1, 0x40884) socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='sched_switch\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='writeback_pages_written\x00', r8}, 0x10) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r9 = memfd_create(&(0x7f0000000800)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r9, &(0x7f00000007c0)=[{&(0x7f0000000040)="3f9ebe239545703482cbae9a17ba12fc50ab1b6e", 0x14}, {0x0}], 0x2, 0x81806, 0x0) 980.037972ms ago: executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000140)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r3, 0x1, 0x6, @local}, 0x10) 908.064574ms ago: executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) dup3(r1, r0, 0x0) write$nbd(r0, &(0x7f00000002c0), 0x10) 682.953518ms ago: executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 444.644491ms ago: executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000000c0)={0x77359400}, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 176.029924ms ago: executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x30}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 4.638431ms ago: executing program 3: socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {0x0}], 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800014000"], 0x80}}, 0x0) 0s ago: executing program 1: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_switch\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000080, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000010) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040), 0x4) kernel console output (not intermixed with test programs): lesystem being mounted at /root/syzkaller-testdir1152574931/syzkaller.PmMNFd/271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.494191][T10113] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 391.736828][T10120] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 391.782369][T10120] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 391.962441][ T5117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.964626][T10157] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 392.976968][T10157] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 392.988340][T10154] loop0: detected capacity change from 0 to 2048 [ 393.014888][T10154] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 393.048366][T10162] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 393.057157][T10161] loop4: detected capacity change from 0 to 512 [ 393.079106][T10154] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 393.186790][T10161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.249581][T10161] ext4 filesystem being mounted at /root/syzkaller-testdir4192215157/syzkaller.gbVURv/258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.500884][ T5122] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.014147][T10197] loop2: detected capacity change from 0 to 2048 [ 394.031405][T10197] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 394.045002][T10197] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 394.163989][ T782] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 394.205903][T10203] loop5: detected capacity change from 0 to 16 [ 394.232126][T10203] erofs: (device loop5): mounted with root inode @ nid 36. [ 394.294186][T10207] loop1: detected capacity change from 0 to 512 [ 394.372578][ T782] usb 1-1: Using ep0 maxpacket: 8 [ 394.394250][ T782] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 394.443837][T10207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.460530][ T782] usb 1-1: config 1 has no interface number 1 [ 394.524555][T10216] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 394.538338][ T782] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 394.593162][T10207] ext4 filesystem being mounted at /root/syzkaller-testdir1152574931/syzkaller.PmMNFd/278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.595232][ T782] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 395.311993][ T782] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 395.328259][ T782] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 395.337423][ T782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.409150][ T782] usb 1-1: Product: syz [ 395.437316][ T782] usb 1-1: Manufacturer: syz [ 395.459200][ T782] usb 1-1: SerialNumber: syz [ 395.681738][ T5117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.681886][T10224] loop2: detected capacity change from 0 to 4096 [ 395.750906][T10224] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 395.788942][ T29] audit: type=1804 audit(1717496272.246:353): pid=10195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2826199641/syzkaller.o0EScU/248/file0" dev="sda1" ino=1963 res=1 errno=0 [ 397.251857][T10249] loop4: detected capacity change from 0 to 2048 [ 397.315615][T10249] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 397.353111][T10249] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 397.428355][T10256] loop5: detected capacity change from 0 to 16 [ 397.488975][T10256] erofs: (device loop5): mounted with root inode @ nid 36. [ 397.530974][T10262] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 397.840651][T10271] loop2: detected capacity change from 0 to 512 [ 398.784527][T10271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.855267][T10271] ext4 filesystem being mounted at /root/syzkaller-testdir230199400/syzkaller.wznMHX/280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.865158][ T782] usb 1-1: USB disconnect, device number 11 [ 398.982962][T10285] overlayfs: missing 'lowerdir' [ 399.092345][T10282] loop4: detected capacity change from 0 to 4096 [ 399.124119][T10282] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 399.194269][ T5119] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.330833][T10299] loop3: detected capacity change from 0 to 2048 [ 399.394728][T10301] veth0_macvtap: left promiscuous mode [ 399.410728][T10299] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 399.491714][T10299] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 399.554172][T10299] fuse: Bad value for 'fd' [ 399.612632][T10314] loop0: detected capacity change from 0 to 16 [ 399.644214][T10314] erofs: (device loop0): mounted with root inode @ nid 36. [ 399.673991][T10315] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 399.933511][T10322] overlayfs: missing 'workdir' [ 400.756668][T10328] loop1: detected capacity change from 0 to 512 [ 400.925960][T10328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.963989][T10335] loop3: detected capacity change from 0 to 4096 [ 400.974808][T10335] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 401.011839][T10328] ext4 filesystem being mounted at /root/syzkaller-testdir1152574931/syzkaller.PmMNFd/288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.397868][T10351] loop4: detected capacity change from 0 to 2048 [ 401.428624][ T5117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.457910][T10351] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 401.499802][T10351] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 401.528629][T10351] fuse: Bad value for 'fd' [ 401.628719][T10361] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 401.669470][T10364] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 401.900648][T10372] loop4: detected capacity change from 0 to 16 [ 401.953926][T10372] erofs: (device loop4): mounted with root inode @ nid 36. [ 403.148775][T10381] loop3: detected capacity change from 0 to 4096 [ 403.167454][T10385] loop1: detected capacity change from 0 to 512 [ 403.187048][T10381] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 403.236603][T10385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.262439][T10385] ext4 filesystem being mounted at /root/syzkaller-testdir1152574931/syzkaller.PmMNFd/291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.746573][T10402] loop4: detected capacity change from 0 to 2048 [ 403.804046][T10402] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 403.853999][ T5117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.855121][T10402] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 403.933753][T10402] fuse: Bad value for 'fd' [ 403.953247][T10410] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 404.189779][T10415] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 404.456100][T10422] loop0: detected capacity change from 0 to 16 [ 404.480137][T10422] erofs: (device loop0): mounted with root inode @ nid 36. [ 405.986834][T10443] loop1: detected capacity change from 0 to 512 [ 406.023199][T10439] loop0: detected capacity change from 0 to 4096 [ 406.050311][T10439] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 406.082787][T10443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.125442][T10443] ext4 filesystem being mounted at /root/syzkaller-testdir1152574931/syzkaller.PmMNFd/296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.177517][T10455] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 406.361281][T10463] loop2: detected capacity change from 0 to 16 [ 406.372888][T10463] erofs: (device loop2): mounted with root inode @ nid 36. [ 406.388180][T10461] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 407.476400][ T5117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.007216][T10494] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 408.091144][T10494] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 408.234069][T10498] loop5: detected capacity change from 0 to 4096 [ 408.247258][T10509] loop1: detected capacity change from 0 to 512 [ 408.276703][T10498] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 408.313374][T10509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.371368][T10509] ext4 filesystem being mounted at /root/syzkaller-testdir1152574931/syzkaller.PmMNFd/299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.925461][ T5117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.952367][T10537] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 409.185319][T10551] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 409.706634][T10569] loop5: detected capacity change from 0 to 4096 [ 409.733704][T10569] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 409.742878][T10578] loop3: detected capacity change from 0 to 512 [ 409.805876][T10578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.827574][T10578] ext4 filesystem being mounted at /root/syzkaller-testdir3304842352/syzkaller.AhvOiZ/267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.016168][T10584] loop1: detected capacity change from 0 to 2048 [ 410.077913][T10584] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 410.125086][T10584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 410.185680][T10584] fuse: Bad value for 'fd' [ 410.307149][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 410.368426][T10607] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 410.426700][ T5925] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.928207][T10630] loop4: detected capacity change from 0 to 4096 [ 410.962789][T10630] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 411.118035][T10634] loop3: detected capacity change from 0 to 2048 [ 411.146493][T10634] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 411.186080][T10634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 411.214727][T10642] loop2: detected capacity change from 0 to 512 [ 411.233711][T10634] fuse: Bad value for 'fd' [ 411.309593][T10642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.359876][T10642] ext4 filesystem being mounted at /root/syzkaller-testdir230199400/syzkaller.wznMHX/302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.586646][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 411.654483][T10656] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 411.890542][ T5119] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.187231][T10679] loop0: detected capacity change from 0 to 2048 [ 412.273889][T10679] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 412.306103][T10679] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 412.329077][T10678] loop5: detected capacity change from 0 to 4096 [ 412.346492][T10679] fuse: Bad value for 'fd' [ 412.370661][T10678] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 412.627538][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 412.830437][T10711] loop3: detected capacity change from 0 to 512 [ 412.905658][T10711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.932270][T10711] ext4 filesystem being mounted at /root/syzkaller-testdir3304842352/syzkaller.AhvOiZ/274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.955658][T10717] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 413.102457][T10723] loop0: detected capacity change from 0 to 16 [ 413.117548][T10723] erofs: (device loop0): mounted with root inode @ nid 36. [ 413.439387][T10731] loop2: detected capacity change from 0 to 2048 [ 413.463858][T10731] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 413.510326][T10731] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 414.425558][ T5925] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.469361][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 414.701288][T10744] loop0: detected capacity change from 0 to 4096 [ 414.757700][T10744] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 414.768202][T10756] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 414.984919][T10768] loop2: detected capacity change from 0 to 16 [ 415.010675][T10768] erofs: (device loop2): mounted with root inode @ nid 36. [ 415.900250][T10779] loop0: detected capacity change from 0 to 2048 [ 416.182108][T10779] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 416.277227][T10779] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 416.469408][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 416.529119][T10791] loop4: detected capacity change from 0 to 512 [ 416.613054][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 416.654933][T10791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.697689][T10791] ext4 filesystem being mounted at /root/syzkaller-testdir4192215157/syzkaller.gbVURv/300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.731311][T10808] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 416.926276][T10767] loop1: detected capacity change from 0 to 32768 [ 416.989699][T10767] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 417.038350][T10767] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 417.126641][ T5122] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.177461][T10767] XFS (loop1): Ending clean mount [ 417.226204][T10767] XFS (loop1): Quotacheck needed: Please wait. [ 417.401355][T10767] XFS (loop1): Quotacheck: Done. [ 417.594091][T10839] loop5: detected capacity change from 0 to 2048 [ 417.607814][ T5117] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 417.657261][T10839] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 417.693620][T10839] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 417.745115][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 417.962806][T10849] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 418.292451][T10859] loop2: detected capacity change from 0 to 512 [ 418.402299][T10859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.456700][T10859] ext4 filesystem being mounted at /root/syzkaller-testdir230199400/syzkaller.wznMHX/317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.684691][T10879] loop5: detected capacity change from 0 to 2048 [ 418.697825][T10879] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 418.732915][T10879] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 418.792558][T10885] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 418.871197][ T5119] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.971379][T10888] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 419.730936][T10915] loop5: detected capacity change from 0 to 512 [ 419.749972][T10874] loop0: detected capacity change from 0 to 32768 [ 419.773917][T10915] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.802699][T10915] ext4 filesystem being mounted at /root/syzkaller-testdir455840847/syzkaller.1Zr0en/222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.818354][T10874] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 419.838355][T10874] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 419.898564][T10874] XFS (loop0): Ending clean mount [ 419.909906][T10926] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 419.912009][T10874] XFS (loop0): Quotacheck needed: Please wait. [ 420.083809][T10874] XFS (loop0): Quotacheck: Done. [ 420.085181][ T6148] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.096056][T10933] loop4: detected capacity change from 0 to 2048 [ 420.110298][T10933] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 420.161307][T10933] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 420.176924][T10936] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 420.227488][ T5116] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 420.493829][T10947] fuse: Bad value for 'fd' [ 420.652397][T10952] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 420.964215][T10965] loop1: detected capacity change from 0 to 512 [ 421.023259][T10965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.062009][T10965] ext4 filesystem being mounted at /root/syzkaller-testdir1152574931/syzkaller.PmMNFd/326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.253415][ T5117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.475696][T10976] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 421.847767][T10983] fuse: Bad value for 'fd' [ 421.925020][T10984] loop2: detected capacity change from 0 to 2048 [ 421.965490][T10984] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 422.010706][T10984] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 422.040749][T10964] loop4: detected capacity change from 0 to 32768 [ 422.112662][T10964] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 422.172054][T10964] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 422.312423][T10964] XFS (loop4): Ending clean mount [ 422.334068][T10964] XFS (loop4): Quotacheck needed: Please wait. [ 422.436570][T10964] XFS (loop4): Quotacheck: Done. [ 422.473000][T11013] loop3: detected capacity change from 0 to 512 [ 422.548784][T11013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.597996][T11013] ext4 filesystem being mounted at /root/syzkaller-testdir3304842352/syzkaller.AhvOiZ/295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.616103][ T5122] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 422.734321][ T5925] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.918720][T11030] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 423.476470][T11040] loop1: detected capacity change from 0 to 2048 [ 423.511849][T11040] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 423.540445][T11040] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 423.569361][T11046] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 423.868134][T11055] loop2: detected capacity change from 0 to 512 [ 423.909147][T11055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.943328][T11055] ext4 filesystem being mounted at /root/syzkaller-testdir230199400/syzkaller.wznMHX/329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.065595][T11069] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 424.135474][ T5119] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.357891][T11076] loop3: detected capacity change from 0 to 2048 [ 424.391282][T11076] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 424.421099][T11076] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 424.457355][T11083] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 425.096978][T11052] loop0: detected capacity change from 0 to 32768 [ 425.123931][T11113] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 425.175869][T11052] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 425.201290][T11052] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 425.249789][T11123] loop4: detected capacity change from 0 to 2048 [ 425.278441][T11123] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 425.328910][T11123] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 425.373521][T11130] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 425.379087][T11052] XFS (loop0): Ending clean mount [ 425.404727][T11052] XFS (loop0): Quotacheck needed: Please wait. [ 425.552644][T11052] XFS (loop0): Quotacheck: Done. [ 425.614887][T11138] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 425.693360][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 425.714545][ T5116] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 426.113354][T11163] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 426.238222][T11162] loop3: detected capacity change from 0 to 2048 [ 426.272124][T11162] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 426.349765][T11162] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 426.373663][T11162] fuse: Bad value for 'fd' [ 426.654653][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 427.041367][T11200] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 427.221104][T11205] loop5: detected capacity change from 0 to 2048 [ 427.247956][T11205] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 427.270717][T11205] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 427.278863][T11211] loop2: detected capacity change from 0 to 256 [ 427.307534][T11205] fuse: Bad value for 'fd' [ 427.319216][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 427.345935][T11211] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 427.362202][T11211] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 427.362375][T11211] exFAT-fs (loop2): Filesystem has been set read-only [ 427.923577][T11238] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 428.138397][T11242] loop1: detected capacity change from 0 to 2048 [ 428.149254][T11247] loop5: detected capacity change from 0 to 256 [ 428.175639][T11242] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 428.203492][T11242] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 428.225686][T11242] fuse: Bad value for 'fd' [ 428.230582][T11247] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 428.294135][T11247] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 428.316158][T11247] exFAT-fs (loop5): Filesystem has been set read-only [ 428.337768][T11251] loop3: detected capacity change from 0 to 1024 [ 428.444366][ T5290] hfsplus: b-tree write err: -5, ino 4 [ 428.654167][T11263] serio: Serial port pts0 [ 428.659068][T11261] loop1: detected capacity change from 0 to 512 [ 428.728076][T11261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.814395][T11261] ext4 filesystem being mounted at /root/syzkaller-testdir1152574931/syzkaller.PmMNFd/356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.925377][T11276] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 428.957220][ T5117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.039846][T11282] loop5: detected capacity change from 0 to 2048 [ 429.096836][T11282] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 429.110814][T11284] loop2: detected capacity change from 0 to 256 [ 429.141339][T11282] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 429.162619][T11286] loop3: detected capacity change from 0 to 1024 [ 429.189277][T11284] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 429.202786][T11282] fuse: Invalid rootmode [ 429.231434][T11284] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 429.245458][T11284] exFAT-fs (loop2): Filesystem has been set read-only [ 429.308568][ T5290] hfsplus: b-tree write err: -5, ino 4 [ 429.618088][T11309] loop1: detected capacity change from 0 to 512 [ 429.677648][ T29] audit: type=1804 audit(1717496306.146:354): pid=11311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir455840847/syzkaller.1Zr0en/242/file0" dev="sda1" ino=1960 res=1 errno=0 [ 430.506064][T11309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.542015][T11309] ext4 filesystem being mounted at /root/syzkaller-testdir1152574931/syzkaller.PmMNFd/360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.633315][T11317] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 430.713926][T11320] loop5: detected capacity change from 0 to 2048 [ 430.728409][ T5117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.768951][T11320] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 430.819829][T11325] loop4: detected capacity change from 0 to 256 [ 430.830007][T11320] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 430.847451][T11325] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 430.868795][T11320] fuse: Invalid rootmode [ 430.880511][T11325] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 430.895842][T11325] exFAT-fs (loop4): Filesystem has been set read-only [ 431.004108][T11331] loop1: detected capacity change from 0 to 1024 [ 431.094035][ T5290] hfsplus: b-tree write err: -5, ino 4 [ 431.342427][ T29] audit: type=1804 audit(1717496307.796:355): pid=11348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir455840847/syzkaller.1Zr0en/245/file0" dev="sda1" ino=1949 res=1 errno=0 [ 432.167437][T11351] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 432.243916][T11354] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 432.447693][T11366] loop5: detected capacity change from 0 to 256 [ 432.468269][T11360] loop3: detected capacity change from 0 to 2048 [ 432.495535][T11360] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 432.508925][T11366] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 432.553885][T11366] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 432.571567][T11370] loop1: detected capacity change from 0 to 1024 [ 432.579981][T11360] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 432.590255][T11366] exFAT-fs (loop5): Filesystem has been set read-only [ 432.615557][T11360] fuse: Invalid rootmode [ 432.739494][ T11] hfsplus: b-tree write err: -5, ino 4 [ 432.984307][ T29] audit: type=1804 audit(1717496309.436:356): pid=11390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3304842352/syzkaller.AhvOiZ/326/file0" dev="sda1" ino=1950 res=1 errno=0 [ 433.863998][T11393] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 433.868862][T11394] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 434.090429][T11402] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 434.143191][T11411] loop3: detected capacity change from 0 to 256 [ 434.189318][T11412] loop0: detected capacity change from 0 to 1024 [ 434.212826][T11407] loop2: detected capacity change from 0 to 2048 [ 434.254125][T11407] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 434.258085][T11411] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 434.305011][T11407] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 434.326103][T11411] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 434.354356][T11411] exFAT-fs (loop3): Filesystem has been set read-only [ 434.401317][T10243] hfsplus: b-tree write err: -5, ino 4 [ 434.564225][T11428] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 434.615366][T11430] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 434.856217][T11441] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 434.950335][T11450] loop5: detected capacity change from 0 to 1024 [ 435.039100][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 435.057258][T11452] loop4: detected capacity change from 0 to 2048 [ 435.089092][ T11] hfsplus: b-tree write err: -5, ino 4 [ 435.099180][T11452] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 435.152812][T11452] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 435.232882][T11460] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 435.367730][T11468] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 435.380107][T11467] loop5: detected capacity change from 0 to 256 [ 435.501581][ T29] audit: type=1326 audit(1717496311.966:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3dd27cf69 code=0x0 [ 435.619825][T11481] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 435.647629][T11484] loop0: detected capacity change from 0 to 1024 [ 435.781467][ T2882] hfsplus: b-tree write err: -5, ino 4 [ 435.910294][T11495] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 435.981988][T11494] loop4: detected capacity change from 0 to 2048 [ 436.054038][T11494] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 436.088756][T11494] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 436.265267][T11508] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 436.404442][T11515] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 436.490997][T11520] loop5: detected capacity change from 0 to 1024 [ 436.634179][ T11] hfsplus: b-tree write err: -5, ino 4 [ 436.724466][T11530] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 437.028412][T11541] loop2: detected capacity change from 0 to 256 [ 437.065605][T11542] loop5: detected capacity change from 0 to 2048 [ 437.090480][T11542] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 437.123283][ T29] audit: type=1326 audit(1717496313.596:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11539 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efeeee7cf69 code=0x0 [ 437.157775][T11542] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 437.400821][T11546] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 437.764608][T11561] loop1: detected capacity change from 0 to 1024 [ 437.908008][ T11] hfsplus: b-tree write err: -5, ino 4 [ 438.083893][T11573] loop2: detected capacity change from 0 to 2048 [ 438.113686][T11576] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 438.141055][T11573] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 438.152112][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 438.179461][T11573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 438.740497][T11605] loop4: detected capacity change from 0 to 256 [ 438.775783][T11602] loop2: detected capacity change from 0 to 1024 [ 438.861433][ T29] audit: type=1326 audit(1717496315.326:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb573a7cf69 code=0x0 [ 438.916355][ T5290] hfsplus: b-tree write err: -5, ino 4 [ 439.056123][T11615] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 439.086276][T11615] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 439.147530][T11616] loop5: detected capacity change from 0 to 2048 [ 439.197520][T11616] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 439.241318][T11616] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 439.625811][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.634805][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.750334][T11645] loop2: detected capacity change from 0 to 1024 [ 439.854970][T10243] hfsplus: b-tree write err: -5, ino 4 [ 440.174709][T11660] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 440.185285][T11660] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 440.473813][T11669] loop0: detected capacity change from 0 to 2048 [ 440.498748][T11669] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 440.523584][T11669] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 440.728804][T11679] loop4: detected capacity change from 0 to 1024 [ 440.800629][T11682] loop0: detected capacity change from 0 to 256 [ 440.816762][ T11] hfsplus: b-tree write err: -5, ino 4 [ 440.964028][ T29] audit: type=1326 audit(1717496317.426:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0be4c7cf69 code=0x0 [ 441.362226][T11701] loop1: detected capacity change from 0 to 2048 [ 441.395938][T11701] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 441.431094][T11701] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 441.669255][ T5122] bond0: (slave syz_tun): Releasing backup interface [ 441.818414][ T5130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 441.830833][ T5130] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 441.841024][ T5130] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 441.867242][ T5130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 441.876147][ T5130] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 441.885256][ T5130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 441.990789][T10243] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.114819][T10243] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.256338][T10243] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.390770][T10243] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.410748][T11737] loop1: detected capacity change from 0 to 2048 [ 442.465003][T11737] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 442.507240][T11739] loop3: detected capacity change from 0 to 256 [ 442.525643][T11737] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 442.678233][ T29] audit: type=1326 audit(1717496319.146:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11738 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0db167cf69 code=0x0 [ 442.770891][T11713] chnl_net:caif_netlink_parms(): no params data found [ 442.817515][T10243] bridge_slave_1: left allmulticast mode [ 442.827012][T10243] bridge_slave_1: left promiscuous mode [ 442.845424][T10243] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.888194][T10243] bridge_slave_0: left allmulticast mode [ 442.895512][T10243] bridge_slave_0: left promiscuous mode [ 442.902751][T10243] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.748807][T10243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.768078][T10243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.781214][T10243] bond0 (unregistering): Released all slaves [ 443.960802][ T5130] Bluetooth: hci3: command tx timeout [ 444.177294][T11713] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.227829][T11713] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.256265][T11713] bridge_slave_0: entered allmulticast mode [ 444.293135][T11713] bridge_slave_0: entered promiscuous mode [ 444.317038][T11713] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.334473][T11713] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.352949][T11713] bridge_slave_1: entered allmulticast mode [ 444.374565][T11713] bridge_slave_1: entered promiscuous mode [ 444.657779][T11811] loop2: detected capacity change from 0 to 256 [ 444.698510][T11713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.779142][ T29] audit: type=1326 audit(1717496321.246:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11806 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efeeee7cf69 code=0x0 [ 444.810631][T10243] hsr_slave_0: left promiscuous mode [ 444.823674][T10243] hsr_slave_1: left promiscuous mode [ 444.856214][T10243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.883471][T10243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.895899][T10243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.911772][T10243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.972859][T10243] veth1_macvtap: left promiscuous mode [ 444.978476][T10243] veth0_macvtap: left promiscuous mode [ 444.990313][T10243] veth1_vlan: left promiscuous mode [ 444.998870][T10243] veth0_vlan: left promiscuous mode [ 446.001456][T10243] team0 (unregistering): Port device team_slave_1 removed [ 446.031772][ T5130] Bluetooth: hci3: command tx timeout [ 446.134917][T10243] team0 (unregistering): Port device team_slave_0 removed [ 446.526800][T11872] loop2: detected capacity change from 0 to 256 [ 446.616905][ T29] audit: type=1326 audit(1717496323.086:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11867 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efeeee7cf69 code=0x0 [ 446.950006][T11713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.074206][T11713] team0: Port device team_slave_0 added [ 447.123500][T11713] team0: Port device team_slave_1 added [ 447.292111][T11713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.327224][T11713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.426415][T11713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.488347][T11713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.501229][T11713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.556925][T11713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.739985][T11713] hsr_slave_0: entered promiscuous mode [ 447.769988][T11713] hsr_slave_1: entered promiscuous mode [ 447.780665][T11713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 447.788761][T11713] Cannot create hsr debugfs directory [ 448.112877][ T5130] Bluetooth: hci3: command tx timeout [ 448.251159][T11915] loop1: detected capacity change from 0 to 256 [ 448.403746][ T29] audit: type=1326 audit(1717496324.866:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11914 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3844e7cf69 code=0x0 [ 448.885873][T11934] loop2: detected capacity change from 0 to 128 [ 448.897217][T11713] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 448.925652][T11713] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 448.963894][T11713] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 449.009833][T11713] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 449.375570][T11713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.468348][T11713] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.507599][ T5291] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.515006][ T5291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.566150][ T5291] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.573414][ T5291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.182089][ T5130] Bluetooth: hci3: command tx timeout [ 450.744380][T11713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.413580][ T5178] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 451.618360][ T5178] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 451.662416][ T5178] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.671870][ T5178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.695972][ T5178] usb 2-1: Product: syz [ 451.707235][ T5178] usb 2-1: Manufacturer: syz [ 451.727958][ T5178] usb 2-1: SerialNumber: syz [ 451.756862][ T5178] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 451.909040][T11713] veth0_vlan: entered promiscuous mode [ 451.982306][T11713] veth1_vlan: entered promiscuous mode [ 452.029703][ T5291] usb 2-1: USB disconnect, device number 12 [ 452.139195][T11713] veth0_macvtap: entered promiscuous mode [ 452.159328][T11713] veth1_macvtap: entered promiscuous mode [ 452.215496][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.247281][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.259689][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.278952][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.289048][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.308026][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.328086][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.347972][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.365199][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.378423][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.395817][T11713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.419915][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.446396][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.463184][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.474191][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.484549][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.506226][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.545237][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.569662][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.598589][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.625091][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.664782][T11713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.712012][T11713] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.740344][T11713] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.754644][T12032] loop3: detected capacity change from 0 to 128 [ 452.757997][T11713] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.798073][T11713] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.036600][ T5179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.059129][ T5179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.239339][ T2882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.297079][ T2882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.683136][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 453.728204][T12058] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 454.647814][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 454.725726][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 455.666003][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 455.679310][T12134] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 456.387403][T12174] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 456.886891][T12205] input: syz0 as /devices/virtual/input/input9 [ 457.186087][T12217] loop4: detected capacity change from 0 to 16 [ 457.244966][T12217] erofs: (device loop4): mounted with root inode @ nid 36. [ 457.437537][ T5116] bond0: (slave syz_tun): Releasing backup interface [ 457.597021][T12221] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 457.895217][ T5129] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 457.910531][ T5129] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 457.920293][ T2901] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.934232][ T5129] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 457.951063][ T5129] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 457.965249][ T5129] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 457.973750][ T5129] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 458.259949][ T2901] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.479304][ T2901] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.778872][ T2901] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.805341][T12263] loop1: detected capacity change from 0 to 16 [ 458.823657][T12263] erofs: (device loop1): mounted with root inode @ nid 36. [ 458.833377][T12260] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 458.854210][T12261] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 459.221138][T12270] ucma_write: process 1124 (syz-executor.2) changed security contexts after opening file descriptor, this is not allowed. [ 459.299069][T12272] loop4: detected capacity change from 0 to 1024 [ 459.310739][T12272] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 459.423047][T12272] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz-executor.4: Invalid block bitmap block 0 in block_group 0 [ 459.449455][T12272] Quota error (device loop4): write_blk: dquota write failed [ 459.467066][T12272] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 459.493909][T12272] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz-executor.4: Failed to acquire dquot type 0 [ 459.513415][T12272] EXT4-fs error (device loop4): ext4_free_blocks:6590: comm syz-executor.4: Freeing blocks not in datazone - block = 0, count = 4096 [ 459.533518][T12272] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz-executor.4: Invalid inode bitmap blk 0 in block_group 0 [ 459.555647][T12272] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 459.555832][ T1039] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 459.581303][T12272] EXT4-fs (loop4): 1 orphan inode deleted [ 459.586161][ T1039] EXT4-fs error (device loop4): ext4_release_dquot:6883: comm kworker/u8:7: Failed to release dquot type 0 [ 459.610155][T12272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.747489][T12229] chnl_net:caif_netlink_parms(): no params data found [ 459.819359][ T2901] bridge_slave_1: left allmulticast mode [ 459.836834][ T2901] bridge_slave_1: left promiscuous mode [ 459.857480][T11713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.881978][ T2901] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.891709][T10243] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 459.919939][T10243] EXT4-fs error (device loop4): ext4_release_dquot:6883: comm kworker/u8:3: Failed to release dquot type 0 [ 459.953757][ T2901] bridge_slave_0: left allmulticast mode [ 459.972562][ T2901] bridge_slave_0: left promiscuous mode [ 459.997808][ T2901] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.195764][ T5129] Bluetooth: hci4: command tx timeout [ 461.320803][ T2901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.345092][ T2901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.371975][ T2901] bond0 (unregistering): Released all slaves [ 461.556803][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 462.165998][T12229] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.208181][T12313] loop4: detected capacity change from 0 to 16 [ 462.209932][T12229] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.232422][T12313] erofs: (device loop4): mounted with root inode @ nid 36. [ 462.246154][T12229] bridge_slave_0: entered allmulticast mode [ 462.262091][ T5129] Bluetooth: hci4: command tx timeout [ 462.273043][T12229] bridge_slave_0: entered promiscuous mode [ 462.698722][T12229] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.710545][T12229] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.731134][T12229] bridge_slave_1: entered allmulticast mode [ 462.758543][T12229] bridge_slave_1: entered promiscuous mode [ 462.956636][ T2901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.979472][ T2901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.122788][ T2901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.150282][ T2901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.254670][ T2901] veth1_macvtap: left promiscuous mode [ 463.274114][ T2901] veth0_macvtap: left promiscuous mode [ 463.298207][ T2901] veth1_vlan: left promiscuous mode [ 463.322395][ T2901] veth0_vlan: left promiscuous mode [ 464.343444][ T5129] Bluetooth: hci4: command tx timeout [ 465.048907][ T2901] team0 (unregistering): Port device team_slave_1 removed [ 465.173599][ T2901] team0 (unregistering): Port device team_slave_0 removed [ 465.613884][T12374] loop5: detected capacity change from 0 to 2048 [ 465.686427][T12374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.747055][T12374] ext4 filesystem being mounted at /root/syzkaller-testdir455840847/syzkaller.1Zr0en/317/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 466.422605][ T5129] Bluetooth: hci4: command tx timeout [ 466.939113][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 467.060459][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 467.071411][T12387] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 467.081174][T12387] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 467.090554][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 467.099812][T12387] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 467.109198][T12387] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 467.146945][T12229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.233078][T12229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.314185][ T6148] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.437079][T12229] team0: Port device team_slave_0 added [ 467.490705][T12229] team0: Port device team_slave_1 added [ 467.565347][T12407] loop3: detected capacity change from 0 to 128 [ 467.668808][T12229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.701216][T12229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.780556][T12229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.838428][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 467.863521][T12229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.903196][T12229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.052760][T12229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.247339][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 469.256878][T12439] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 469.407836][T12229] hsr_slave_0: entered promiscuous mode [ 469.482316][T12229] hsr_slave_1: entered promiscuous mode [ 469.505101][T12229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.550540][T12229] Cannot create hsr debugfs directory [ 471.640574][ T5119] bond0: (slave syz_tun): Releasing backup interface [ 471.652630][ T5130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 471.681253][ T5130] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 471.693758][ T5130] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 471.811856][ T5130] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 471.825149][ T5130] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 471.843802][ T5130] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 472.217976][ T5290] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.507547][ T5290] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.686732][ T5290] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.741081][T12504] __nla_validate_parse: 11 callbacks suppressed [ 472.741104][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 472.947718][ T5290] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.789515][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 473.798834][T12525] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 473.808196][T12525] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 473.817569][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 473.826910][T12525] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 473.837500][T12525] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 473.942126][ T5129] Bluetooth: hci2: command tx timeout [ 473.989626][T12229] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 474.003543][T12529] loop4: detected capacity change from 0 to 128 [ 474.082247][T12229] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 474.119091][T12229] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 474.244519][T12229] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 474.366177][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 474.472485][T12544] loop1: detected capacity change from 0 to 2048 [ 474.554146][T12544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.654655][ T5290] bridge_slave_1: left allmulticast mode [ 474.675665][ T5290] bridge_slave_1: left promiscuous mode [ 474.702098][ T5290] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.752919][ T5290] bridge_slave_0: left allmulticast mode [ 474.772838][ T5290] bridge_slave_0: left promiscuous mode [ 474.785228][ T5290] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.032266][ T5129] Bluetooth: hci2: command tx timeout [ 476.229706][ T5290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.263769][ T5290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.302323][ T5290] bond0 (unregistering): Released all slaves [ 476.380433][T12481] chnl_net:caif_netlink_parms(): no params data found [ 476.870070][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 477.192775][T12590] loop5: detected capacity change from 0 to 16 [ 477.218847][T12590] erofs: (device loop5): mounted with root inode @ nid 36. [ 477.229027][T12481] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.250392][T12481] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.271514][T12481] bridge_slave_0: entered allmulticast mode [ 477.299813][T12481] bridge_slave_0: entered promiscuous mode [ 477.323728][T12481] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.340794][T12481] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.356475][T12481] bridge_slave_1: entered allmulticast mode [ 477.377197][T12481] bridge_slave_1: entered promiscuous mode [ 477.676231][ T5290] hsr_slave_0: left promiscuous mode [ 477.691014][ T5290] hsr_slave_1: left promiscuous mode [ 477.700551][ T5290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.709889][ T5290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.718659][ T5290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.727723][ T5290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.806821][ T5290] veth1_macvtap: left promiscuous mode [ 477.822695][ T5290] veth0_macvtap: left promiscuous mode [ 477.836730][ T5290] veth1_vlan: left promiscuous mode [ 477.846645][ T5290] veth0_vlan: left promiscuous mode [ 477.858609][ T5117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.102168][ T5129] Bluetooth: hci2: command tx timeout [ 478.598450][ T5290] team0 (unregistering): Port device macvlan2 removed [ 479.407230][ T5130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 479.430568][ T5130] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 479.442757][ T5130] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 479.458655][ T5130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 479.467825][ T5130] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 479.476971][ T5130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 479.567273][T12626] loop1: detected capacity change from 0 to 2048 [ 479.677876][T12626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.967358][ T5290] team0 (unregistering): Port device team_slave_1 removed [ 480.171260][ T5290] team0 (unregistering): Port device team_slave_0 removed [ 480.183086][ T5129] Bluetooth: hci2: command tx timeout [ 481.530554][T12481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.542147][ T5129] Bluetooth: hci3: command tx timeout [ 481.549426][T12481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.656077][ T5117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.833980][T12635] loop1: detected capacity change from 0 to 16 [ 481.866686][T12635] erofs: (device loop1): mounted with root inode @ nid 36. [ 481.904375][T12481] team0: Port device team_slave_0 added [ 481.926724][T12229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.965299][T12481] team0: Port device team_slave_1 added [ 482.350827][T12481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.367602][T12481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.402528][T12481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.457408][T12481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.464735][T12481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.491321][T12481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.874298][T12481] hsr_slave_0: entered promiscuous mode [ 483.017184][T12481] hsr_slave_1: entered promiscuous mode [ 483.063432][T12481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.085818][T12481] Cannot create hsr debugfs directory [ 483.126168][T12229] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.632266][ T5129] Bluetooth: hci3: command tx timeout [ 483.802789][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 483.812764][T12646] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 483.822211][T12646] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 483.831525][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 483.840824][T12646] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 483.850227][T12646] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 483.859660][T12646] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 484.071218][ T5290] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.258097][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.265366][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.272585][T12655] loop5: detected capacity change from 0 to 2048 [ 484.323616][T12655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.414800][ T5290] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.602860][ T5290] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.827570][ T5290] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.981308][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.988582][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.213107][T12621] chnl_net:caif_netlink_parms(): no params data found [ 485.389693][T12668] loop1: detected capacity change from 0 to 16 [ 485.416587][T12668] erofs: (device loop1): mounted with root inode @ nid 36. [ 485.729796][ T5129] Bluetooth: hci3: command tx timeout [ 486.100298][T12621] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.126462][T12621] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.153777][T12621] bridge_slave_0: entered allmulticast mode [ 486.178043][T12621] bridge_slave_0: entered promiscuous mode [ 486.282946][T12621] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.290202][T12621] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.305627][T12621] bridge_slave_1: entered allmulticast mode [ 486.314251][T12621] bridge_slave_1: entered promiscuous mode [ 486.322953][ T5290] bridge_slave_1: left allmulticast mode [ 486.328723][ T5290] bridge_slave_1: left promiscuous mode [ 486.371195][ T5290] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.403925][ T5290] bridge_slave_0: left allmulticast mode [ 486.409620][ T5290] bridge_slave_0: left promiscuous mode [ 486.433891][ T5290] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.580243][ T6148] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.800120][ T5129] Bluetooth: hci3: command tx timeout [ 488.067549][T12699] loop5: detected capacity change from 0 to 2048 [ 488.149803][T12699] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.270159][ T5290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.297682][ T5290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.326037][ T5290] bond0 (unregistering): Released all slaves [ 488.422891][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 488.433826][T12692] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 488.443273][T12692] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 488.452656][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 488.634842][T12621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.675685][T12621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.991305][T12621] team0: Port device team_slave_0 added [ 489.038210][T12621] team0: Port device team_slave_1 added [ 489.339635][T12621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.358310][T12621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.419939][T12621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.449313][T12621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.474542][T12621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.561020][T12621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.606587][ T5290] hsr_slave_0: left promiscuous mode [ 489.613343][ T5290] hsr_slave_1: left promiscuous mode [ 489.619933][ T5290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.630005][ T5290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.652661][ T5290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.668319][ T5290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.744199][ T5290] veth1_macvtap: left promiscuous mode [ 489.761734][ T5290] veth0_macvtap: left promiscuous mode [ 489.767635][ T5290] veth1_vlan: left promiscuous mode [ 489.784635][ T5290] veth0_vlan: left promiscuous mode [ 490.341887][T12725] serio: Serial port pts0 [ 490.428986][ T6148] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.550001][T12739] loop5: detected capacity change from 0 to 1024 [ 491.559335][T12739] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 491.600319][T12739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.697404][ T6148] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.774312][ T5290] team0 (unregistering): Port device team_slave_1 removed [ 491.839053][ T5290] team0 (unregistering): Port device team_slave_0 removed [ 492.706142][T12736] __nla_validate_parse: 2 callbacks suppressed [ 492.706168][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 492.721956][T12736] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 492.731313][T12736] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 492.740763][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 492.750343][T12736] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 492.759732][T12736] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 493.054484][T12621] hsr_slave_0: entered promiscuous mode [ 493.076759][T12621] hsr_slave_1: entered promiscuous mode [ 493.089614][T12621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.098801][T12621] Cannot create hsr debugfs directory [ 493.357230][T12229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.383774][T12481] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 493.441978][T12481] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 493.476729][T12481] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 493.793631][T12481] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 494.499084][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 494.509981][T12788] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 494.520054][T12788] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 494.529426][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 494.613646][T12789] dccp_close: ABORT with 168 bytes unread [ 494.963611][T12229] veth0_vlan: entered promiscuous mode [ 495.033065][T12229] veth1_vlan: entered promiscuous mode [ 495.291385][T12481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.348370][T12229] veth0_macvtap: entered promiscuous mode [ 495.408794][T12229] veth1_macvtap: entered promiscuous mode [ 495.456569][T12481] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.651553][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.669768][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.679998][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.701210][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.734125][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.745134][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.757327][T12229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.767842][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.775079][ T5182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.796943][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.804177][ T5182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.479491][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.506419][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.534152][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.549073][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.560005][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.575270][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.588385][T12229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.599910][T12821] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 496.784685][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 496.797151][T12229] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.827921][T12229] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.848902][T12229] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.858330][T12229] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.897136][T12621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 496.929866][T12621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 496.988365][T12621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 497.043742][T12621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 497.503824][ T782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.527328][ T782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.591818][T12861] serio: Serial port pts0 [ 497.733576][T12863] __nla_validate_parse: 9 callbacks suppressed [ 497.733602][T12863] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 497.786210][T12865] loop1: detected capacity change from 0 to 2048 [ 498.335150][ T29] audit: type=1800 audit(1717496374.806:365): pid=12859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1955 res=0 errno=0 [ 498.387112][T12865] loop1: p1 < > p4 [ 498.428221][T12865] loop1: p4 size 8388608 extends beyond EOD, truncated [ 498.446902][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 498.457338][T12870] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 498.466837][T12870] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 498.476218][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 498.485473][T12870] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 498.494846][T12870] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 498.504825][T12870] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 498.614794][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.648879][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.744414][T12481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.783589][T12621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.898494][T12621] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.925439][ T5291] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.932631][ T5291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.964888][ T5291] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.972073][ T5291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.009313][T12481] veth0_vlan: entered promiscuous mode [ 499.051149][T12481] veth1_vlan: entered promiscuous mode [ 499.145530][T12481] veth0_macvtap: entered promiscuous mode [ 499.158645][T12481] veth1_macvtap: entered promiscuous mode [ 499.202581][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.218636][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.244030][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.266152][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.307065][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.347667][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.382148][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.401393][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.415825][T12481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.447507][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.477872][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.498406][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.536452][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.556668][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.596050][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.616718][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.644011][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.669183][T12481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.687122][T12481] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.698298][T12481] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.733567][T12481] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.965977][T12481] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.894982][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 500.904838][T12903] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 500.914237][T12903] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 500.923993][T12903] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 501.069293][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.078840][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.197965][T12905] loop1: detected capacity change from 0 to 2048 [ 501.263289][T12905] loop1: p1 < > p4 [ 501.276393][T12905] loop1: p4 size 8388608 extends beyond EOD, truncated [ 501.288320][T12621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.434327][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.501237][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.660468][ T5290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.700610][ T5290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.833064][ T29] audit: type=1326 audit(1717496378.296:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a13a7cf69 code=0x0 [ 502.043879][T12940] loop2: detected capacity change from 0 to 1024 [ 502.257303][ T11] hfsplus: b-tree write err: -5, ino 4 [ 502.496340][T12621] veth0_vlan: entered promiscuous mode [ 502.556626][T12621] veth1_vlan: entered promiscuous mode [ 502.707918][T12621] veth0_macvtap: entered promiscuous mode [ 502.746291][T12621] veth1_macvtap: entered promiscuous mode [ 502.846500][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.897211][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.931006][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.941936][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.961400][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.018599][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.061000][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.096638][T12984] loop0: detected capacity change from 0 to 1024 [ 503.103208][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.118264][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.130639][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.144489][T12621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.158532][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.195809][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.208059][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.220279][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.231965][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.248044][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.259428][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.270163][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.280321][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.291263][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.311402][T12621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.377537][T12621] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.444686][T12621] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.457194][T12621] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.473031][T12621] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.518062][ T29] audit: type=1326 audit(1717496379.986:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12995 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3dd27cf69 code=0x0 [ 503.571097][ T58] hfsplus: b-tree write err: -5, ino 4 [ 503.870990][ T2901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.906696][ T2901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.001566][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.010560][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.123988][T13025] __nla_validate_parse: 4 callbacks suppressed [ 504.124010][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 504.255861][T13028] loop2: detected capacity change from 0 to 1024 [ 504.399480][ T1039] hfsplus: b-tree write err: -5, ino 4 [ 504.665495][T13042] loop2: detected capacity change from 0 to 128 [ 504.701287][T13042] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 504.726886][T13042] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 504.745755][T13042] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.2: No space for directory leaf checksum. Please run e2fsck -D. [ 504.768064][T13042] EXT4-fs error (device loop2): __ext4_find_entry:1695: inode #2: comm syz-executor.2: checksumming directory block 0 [ 504.826705][T12481] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 504.955069][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 505.182011][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 505.275371][ T29] audit: type=1326 audit(1717496381.746:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13062 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a13a7cf69 code=0x0 [ 505.297775][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.349924][T13068] loop2: detected capacity change from 0 to 1024 [ 505.371097][T13070] loop4: detected capacity change from 0 to 1024 [ 505.391397][T13070] EXT4-fs: Ignoring removed mblk_io_submit option [ 505.401190][T13070] EXT4-fs: Ignoring removed nomblk_io_submit option [ 505.412606][T13070] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 505.436602][T13070] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 505.445338][T13070] System zones: 0-1, 3-36 [ 505.467189][T13070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.533580][ T5290] hfsplus: b-tree write err: -5, ino 4 [ 505.562034][T13070] EXT4-fs error (device loop4): ext4_find_dest_de:2111: inode #2: block 48: comm syz-executor.4: bad entry in directory: rec_len is too small for name_len - offset=44, inode=12, rec_len=16, size=1024 fake=0 [ 505.583206][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.774003][T12621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.396231][T13112] loop5: detected capacity change from 0 to 1024 [ 506.519021][ T2901] hfsplus: b-tree write err: -5, ino 4 [ 506.860349][T13134] Bluetooth: MGMT ver 1.22 [ 507.913560][ T29] audit: type=1326 audit(1717496384.386:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13140 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbab227cf69 code=0x0 [ 508.278898][T13156] loop1: detected capacity change from 0 to 1024 [ 508.326742][T13156] EXT4-fs: Ignoring removed mblk_io_submit option [ 508.377862][T13156] EXT4-fs: Ignoring removed nomblk_io_submit option [ 508.389296][T13156] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 508.449808][T13156] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 508.460901][T13156] System zones: 0-1, 3-36 [ 508.490659][T13156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.545781][T13165] loop0: detected capacity change from 0 to 1024 [ 508.627510][T13156] EXT4-fs error (device loop1): ext4_find_dest_de:2111: inode #2: block 48: comm syz-executor.1: bad entry in directory: rec_len is too small for name_len - offset=44, inode=12, rec_len=16, size=1024 fake=0 [ 508.703049][T13130] loop5: detected capacity change from 0 to 32768 [ 508.720705][T13130] XFS: attr2 mount option is deprecated. [ 508.729526][ T35] hfsplus: b-tree write err: -5, ino 4 [ 508.775845][T13130] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 508.803619][ T5117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.910097][ T5129] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 508.982440][ T5129] Bluetooth: hci0: command 0x0406 tx timeout [ 509.115712][T13130] XFS (loop5): Ending clean mount [ 509.150831][T13130] XFS (loop5): Quotacheck needed: Please wait. [ 509.244225][T13130] XFS (loop5): Quotacheck: Done. [ 509.370378][ T29] audit: type=1326 audit(1717496385.836:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13196 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbab227cf69 code=0x0 [ 509.372421][ T6148] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 510.013616][T13211] loop0: detected capacity change from 0 to 1024 [ 510.203454][ T11] hfsplus: b-tree write err: -5, ino 4 [ 510.735977][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 510.745615][T13237] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 510.755178][T13237] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 510.764589][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 510.773929][T13237] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 510.783360][T13237] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 510.814474][T13237] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 512.149384][ T29] audit: type=1326 audit(1717496388.616:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13258 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e4887cf69 code=0x0 [ 512.569449][T13273] xt_bpf: check failed: parse error [ 512.616745][T13274] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 512.626317][T13274] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 512.635814][T13274] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 512.648474][T13274] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 512.658332][T13274] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 514.626923][T13311] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 515.633939][ T29] audit: type=1326 audit(1717496392.106:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13325 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0db167cf69 code=0x0 [ 516.779555][T13377] team_slave_0: entered promiscuous mode [ 516.787329][T13377] team_slave_1: entered promiscuous mode [ 516.848787][T13377] macsec1: entered promiscuous mode [ 516.892823][T13377] team0: entered promiscuous mode [ 516.909573][T13377] macsec1: entered allmulticast mode [ 516.930876][T13377] team0: entered allmulticast mode [ 516.954663][T13377] team_slave_0: entered allmulticast mode [ 516.974137][T13377] team_slave_1: entered allmulticast mode [ 517.019595][T13377] team0: left allmulticast mode [ 517.027449][T13377] team_slave_0: left allmulticast mode [ 517.049903][T13377] team_slave_1: left allmulticast mode [ 517.067453][T13377] team0: left promiscuous mode [ 517.085411][T13377] team_slave_0: left promiscuous mode [ 517.091178][T13377] team_slave_1: left promiscuous mode [ 517.596990][ T29] audit: type=1326 audit(1717496394.066:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13406 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3844e7cf69 code=0x0 [ 517.987878][T13422] loop2: detected capacity change from 0 to 128 [ 518.376266][T13434] team_slave_0: entered promiscuous mode [ 518.382588][T13434] team_slave_1: entered promiscuous mode [ 518.482413][T13434] macsec1: entered promiscuous mode [ 518.497522][T13434] team0: entered promiscuous mode [ 518.524148][T13434] macvlan2: entered promiscuous mode [ 518.547006][T13434] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 518.568906][T13434] macsec1: entered allmulticast mode [ 518.589951][T13434] team0: entered allmulticast mode [ 518.604905][T13434] team_slave_0: entered allmulticast mode [ 518.628363][T13434] team_slave_1: entered allmulticast mode [ 518.647182][T13434] macvlan2: entered allmulticast mode [ 518.664523][T13434] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 518.715879][T13434] team0: left allmulticast mode [ 518.737520][T13434] team_slave_0: left allmulticast mode [ 518.755557][T13434] team_slave_1: left allmulticast mode [ 518.772194][T13434] macvlan2: left allmulticast mode [ 518.801878][T13434] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 518.838118][T13434] team0: left promiscuous mode [ 518.855444][T13434] macvlan2: left promiscuous mode [ 518.873355][T13434] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 518.906215][T13434] team_slave_0: left promiscuous mode [ 518.911713][T13434] team_slave_1: left promiscuous mode [ 521.397693][T13478] team_slave_0: entered promiscuous mode [ 521.403528][T13478] team_slave_1: entered promiscuous mode [ 521.422220][T13478] macsec1: entered promiscuous mode [ 521.431984][T13478] team0: entered promiscuous mode [ 521.437649][T13478] macvlan2: entered promiscuous mode [ 521.477419][T13478] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 521.512405][T13478] macsec1: entered allmulticast mode [ 521.549771][T13478] team0: entered allmulticast mode [ 521.572342][T13478] team_slave_0: entered allmulticast mode [ 521.581567][T13489] fuse: Bad value for 'fd' [ 521.593540][T13478] team_slave_1: entered allmulticast mode [ 521.610488][T13478] macvlan2: entered allmulticast mode [ 521.619943][T13478] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 521.663740][T13478] team0: left allmulticast mode [ 521.669053][T13478] team_slave_0: left allmulticast mode [ 521.698757][T13478] team_slave_1: left allmulticast mode [ 521.715002][T13478] macvlan2: left allmulticast mode [ 521.734620][T13478] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 521.761854][T13478] team0: left promiscuous mode [ 521.794990][T13478] macvlan2: left promiscuous mode [ 521.800343][T13478] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 521.829784][T13478] team_slave_0: left promiscuous mode [ 521.835957][T13478] team_slave_1: left promiscuous mode [ 521.858598][T13492] loop0: detected capacity change from 0 to 512 [ 521.921391][T13492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.936092][T13492] ext4 filesystem being mounted at /root/syzkaller-testdir2347892903/syzkaller.d4BCdx/40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 523.487240][T13525] fuse: Bad value for 'fd' [ 523.970508][T13540] team_slave_0: entered promiscuous mode [ 523.976408][T13540] team_slave_1: entered promiscuous mode [ 524.059083][T13540] macsec1: entered promiscuous mode [ 524.122215][T13544] loop4: detected capacity change from 0 to 1024 [ 524.159284][T13544] EXT4-fs: Ignoring removed mblk_io_submit option [ 524.169949][T13544] EXT4-fs: Ignoring removed nomblk_io_submit option [ 524.215142][T13540] team0: entered promiscuous mode [ 524.227212][T13544] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 524.279241][T13544] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 524.297795][T13544] System zones: 0-1, 3-36 [ 524.324754][T13540] macvlan2: entered promiscuous mode [ 524.341871][T13540] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 524.385825][T13540] macsec1: entered allmulticast mode [ 524.399482][T13544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.427684][T13540] team0: entered allmulticast mode [ 524.438279][T13540] team_slave_0: entered allmulticast mode [ 524.452058][T13540] team_slave_1: entered allmulticast mode [ 524.458717][T13540] macvlan2: entered allmulticast mode [ 524.468190][T13540] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 524.505667][T13540] team0: left allmulticast mode [ 524.521929][T13540] team_slave_0: left allmulticast mode [ 524.541733][T13540] team_slave_1: left allmulticast mode [ 524.547360][T13540] macvlan2: left allmulticast mode [ 524.561669][T13540] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 524.575001][T13540] team0: left promiscuous mode [ 524.579105][T12621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.589854][T13540] macvlan2: left promiscuous mode [ 524.600879][T13540] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 524.622680][T13540] team_slave_0: left promiscuous mode [ 524.628246][T13540] team_slave_1: left promiscuous mode [ 525.037280][T13570] fuse: Bad value for 'fd' [ 525.051129][T12229] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.316468][T13584] loop2: detected capacity change from 0 to 1024 [ 525.348353][T13584] EXT4-fs: Ignoring removed mblk_io_submit option [ 525.374829][T13584] EXT4-fs: Ignoring removed nomblk_io_submit option [ 525.409068][T13584] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 525.506758][T13584] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 525.532267][T13584] System zones: 0-1, 3-36 [ 525.596569][T13594] team_slave_0: entered promiscuous mode [ 525.602323][T13594] team_slave_1: entered promiscuous mode [ 525.638764][T13594] macsec1: entered promiscuous mode [ 525.640707][T13584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.700481][T13594] team0: entered promiscuous mode [ 525.724755][T13594] macsec1: entered allmulticast mode [ 525.751844][T13594] team0: entered allmulticast mode [ 525.765556][T13594] team_slave_0: entered allmulticast mode [ 525.778412][T13594] team_slave_1: entered allmulticast mode [ 525.818204][T13594] team0: left allmulticast mode [ 525.828070][T13594] team_slave_0: left allmulticast mode [ 525.830514][T13606] loop5: detected capacity change from 0 to 512 [ 525.840054][T13594] team_slave_1: left allmulticast mode [ 525.854590][T12481] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.875598][T13594] team0: left promiscuous mode [ 525.892869][T13594] team_slave_0: left promiscuous mode [ 525.898454][T13594] team_slave_1: left promiscuous mode [ 525.908657][T13606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.921473][T13606] ext4 filesystem being mounted at /root/syzkaller-testdir455840847/syzkaller.1Zr0en/421/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 526.436802][T13622] fuse: Bad value for 'fd' [ 526.784040][T13644] loop3: detected capacity change from 0 to 1024 [ 526.832674][T13644] EXT4-fs: Ignoring removed mblk_io_submit option [ 526.839325][T13644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 526.926119][T13644] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 526.993363][T13644] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 527.003859][T13644] System zones: 0-1, 3-36 [ 527.011947][T13644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.203936][ T5925] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.339587][T13659] team_slave_0: entered promiscuous mode [ 527.345452][T13659] team_slave_1: entered promiscuous mode [ 527.396598][T13659] macsec1: entered promiscuous mode [ 527.432185][T13659] team0: entered promiscuous mode [ 527.442510][T13659] macsec1: entered allmulticast mode [ 527.450614][T13659] team0: entered allmulticast mode [ 527.455956][T13659] team_slave_0: entered allmulticast mode [ 527.519261][T13659] team_slave_1: entered allmulticast mode [ 527.542781][T13659] team0: left allmulticast mode [ 527.552426][T13659] team_slave_0: left allmulticast mode [ 527.567299][T13659] team_slave_1: left allmulticast mode [ 527.574597][T13671] fuse: Bad value for 'fd' [ 527.584862][T13659] team0: left promiscuous mode [ 527.610487][T13659] team_slave_0: left promiscuous mode [ 527.616076][T13659] team_slave_1: left promiscuous mode [ 528.013582][T13688] loop2: detected capacity change from 0 to 1024 [ 528.048782][T13688] EXT4-fs: Ignoring removed mblk_io_submit option [ 528.068777][T13688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 528.118777][T13688] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 528.168301][T13688] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 528.221129][T13688] System zones: 0-1, 3-36 [ 528.230700][T13688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.527809][T12481] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.786574][T13705] fuse: Unknown parameter '0x0000000000000004' [ 529.047987][T13716] team_slave_0: entered promiscuous mode [ 529.053764][T13716] team_slave_1: entered promiscuous mode [ 529.075491][T13716] macsec1: entered promiscuous mode [ 529.096778][T13716] team0: entered promiscuous mode [ 529.116619][T13716] macvlan2: entered promiscuous mode [ 529.141737][T13716] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 529.182549][T13716] macsec1: entered allmulticast mode [ 529.211864][T13716] team0: entered allmulticast mode [ 529.217138][T13716] team_slave_0: entered allmulticast mode [ 529.291708][T13716] team_slave_1: entered allmulticast mode [ 529.308808][T13729] loop2: detected capacity change from 0 to 1024 [ 529.322032][T13716] macvlan2: entered allmulticast mode [ 529.327564][T13716] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 529.353217][T13729] EXT4-fs: Ignoring removed mblk_io_submit option [ 529.363724][T13729] EXT4-fs: Ignoring removed nomblk_io_submit option [ 529.378423][T13729] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 529.387039][ T6148] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.402709][T13716] team0: left allmulticast mode [ 529.407822][T13716] team_slave_0: left allmulticast mode [ 529.417328][T13716] team_slave_1: left allmulticast mode [ 529.430580][T13716] macvlan2: left allmulticast mode [ 529.430624][T13729] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 529.448441][T13716] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 529.464843][T13716] team0: left promiscuous mode [ 529.472863][T13716] macvlan2: left promiscuous mode [ 529.480733][T13729] System zones: 0-1, 3-36 [ 529.487882][T13716] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 529.509435][T13729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.527105][T13716] team_slave_0: left promiscuous mode [ 529.532772][T13716] team_slave_1: left promiscuous mode [ 529.752315][T12481] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.834852][ T29] audit: type=1326 audit(1717496406.306:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3dd27cf69 code=0x0 [ 530.015937][T13749] fuse: Unknown parameter '0x0000000000000004' [ 531.357425][T13772] loop4: detected capacity change from 0 to 512 [ 531.389241][T13772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.402647][T13772] ext4 filesystem being mounted at /root/syzkaller-testdir2526222230/syzkaller.WTeRFa/58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 531.612659][T13781] loop3: detected capacity change from 0 to 1024 [ 531.668601][T13781] EXT4-fs: Ignoring removed mblk_io_submit option [ 531.700204][T13781] EXT4-fs: Ignoring removed nomblk_io_submit option [ 531.713865][T13783] team_slave_0: entered promiscuous mode [ 531.719885][T13783] team_slave_1: entered promiscuous mode [ 531.726297][T13783] macsec1: entered promiscuous mode [ 531.741809][T13783] team0: entered promiscuous mode [ 531.753494][T13783] macvlan2: entered promiscuous mode [ 531.766007][T13783] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 531.779476][T13781] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 531.801878][T13783] macsec1: entered allmulticast mode [ 531.824475][T13783] team0: entered allmulticast mode [ 531.857706][T13781] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 531.867341][T13783] team_slave_0: entered allmulticast mode [ 531.886991][T13783] team_slave_1: entered allmulticast mode [ 531.902023][T13781] System zones: 0-1, 3-36 [ 531.907565][T13783] macvlan2: entered allmulticast mode [ 531.913308][T13783] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 531.936538][T13781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.967462][T13796] fuse: Unknown parameter '0x0000000000000004' [ 531.987482][T13783] team0: left allmulticast mode [ 532.051101][T13783] team_slave_0: left allmulticast mode [ 532.057982][T13783] team_slave_1: left allmulticast mode [ 532.068597][T13783] macvlan2: left allmulticast mode [ 532.084905][T13783] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 533.058064][T13783] team0: left promiscuous mode [ 533.066169][ T5925] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.154270][T13783] macvlan2: left promiscuous mode [ 533.159359][T13783] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 533.183589][T13783] team_slave_0: left promiscuous mode [ 533.189336][T13783] team_slave_1: left promiscuous mode [ 533.383039][ T29] audit: type=1326 audit(1717496409.846:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13805 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e4887cf69 code=0x0 [ 533.886155][T13822] loop5: detected capacity change from 0 to 2048 [ 533.928338][T13822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.428694][T13835] fuse: Unknown parameter '0x0000000000000004' [ 534.458194][ T6148] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.456850][T13847] loop5: detected capacity change from 0 to 1024 [ 535.563165][T13847] EXT4-fs: Ignoring removed mblk_io_submit option [ 535.601848][T13847] EXT4-fs: Ignoring removed nomblk_io_submit option [ 535.620887][T13847] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 535.621826][T13850] team_slave_0: entered promiscuous mode [ 535.635477][T13850] team_slave_1: entered promiscuous mode [ 535.662157][T13850] macsec1: entered promiscuous mode [ 535.670242][T13847] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 535.709192][T13847] System zones: 0-1, 3-36 [ 535.767874][T13847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.791761][T13850] team0: entered promiscuous mode [ 535.802702][T13850] macsec1: entered allmulticast mode [ 535.840326][T13850] team0: entered allmulticast mode [ 535.857286][T13850] team_slave_0: entered allmulticast mode [ 535.890776][T13850] team_slave_1: entered allmulticast mode [ 535.928030][ T6148] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.958703][T13850] team0: left allmulticast mode [ 536.002480][T13850] team_slave_0: left allmulticast mode [ 536.024781][T13850] team_slave_1: left allmulticast mode [ 536.043938][T13850] team0: left promiscuous mode [ 536.055531][T12621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.059851][T13850] team_slave_0: left promiscuous mode [ 536.070139][T13850] team_slave_1: left promiscuous mode [ 536.254012][ T29] audit: type=1326 audit(1717496412.726:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13867 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbab227cf69 code=0x0 [ 536.367072][T13872] loop2: detected capacity change from 0 to 2048 [ 536.388266][T13872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.847147][T12481] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.868225][T13883] fuse: Unknown parameter '0x0000000000000004' [ 537.194907][T13891] loop5: detected capacity change from 0 to 1024 [ 537.224817][T13891] EXT4-fs: Ignoring removed mblk_io_submit option [ 537.258902][T13891] EXT4-fs: Ignoring removed nomblk_io_submit option [ 537.288372][T13891] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 537.310760][T13899] loop4: detected capacity change from 0 to 512 [ 537.341783][T13899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.348675][T13891] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 537.355119][T13899] ext4 filesystem being mounted at /root/syzkaller-testdir2526222230/syzkaller.WTeRFa/60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 537.562059][T13891] System zones: 0-1, 3-36 [ 537.622750][T13891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.678519][T13911] team_slave_0: entered promiscuous mode [ 537.684368][T13911] team_slave_1: entered promiscuous mode [ 537.692694][T13911] macsec1: entered promiscuous mode [ 537.698163][T13911] team0: entered promiscuous mode [ 537.707735][T13911] macsec1: entered allmulticast mode [ 537.713456][T13911] team0: entered allmulticast mode [ 537.718930][T13911] team_slave_0: entered allmulticast mode [ 537.729584][T13911] team_slave_1: entered allmulticast mode [ 537.755285][T13911] team0: left allmulticast mode [ 537.766497][T13911] team_slave_0: left allmulticast mode [ 537.772612][T13911] team_slave_1: left allmulticast mode [ 537.778439][T13911] team0: left promiscuous mode [ 537.785403][T13911] team_slave_0: left promiscuous mode [ 537.791051][T13911] team_slave_1: left promiscuous mode [ 537.845391][ T6148] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.356931][T13927] fuse: Unknown parameter '0x0000000000000004' [ 538.412440][T13931] __nla_validate_parse: 8 callbacks suppressed [ 538.412465][T13931] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 538.617102][T13934] loop3: detected capacity change from 0 to 512 [ 538.699314][T13934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.722186][T13934] ext4 filesystem being mounted at /root/syzkaller-testdir3304842352/syzkaller.AhvOiZ/515/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.834105][ T29] audit: type=1326 audit(1717496415.296:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13943 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e4887cf69 code=0x0 [ 538.904654][T13934] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 256: padding at end of block bitmap is not set [ 538.924144][T13934] Quota error (device loop3): write_blk: dquota write failed [ 538.932278][T13934] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 538.945578][T13934] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 538.962189][T13934] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz-executor.3: Failed to acquire dquot type 1 [ 539.093692][ T5925] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.313606][T13954] loop3: detected capacity change from 0 to 1024 [ 539.329888][T13954] EXT4-fs: Ignoring removed mblk_io_submit option [ 539.337332][T13954] EXT4-fs: Ignoring removed nomblk_io_submit option [ 539.347498][T13954] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 539.381438][T13954] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 539.399499][T13954] System zones: 0-1, 3-36 [ 539.418563][T13954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.425359][T13959] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 539.508683][ T5925] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.719107][T13963] team_slave_0: entered promiscuous mode [ 539.724915][T13963] team_slave_1: entered promiscuous mode [ 539.750167][T13963] macsec1: entered promiscuous mode [ 539.778556][T13963] team0: entered promiscuous mode [ 539.807901][T13963] macvlan2: entered promiscuous mode [ 539.822651][T13963] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 539.834761][T13963] macsec1: entered allmulticast mode [ 539.854066][T13963] team0: entered allmulticast mode [ 539.866331][T13963] team_slave_0: entered allmulticast mode [ 539.886742][T13963] team_slave_1: entered allmulticast mode [ 539.911873][T13963] macvlan2: entered allmulticast mode [ 539.925265][T13963] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 539.975577][T13963] team0: left allmulticast mode [ 539.984480][T13963] team_slave_0: left allmulticast mode [ 540.000586][T13963] team_slave_1: left allmulticast mode [ 540.018696][T13963] macvlan2: left allmulticast mode [ 540.038421][T13963] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 540.064150][T13963] team0: left promiscuous mode [ 540.075313][T13963] macvlan2: left promiscuous mode [ 540.097145][T13963] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 540.124763][T13963] team_slave_0: left promiscuous mode [ 540.130245][T13963] team_slave_1: left promiscuous mode [ 540.456595][T12621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.528785][T13980] fuse: Unknown parameter 'fd0x0000000000000004' [ 540.692603][T13990] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 540.981334][T14000] loop4: detected capacity change from 0 to 1024 [ 541.019363][T14000] EXT4-fs: Ignoring removed mblk_io_submit option [ 541.044056][T14000] EXT4-fs: Ignoring removed nomblk_io_submit option [ 541.050810][ T29] audit: type=1800 audit(1717496417.516:378): pid=13979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.3" name="/" dev="fuse" ino=1 res=0 errno=0 [ 541.088703][T14000] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 541.144683][T14000] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 541.176055][T14000] System zones: 0-1, 3-36 [ 541.222373][T14000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.252399][ T29] audit: type=1326 audit(1717496417.716:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14006 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e4887cf69 code=0x0 [ 541.367082][T12621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.441098][T14020] loop0: detected capacity change from 0 to 512 [ 541.464720][T14022] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 541.505407][T14020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.519206][T14020] ext4 filesystem being mounted at /root/syzkaller-testdir2347892903/syzkaller.d4BCdx/78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 541.784918][T14015] team_slave_0: entered promiscuous mode [ 541.790702][T14015] team_slave_1: entered promiscuous mode [ 541.875561][T14015] macsec1: entered promiscuous mode [ 541.887511][T14031] fuse: Unknown parameter 'fd0x0000000000000004' [ 541.900928][T14015] team0: entered promiscuous mode [ 541.926863][T14015] macvlan2: entered promiscuous mode [ 541.956791][T14015] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 541.988737][T14015] macsec1: entered allmulticast mode [ 542.020326][T14015] team0: entered allmulticast mode [ 542.051074][T14015] team_slave_0: entered allmulticast mode [ 542.082941][T14015] team_slave_1: entered allmulticast mode [ 542.106119][T14033] usb usb1: usbfs: process 14033 (syz-executor.1) did not claim interface 0 before use [ 542.138977][T14015] macvlan2: entered allmulticast mode [ 542.167346][T14015] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 542.272801][T14015] team0: left allmulticast mode [ 542.277780][T14015] team_slave_0: left allmulticast mode [ 542.314302][T14015] team_slave_1: left allmulticast mode [ 542.336654][T14015] macvlan2: left allmulticast mode [ 542.355970][T14015] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 542.369806][T14015] team0: left promiscuous mode [ 542.377429][T14015] macvlan2: left promiscuous mode [ 542.382789][T14015] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 542.390711][T14015] team_slave_0: left promiscuous mode [ 542.396298][T14015] team_slave_1: left promiscuous mode [ 542.873229][T14055] loop2: detected capacity change from 0 to 1024 [ 542.894474][T14055] EXT4-fs: Ignoring removed mblk_io_submit option [ 542.907345][T14060] fuse: Unknown parameter 'fd0x0000000000000004' [ 542.918470][T14055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 542.938923][T14055] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 543.036150][T14055] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 543.065578][T14055] System zones: 0-1, 3-36 [ 543.089993][T14055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.247713][T12481] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.574512][T14087] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 543.811460][T14093] usb usb1: usbfs: process 14093 (syz-executor.1) did not claim interface 0 before use [ 544.353250][T12849] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 544.571953][T12849] usb 4-1: Using ep0 maxpacket: 32 [ 544.601899][T12849] usb 4-1: config 0 interface 0 altsetting 31 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.651471][T12849] usb 4-1: config 0 interface 0 altsetting 31 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.726415][T12849] usb 4-1: config 0 interface 0 has no altsetting 0 [ 544.763980][T12229] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.797993][T12849] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 544.878941][T12849] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 544.940527][T12849] usb 4-1: Manufacturer: syz [ 545.016715][T12849] usb 4-1: config 0 descriptor?? [ 545.076590][T12849] hub 4-1:0.0: USB hub found [ 545.277694][T12849] hub 4-1:0.0: 15 ports detected [ 545.310229][T12849] hub 4-1:0.0: insufficient power available to use all downstream ports [ 545.480677][T12849] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 545.522672][T12849] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 545.575438][T12849] usbhid 4-1:0.0: can't add hid device: -71 [ 545.606476][T12849] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 545.727545][T12849] usb 4-1: USB disconnect, device number 11 [ 545.877052][T13136] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 545.880248][T14138] loop1: detected capacity change from 0 to 16 [ 545.893619][T13136] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 545.903639][T13136] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 545.914572][T13136] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 545.925080][T13136] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 545.934242][T13136] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 545.990675][T14138] erofs: (device loop1): mounted with root inode @ nid 36. [ 547.197690][ T5290] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.505606][ T5290] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.886154][ T5290] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.967194][T14169] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 548.022490][ T5129] Bluetooth: hci4: command tx timeout [ 548.292915][ T5290] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.822999][T14200] team_slave_0: entered promiscuous mode [ 548.828819][T14200] team_slave_1: entered promiscuous mode [ 548.845558][T14200] macsec1: entered promiscuous mode [ 548.851251][T14200] team0: entered promiscuous mode [ 548.858839][T14200] macvlan2: entered promiscuous mode [ 548.868999][T14200] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 548.885543][T14200] macsec1: entered allmulticast mode [ 548.899920][T14200] team0: entered allmulticast mode [ 548.915052][T14200] team_slave_0: entered allmulticast mode [ 548.921720][T14200] team_slave_1: entered allmulticast mode [ 548.927770][T14200] macvlan2: entered allmulticast mode [ 548.934527][T14200] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 548.949959][T14200] team0: left allmulticast mode [ 548.955994][T14200] team_slave_0: left allmulticast mode [ 548.961983][T14200] team_slave_1: left allmulticast mode [ 548.978397][T14200] macvlan2: left allmulticast mode [ 548.986306][T14200] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 548.996928][T14200] team0: left promiscuous mode [ 549.002683][T14200] macvlan2: left promiscuous mode [ 549.008345][T14200] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 549.020156][T14200] team_slave_0: left promiscuous mode [ 549.025712][T14200] team_slave_1: left promiscuous mode [ 549.131946][T14141] chnl_net:caif_netlink_parms(): no params data found [ 549.193051][ T5290] bridge_slave_1: left allmulticast mode [ 549.200027][ T5290] bridge_slave_1: left promiscuous mode [ 549.253433][ T5290] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.314924][ T5290] bridge_slave_0: left allmulticast mode [ 549.320680][ T5290] bridge_slave_0: left promiscuous mode [ 549.484441][ T5290] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.736325][ T29] audit: type=1804 audit(1717496426.206:380): pid=14232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3304842352/syzkaller.AhvOiZ/534/file0" dev="sda1" ino=1965 res=1 errno=0 [ 550.113705][ T5129] Bluetooth: hci4: command tx timeout [ 550.806372][T14250] ================================================================== [ 550.814490][T14250] BUG: KASAN: slab-use-after-free in bpf_link_free+0x234/0x2d0 [ 550.822086][T14250] Read of size 8 at addr ffff88802e1f6f10 by task syz-executor.1/14250 [ 550.830343][T14250] [ 550.832673][T14250] CPU: 1 PID: 14250 Comm: syz-executor.1 Not tainted 6.10.0-rc2-syzkaller-00010-g2ab795141095 #0 [ 550.843283][T14250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 550.853362][T14250] Call Trace: [ 550.856661][T14250] [ 550.859610][T14250] dump_stack_lvl+0x241/0x360 [ 550.864331][T14250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 550.869555][T14250] ? __pfx__printk+0x10/0x10 [ 550.874167][T14250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.879827][T14250] ? _printk+0xd5/0x120 [ 550.884002][T14250] ? __virt_addr_valid+0x183/0x520 [ 550.889161][T14250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.894830][T14250] print_report+0x169/0x550 [ 550.899358][T14250] ? __virt_addr_valid+0x183/0x520 [ 550.904506][T14250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.910188][T14250] ? __virt_addr_valid+0x44e/0x520 [ 550.915330][T14250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.921255][T14250] ? __phys_addr+0xba/0x170 [ 550.925986][T14250] ? bpf_link_free+0x234/0x2d0 [ 550.930796][T14250] kasan_report+0x143/0x180 [ 550.935331][T14250] ? bpf_link_free+0x234/0x2d0 [ 550.940231][T14250] bpf_link_free+0x234/0x2d0 [ 550.944875][T14250] bpf_link_release+0x7b/0x90 [ 550.949605][T14250] ? __pfx_bpf_link_release+0x10/0x10 [ 550.955032][T14250] __fput+0x408/0x8b0 [ 550.959063][T14250] task_work_run+0x251/0x310 [ 550.963691][T14250] ? __pfx_task_work_run+0x10/0x10 [ 550.968841][T14250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.974511][T14250] ? switch_task_namespaces+0xe1/0x110 [ 550.980089][T14250] do_exit+0xa27/0x27e0 [ 550.984289][T14250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.989966][T14250] ? __pfx_do_exit+0x10/0x10 [ 550.994595][T14250] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 551.000015][T14250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 551.005696][T14250] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 551.011709][T14250] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 551.018063][T14250] ? _raw_spin_lock_irq+0xdf/0x120 [ 551.023219][T14250] do_group_exit+0x207/0x2c0 [ 551.027846][T14250] ? _raw_spin_unlock_irq+0x23/0x50 [ 551.033078][T14250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 551.039010][T14250] ? lockdep_hardirqs_on+0x99/0x150 [ 551.044243][T14250] get_signal+0x16a1/0x1740 [ 551.048805][T14250] ? __pfx_get_signal+0x10/0x10 [ 551.053716][T14250] arch_do_signal_or_restart+0x96/0x860 [ 551.059295][T14250] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 551.065583][T14250] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 551.071608][T14250] ? syscall_exit_to_user_mode+0xa3/0x370 [ 551.077361][T14250] syscall_exit_to_user_mode+0xc9/0x370 [ 551.082939][T14250] do_syscall_64+0x100/0x230 [ 551.087644][T14250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 551.093317][T14250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.099259][T14250] RIP: 0033:0x7f3844e7cf69 2024/06/04 10:20:27 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 551.103777][T14250] Code: Unable to access opcode bytes at 0x7f3844e7cf3f. [ 551.110809][T14250] RSP: 002b:00007f3845beb0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 551.119255][T14250] RAX: ffffffffffffffe0 RBX: 00007f3844fb4070 RCX: 00007f3844e7cf69 [ 551.127252][T14250] RDX: 0000000000000001 RSI: 0000000020000980 RDI: 0000000000000005 [ 551.135508][T14250] RBP: 00007f3844eda706 R08: 0000000000000000 R09: 0000000000000000 [ 551.143515][T14250] R10: 0000000004000010 R11: 0000000000000246 R12: 0000000000000000 [ 551.151527][T14250] R13: 000000000000006e R14: 00007f3844fb4070 R15: 00007fff7ed873a8 [ 551.159552][T14250] [ 551.162583][T14250] [ 551.164905][T14250] Allocated by task 14250: [ 551.169319][T14250] kasan_save_track+0x3f/0x80 [ 551.174101][T14250] __kasan_kmalloc+0x98/0xb0 [ 551.178734][T14250] kmalloc_trace_noprof+0x19c/0x2c0 [ 551.184142][T14250] bpf_raw_tp_link_attach+0x2a0/0x6e0 [ 551.189540][T14250] bpf_raw_tracepoint_open+0x1c2/0x240 [ 551.195027][T14250] __sys_bpf+0x3c0/0x810 [ 551.199300][T14250] __x64_sys_bpf+0x7c/0x90 [ 551.203735][T14250] do_syscall_64+0xf3/0x230 [ 551.208252][T14250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.214251][T14250] [ 551.216581][T14250] Freed by task 0: [ 551.220302][T14250] kasan_save_track+0x3f/0x80 [ 551.225007][T14250] kasan_save_free_info+0x40/0x50 [ 551.230059][T14250] poison_slab_object+0xe0/0x150 [ 551.235022][T14250] __kasan_slab_free+0x37/0x60 [ 551.239806][T14250] kfree+0x149/0x360 [ 551.243725][T14250] rcu_core+0xaff/0x1830 [ 551.247984][T14250] handle_softirqs+0x2c6/0x970 [ 551.252762][T14250] __irq_exit_rcu+0xf4/0x1c0 [ 551.257454][T14250] irq_exit_rcu+0x9/0x30 [ 551.261709][T14250] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 551.267378][T14250] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 551.273389][T14250] [ 551.275712][T14250] Last potentially related work creation: [ 551.281424][T14250] kasan_save_stack+0x3f/0x60 [ 551.286116][T14250] __kasan_record_aux_stack+0xac/0xc0 [ 551.291513][T14250] call_rcu+0x167/0xa70 [ 551.295690][T14250] bpf_link_free+0x1f8/0x2d0 [ 551.300301][T14250] bpf_link_release+0x7b/0x90 [ 551.305019][T14250] __fput+0x408/0x8b0 [ 551.309008][T14250] task_work_run+0x251/0x310 [ 551.313617][T14250] do_exit+0xa27/0x27e0 [ 551.317794][T14250] do_group_exit+0x207/0x2c0 [ 551.322404][T14250] get_signal+0x16a1/0x1740 [ 551.326935][T14250] arch_do_signal_or_restart+0x96/0x860 [ 551.332497][T14250] syscall_exit_to_user_mode+0xc9/0x370 [ 551.338085][T14250] do_syscall_64+0x100/0x230 [ 551.342775][T14250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.348686][T14250] [ 551.351101][T14250] The buggy address belongs to the object at ffff88802e1f6f00 [ 551.351101][T14250] which belongs to the cache kmalloc-128 of size 128 [ 551.365172][T14250] The buggy address is located 16 bytes inside of [ 551.365172][T14250] freed 128-byte region [ffff88802e1f6f00, ffff88802e1f6f80) [ 551.378895][T14250] [ 551.381222][T14250] The buggy address belongs to the physical page: [ 551.387628][T14250] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e1f6 [ 551.396400][T14250] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 551.403953][T14250] page_type: 0xffffefff(slab) [ 551.408640][T14250] raw: 00fff00000000000 ffff888015041a00 0000000000000000 dead000000000001 [ 551.417233][T14250] raw: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000 [ 551.425817][T14250] page dumped because: kasan: bad access detected [ 551.432228][T14250] page_owner tracks the page as allocated [ 551.437948][T14250] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5345, tgid 5345 (syz-executor.2), ts 95384083847, free_ts 95342268263 [ 551.458824][T14250] post_alloc_hook+0x1f3/0x230 [ 551.463618][T14250] get_page_from_freelist+0x2e2d/0x2ee0 [ 551.469193][T14250] __alloc_pages_noprof+0x256/0x6c0 [ 551.474416][T14250] alloc_slab_page+0x5f/0x120 [ 551.479107][T14250] allocate_slab+0x5a/0x2e0 [ 551.483622][T14250] ___slab_alloc+0xcd1/0x14b0 [ 551.488309][T14250] __slab_alloc+0x58/0xa0 [ 551.492651][T14250] kmalloc_node_track_caller_noprof+0x281/0x440 [ 551.498918][T14250] krealloc_noprof+0x7d/0x120 [ 551.503608][T14250] nf_ct_ext_add+0x1a2/0x3e0 [ 551.508219][T14250] init_conntrack+0x8bf/0x1310 [ 551.512992][T14250] nf_conntrack_in+0xd59/0x1880 [ 551.517860][T14250] nf_hook_slow+0xc5/0x220 [ 551.522291][T14250] nf_hook+0x2c4/0x450 [ 551.526382][T14250] __ip_local_out+0x3d9/0x4e0 [ 551.531079][T14250] ip_local_out+0x26/0x70 [ 551.535428][T14250] page last free pid 5341 tgid 5341 stack trace: [ 551.541761][T14250] free_unref_folios+0xf23/0x19e0 [ 551.546902][T14250] folios_put_refs+0x93a/0xa60 [ 551.551685][T14250] free_pages_and_swap_cache+0x2ea/0x690 [ 551.557422][T14250] tlb_flush_mmu+0x3a3/0x680 [ 551.562029][T14250] tlb_finish_mmu+0xd4/0x200 [ 551.566634][T14250] exit_mmap+0x44f/0xc80 [ 551.570891][T14250] __mmput+0x115/0x3c0 [ 551.574967][T14250] exit_mm+0x220/0x310 [ 551.579064][T14250] do_exit+0x9aa/0x27e0 [ 551.583237][T14250] do_group_exit+0x207/0x2c0 [ 551.587845][T14250] __x64_sys_exit_group+0x3f/0x40 [ 551.592893][T14250] do_syscall_64+0xf3/0x230 [ 551.597410][T14250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.603322][T14250] [ 551.605643][T14250] Memory state around the buggy address: [ 551.611275][T14250] ffff88802e1f6e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 551.619349][T14250] ffff88802e1f6e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 551.627425][T14250] >ffff88802e1f6f00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 551.635491][T14250] ^ [ 551.640085][T14250] ffff88802e1f6f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 551.648159][T14250] ffff88802e1f7000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.656247][T14250] ================================================================== [ 551.672015][ T5290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.719934][T14250] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 551.727182][T14250] CPU: 1 PID: 14250 Comm: syz-executor.1 Not tainted 6.10.0-rc2-syzkaller-00010-g2ab795141095 #0 [ 551.737697][T14250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 551.747766][T14250] Call Trace: [ 551.751405][T14250] [ 551.754353][T14250] dump_stack_lvl+0x241/0x360 [ 551.759063][T14250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 551.764283][T14250] ? __pfx__printk+0x10/0x10 [ 551.768893][T14250] ? preempt_schedule+0xe1/0xf0 [ 551.773772][T14250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 551.779424][T14250] ? vscnprintf+0x5d/0x90 [ 551.783774][T14250] panic+0x349/0x860 [ 551.787683][T14250] ? check_panic_on_warn+0x21/0xb0 [ 551.792813][T14250] ? __pfx_panic+0x10/0x10 [ 551.797242][T14250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 551.802897][T14250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 551.808542][T14250] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 551.814539][T14250] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 551.820880][T14250] ? print_report+0x502/0x550 [ 551.825581][T14250] check_panic_on_warn+0x86/0xb0 [ 551.830536][T14250] ? bpf_link_free+0x234/0x2d0 [ 551.835322][T14250] end_report+0x77/0x160 [ 551.839579][T14250] kasan_report+0x154/0x180 [ 551.844099][T14250] ? bpf_link_free+0x234/0x2d0 [ 551.848883][T14250] bpf_link_free+0x234/0x2d0 [ 551.853493][T14250] bpf_link_release+0x7b/0x90 [ 551.858189][T14250] ? __pfx_bpf_link_release+0x10/0x10 [ 551.863677][T14250] __fput+0x408/0x8b0 [ 551.867672][T14250] task_work_run+0x251/0x310 [ 551.872279][T14250] ? __pfx_task_work_run+0x10/0x10 [ 551.877409][T14250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 551.883050][T14250] ? switch_task_namespaces+0xe1/0x110 [ 551.888511][T14250] do_exit+0xa27/0x27e0 [ 551.892679][T14250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 551.898322][T14250] ? __pfx_do_exit+0x10/0x10 [ 551.902924][T14250] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 551.908310][T14250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 551.913965][T14250] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 551.919962][T14250] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 551.926293][T14250] ? _raw_spin_lock_irq+0xdf/0x120 [ 551.931518][T14250] do_group_exit+0x207/0x2c0 [ 551.936127][T14250] ? _raw_spin_unlock_irq+0x23/0x50 [ 551.941344][T14250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 551.947089][T14250] ? lockdep_hardirqs_on+0x99/0x150 [ 551.952302][T14250] get_signal+0x16a1/0x1740 [ 551.956838][T14250] ? __pfx_get_signal+0x10/0x10 [ 551.961718][T14250] arch_do_signal_or_restart+0x96/0x860 [ 551.967295][T14250] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 551.973477][T14250] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 551.979477][T14250] ? syscall_exit_to_user_mode+0xa3/0x370 [ 551.985211][T14250] syscall_exit_to_user_mode+0xc9/0x370 [ 551.990793][T14250] do_syscall_64+0x100/0x230 [ 551.995400][T14250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.001051][T14250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.007048][T14250] RIP: 0033:0x7f3844e7cf69 [ 552.011468][T14250] Code: Unable to access opcode bytes at 0x7f3844e7cf3f. [ 552.018484][T14250] RSP: 002b:00007f3845beb0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 552.026916][T14250] RAX: ffffffffffffffe0 RBX: 00007f3844fb4070 RCX: 00007f3844e7cf69 [ 552.035339][T14250] RDX: 0000000000000001 RSI: 0000000020000980 RDI: 0000000000000005 [ 552.043317][T14250] RBP: 00007f3844eda706 R08: 0000000000000000 R09: 0000000000000000 [ 552.051290][T14250] R10: 0000000004000010 R11: 0000000000000246 R12: 0000000000000000 [ 552.059265][T14250] R13: 000000000000006e R14: 00007f3844fb4070 R15: 00007fff7ed873a8 [ 552.067267][T14250] [ 552.070516][T14250] Kernel Offset: disabled [ 552.074837][T14250] Rebooting in 86400 seconds..