last executing test programs: 1m31.078357399s ago: executing program 2 (id=437): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x3, r3, 0x0, &(0x7f0000000380)="f3", 0x1, 0xfffffffffffffc01}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x3, r1, 0x0, &(0x7f0000000100)="ac", 0x1, 0x3}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x13}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x5, r3, 0x0, &(0x7f00000001c0)="c7", 0x1, 0xc466}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000180)={0x18, r1, 0xc2, 0xffffffff}) 1m30.917135662s ago: executing program 2 (id=439): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r1, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0x20001, 0x0, 0xdcf, 0x7, 0xb, 0x800, 0x0, 0x0, 0x10, 0x9b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) 1m30.730954387s ago: executing program 2 (id=441): capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0x338}) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x2289, 0x0, 0x2, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x22d2, 0x20, 0x0, 0x0, 0x0) 1m30.482445916s ago: executing program 2 (id=442): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2208088, &(0x7f000000be00)=ANY=[@ANYBLOB="009c1b06223d15055c6d39aecad6836294e3e1fc38b80cd5eb20b39dc7dceb316fa1203f802b4368850fdef916202a989ea54a4e800c324c19bad386d9a72fc1de2fa7f100eae8a434158d0ed0d6a9061d60971bcf895342571bae0ea58240ebdd0f6f3dd42fa0f9754224a9c2045d2e098e01000000943549e2c2e191b7da91b8645dfdb324ceaf445cdc9748a4e2d5ac6dbf8b92da3a8a65176db66ca798dce71880c5e6837b5a99b6696d5003a06f62bbfb0b9ba0a6ffbfc2dd37662e077430379386d8e3abf802401b0e8382824a68cf51cde62ac99470edf8c757396564c8079d89017df3182005ec9fe433b122f1c02ca72eb68e41fc7ff69975649149ff4be64bd665e56a5fe9ef4d6ee02ff30ad838a9744100d520765c83c0178534e09d2f578bd10d3bfc68d1e75d6965613448d1045b6a0298d0804f82bc984e271c346d1e30886f81feb02b8320d47dc752b2dd23b4d8e20f2bda7ff84c57d63da96f044f8daaac7cb7132ef6", @ANYRES8=0x0, @ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES64=0x0], 0x1, 0x5e97, &(0x7f0000005e00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m29.052381453s ago: executing program 2 (id=452): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 1m28.619231648s ago: executing program 2 (id=457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r4, &(0x7f00000001c0), 0x0}, 0x20) 1m28.33611455s ago: executing program 32 (id=457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r4, &(0x7f00000001c0), 0x0}, 0x20) 1m1.947243296s ago: executing program 0 (id=606): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4004821}, 0x2000c000) 1m1.678662338s ago: executing program 0 (id=608): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0xd, 0x2, 0x0, 0xffffffffffffffff, 0xfffb}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2aaa12fb1c658c08}, 0x4000041) 1m1.553023878s ago: executing program 0 (id=609): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r1, &(0x7f0000000000)=0x8, 0x12) r2 = fanotify_init(0x200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r2, 0x161, 0x40000867, r3, 0x0) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, 0x0, 0x4, 0x0) 1m1.349082495s ago: executing program 0 (id=610): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$eJzs3E1sVEUcAPD/e/3i01bEDxC0ikbiR0vLhxy8aDTxoImJHjCealsIUqihNRFCFD3g0ZB4Nx5NvJt40otRD8bEq94NCTFcQE9rZve9sl12S8tuWXB/v+RtZ96bZua/86Y7O7PbAHrWaHrIIrZExB8RMVzLLi8wWvtx7cq56X+unJvOolJ58++sWu7qlXPTZdHy9zbXMpVKxFBKDjWp98I7EVNzc7Oni/z44sn3xxfOnH3u+MmpY7PHZk9NHj58YP/uwUOTB9uKLy9+priu7vxofteOV9+++Pr0kYvv/vxNau+W4np9HLckRdtgtPbsNno0PTzZVmV3lF/Tw9a6E1l/68Jjt6FBrF5fRKTuGqiO/+Hoi41L14bjlU+72jhgXVUqlUqz1+fC+QrwP5ZFt1sAdEf5Qp/e/5bHbZp63BEuv1h7A5TivlYctSv9S2sHAw3vbztpNCKOnP/3y3REJ9YhAABu4vs0/3m22fwvjwfqyt1T7KGMRMS9EbEtIu6LiO0RcX9EteyDEfHQGutv3CG5cf6TX7qlwFYpzf9eKPa2ls//ytlfjPQVua3V+Aeyo8fnZvcVz8neGBhK+YkV6vjh5d8/L9MbGq7Vz//Skeov54JFOy71NyzQzUwtTrUbd+nyJxE7+5vFn0W5jZNFxI6I2HmLdRx/+utdra7dPP4VrLDPtFqVryKeqvX/+VgW//WuylruT048f2jy4PiGmJvdN17eFTf65bcLb7Sqv634OyD1/6am9//SLvBItiFi4czZE9X92oW113Hhz8/qxvSy3eUUf/5txJrv/8HsrWp6sDj34dTi4umJiMHstRvPT17/3TJflk/x793TfPxvq2vxwxGRbuLdEfFIsYmb+u6xiHg8IvasEP9PLz3xXqtrrft/hVX5Dkrxz9ys/6O+/9ee6Dvx43drj7+U+v9ANbW3OLOav3+rbWA7zx0AAADcLfLqZ+CzfGwpnedjY7XP8G+PTfnc/MLiM0fnPzg1U/us/EgM5OVK13DdeuhEsTZc5icb8vuLdeMv+jZW82PT83Mz3Q4eetzmFuM/+auv260D1l0H9tGAu5TxD73L+IfeZfxD7zL+oXc1G/8fd6EdwO3n9R96l/EPvcv4h95l/ENPavnd+Lytr/x3OVH+74Q7pT1dSmxczyoi736APZHoX+/beKjppS7/YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQ/wIAAP//YKPiyQ==") chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x2) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x7f000, 0x7f000}]) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x10001, 0x400, 0x0, 0x0, 0x1, 0x11, "0e36af413bb901527fe4d0ce5d295c3676345a41499dd6aac69c4730251a0ca0ea0000000000000000000c00002000", "038447c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 59.568454609s ago: executing program 0 (id=621): socket$unix(0x1, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 59.18115623s ago: executing program 0 (id=625): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400014002020a600e41b0000900ac00060411000000040012000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2", 0xd0}], 0x1}, 0x0) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r1, &(0x7f0000000000), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r2, &(0x7f00000001c0), 0x10) dup3(r0, r1, 0x0) 58.749838885s ago: executing program 33 (id=625): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400014002020a600e41b0000900ac00060411000000040012000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2", 0xd0}], 0x1}, 0x0) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r1, &(0x7f0000000000), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r2, &(0x7f00000001c0), 0x10) dup3(r0, r1, 0x0) 2.889442037s ago: executing program 4 (id=934): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) mbind(&(0x7f0000730000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x400, 0x2) 2.677112884s ago: executing program 4 (id=938): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) 2.559962233s ago: executing program 4 (id=949): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b01020301090224", @ANYRES16], 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d47c"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40001, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000700)={0x0, 0x4, 0x0, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2.34427346s ago: executing program 1 (id=951): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r0, 0x407, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(r1, 0x5421, &(0x7f0000000240)=0x1) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) 1.966348821s ago: executing program 1 (id=945): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r1, 0x406, r2) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x1409, 0x100, 0x70bd26, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x810}, 0x8000) r4 = open(&(0x7f0000000300)='./file0\x00', 0xa042, 0x8) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x200800, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) 1.885807318s ago: executing program 3 (id=946): socket$inet6(0xa, 0x803, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) lgetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.opaque\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x49, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000006400)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000daffffff", @ANYRES64=r0], 0x10) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.upper\x00') 1.024459637s ago: executing program 1 (id=947): syz_mount_image$fuse(0x0, &(0x7f0000002200)='./file0\x00', 0x48000, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x1000000, 0x1ff}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x3fffffff}}, 0x0) 1.024286787s ago: executing program 3 (id=948): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) mbind(&(0x7f0000730000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x400, 0x2) 1.018308848s ago: executing program 5 (id=958): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in=@rand_addr=0x10000, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x2, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r4, 0x0, 0xd, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', r2, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @local, @rand_addr=0x3}}}}) 1.017720628s ago: executing program 4 (id=959): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x14002, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000a3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x160, 0x0, 0x1, [{{0x2, 0x2, 0x7, 0x96a, 0x80000001, 0x0, {0x4, 0x1, 0x1, 0x7d, 0x9, 0x26ef, 0x1000, 0xc, 0x18000000, 0xd000, 0x9, r2, r3, 0x19, 0x80}}, {0x1, 0xac4, 0x2, 0x2, '..'}}, {{0x4, 0x0, 0x1c, 0x6, 0x5, 0xbb5, {0x4, 0x4, 0x401, 0x9, 0xe, 0x1, 0x4, 0x6, 0x2, 0x6000, 0xbc7, r2, r3, 0x2, 0xfffffff7}}, {0x5, 0x6, 0x13, 0x3, '\']}$^.{\\,{:^\'L-#{]@'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0xc0) 838.190462ms ago: executing program 1 (id=950): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) 802.074105ms ago: executing program 4 (id=952): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000feffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 801.375026ms ago: executing program 5 (id=953): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x450, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x420, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x535, 0x3, 0x9, 0x2, 0x2, 0x19, 0x2, 0x40, 0x7ff, 0x10001, 0x9, 0xfffffffd, 0x6, 0x9, 0x273, 0x5, 0x1, 0x1, 0x0, 0x0, 0x3, 0x3, 0x1, 0xe7, 0x5, 0x0, 0x10000, 0x5, 0x81, 0xd79, 0x7fff, 0x8, 0x9, 0x3, 0xd, 0x7, 0x8, 0xf, 0x100, 0x99, 0x10001, 0x6, 0x2ba, 0x400, 0x9, 0x7, 0x3, 0x4, 0x0, 0x9, 0xffffffff, 0x80, 0xde6b, 0xfff, 0x4, 0x2, 0x9, 0x6, 0x7, 0x40, 0x89, 0x7f, 0x0, 0x400, 0x6cc2, 0x9, 0x8001, 0x7, 0x3, 0x8, 0x9, 0x0, 0x101, 0x81, 0x4, 0x9809, 0x6a, 0x0, 0x81, 0x2, 0x9ac1, 0x4, 0xa47f, 0xa, 0x0, 0x3, 0x5, 0xccd, 0x2, 0x7fff, 0xfffffff8, 0x4, 0x7d45276b, 0x4, 0x1, 0x6, 0x2, 0x4, 0x2, 0x6, 0x872e, 0x0, 0x2, 0x4, 0x0, 0x1, 0x4, 0xd, 0x6, 0x1, 0xf706, 0xd, 0x4, 0x5, 0x8001, 0xd, 0x7, 0x9, 0x8, 0x100, 0x0, 0x38d, 0x6, 0x5, 0x9, 0xb, 0xffffff80, 0x9a, 0x9, 0xa6, 0x5, 0x5, 0x4, 0x4, 0x9, 0x3, 0x57, 0x3, 0x4, 0x2, 0x7, 0x7, 0x6, 0xfffffffd, 0x200, 0x7, 0x1, 0x4, 0x3, 0x2, 0x9, 0x6, 0x80000000, 0x101, 0xf2f7, 0x7fff, 0x60, 0xe, 0x10, 0x57, 0x9, 0xa601, 0x5, 0x0, 0x844, 0x5, 0x80, 0x7fff, 0x0, 0x40, 0x6, 0x3, 0x28b, 0xefffffb8, 0x6, 0xa7, 0x7, 0x0, 0x9, 0x7, 0x9, 0x65131e60, 0x4, 0x100, 0x8, 0xa9e, 0x0, 0xa, 0x1583, 0x0, 0x5bf1283d, 0x8, 0x101, 0x9, 0x0, 0x5, 0x7, 0x3, 0x7, 0x813, 0xa, 0x2, 0xba5d, 0x4, 0x1, 0x68885bac, 0x9, 0x81, 0x0, 0x1, 0x80000000, 0x80, 0x8001, 0x10000, 0x9d0a, 0xfffffff7, 0x5, 0x7, 0x7, 0x0, 0x10000, 0xfffffff9, 0x0, 0x1, 0x401, 0x81, 0x6, 0xd, 0x0, 0xce, 0x1, 0x6fdf, 0x1, 0x8, 0x2, 0x1be9d426, 0x5, 0x3, 0x5, 0x0, 0xf7, 0xf3, 0x5, 0x5, 0x5, 0x401, 0x54b1, 0xffff, 0xffffffff, 0x83, 0x5, 0xf9dc, 0x9, 0x6, 0x1, 0xffffffff]}]}, @TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x450}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) 766.600848ms ago: executing program 3 (id=955): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0xc080) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 689.977615ms ago: executing program 1 (id=956): sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000000100003052abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000a0010200140012800b0001006d616373656300000400028008000500", @ANYRES32=r3], 0x54}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x1f, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r1, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) 592.463553ms ago: executing program 4 (id=957): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2900, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec54a28a926e37c7a678a5e16c121f27527bf75fb49d31d41a5", 0xc5, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000004c0)="8bc17168cbe2d31333fe3ebbb14f686db0f3631a159653ee85e0972ddfc0b8704b8021021649cef19f024bec92", 0x2d) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) 591.414363ms ago: executing program 3 (id=960): socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x3, 0x0) socket$tipc(0x1e, 0x4, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000614010029bd7000ffdbdf250800", @ANYRES32=r1], 0x40}}, 0x0) 500.60138ms ago: executing program 5 (id=961): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 349.405872ms ago: executing program 5 (id=962): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x76) dup3(r1, r0, 0x0) 267.165849ms ago: executing program 5 (id=963): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 179.694766ms ago: executing program 3 (id=964): socket$inet(0x2, 0x3, 0x805) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) set_robust_list(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000004001a80100003800c0005800800000000000000100003803000018005000c000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a400000000060000c"], 0x270}}, 0x0) 49.317957ms ago: executing program 1 (id=965): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in=@rand_addr=0x10000, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x2, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r4, 0x0, 0xd, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', r2, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @local, @rand_addr=0x3}}}}) 146.93µs ago: executing program 5 (id=966): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) mbind(&(0x7f0000730000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x400, 0x2) 0s ago: executing program 3 (id=967): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) kernel console output (not intermixed with test programs): 706590][ T28] audit: type=1326 audit(1756431273.508:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8e00b8ebe9 code=0x7ffc0000 [ 100.749813][ T28] audit: type=1326 audit(1756431273.508:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e00b8ebe9 code=0x7ffc0000 [ 100.803167][ T785] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.821515][ T6068] loop0: detected capacity change from 0 to 32768 [ 100.829425][ T28] audit: type=1326 audit(1756431273.508:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e00b8ebe9 code=0x7ffc0000 [ 100.868326][ T6068] XFS: noikeep mount option is deprecated. [ 100.912969][ T6068] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.975760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 100.984782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 100.985703][ T785] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 100.993829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 101.035951][ T785] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.068205][ T785] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 101.081783][ T785] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.100711][ T785] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 101.110703][ T785] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 101.119604][ T785] usb 4-1: Product: syz [ 101.124321][ T785] usb 4-1: Manufacturer: syz [ 101.144244][ T785] cdc_wdm 4-1:1.0: skipping garbage [ 101.163156][ T785] cdc_wdm 4-1:1.0: skipping garbage [ 101.170961][ T6068] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 101.212500][ T785] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 101.221069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 101.229923][ T785] cdc_wdm 4-1:1.0: Unknown control protocol [ 101.318734][ T6068] XFS (loop0): Starting recovery (logdev: internal) [ 101.482769][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 101.490073][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 101.498091][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 101.505100][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 101.511512][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 101.518246][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 101.524870][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 101.531527][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 101.540378][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 101.547055][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 101.553592][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 101.560329][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 101.569482][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 101.576236][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 101.582989][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 101.589648][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 101.596246][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 101.603156][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 101.609625][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 101.616420][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 101.629822][ T5864] usb 4-1: USB disconnect, device number 4 [ 101.636075][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 101.637113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 101.655626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 101.675494][ T6068] XFS (loop0): Ending recovery (logdev: internal) [ 102.364212][ T5791] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 103.273289][ T785] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.468554][ T785] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.506868][ T785] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.537321][ T785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.560238][ T785] usb 1-1: Product: syz [ 103.573220][ T785] usb 1-1: Manufacturer: syz [ 103.583200][ T785] usb 1-1: SerialNumber: syz [ 103.638222][ T6099] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.108003][ T6123] block device autoloading is deprecated and will be removed. [ 104.179687][ T6113] loop1: detected capacity change from 0 to 40427 [ 104.197243][ T6113] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 104.213968][ T6113] F2FS-fs (loop1): invalid crc value [ 104.249219][ T6113] F2FS-fs (loop1): Found nat_bits in checkpoint [ 104.407306][ T6113] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 104.561660][ T6113] syz.1.80: attempt to access beyond end of device [ 104.561660][ T6113] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 104.641191][ T785] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 104.667238][ T785] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 104.701339][ T785] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 104.825062][ T5796] syz-executor: attempt to access beyond end of device [ 104.825062][ T5796] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 104.874638][ T5796] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 104.925539][ T785] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 104.999500][ T785] usb 1-1: USB disconnect, device number 3 [ 105.030065][ T785] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 106.220832][ T6161] dccp_close: ABORT with 3 bytes unread [ 106.712903][ T6173] batadv_slave_1: entered promiscuous mode [ 106.826040][ T6170] batadv_slave_1: left promiscuous mode [ 107.362187][ T6176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.102'. [ 107.991121][ T6194] input: syz1 as /devices/virtual/input/input5 [ 108.123385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.132379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.142621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.353260][ T5179] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.566374][ T5179] usb 4-1: Using ep0 maxpacket: 32 [ 110.619613][ T5179] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 110.638512][ T5179] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.657886][ T5179] usb 4-1: Product: syz [ 110.664514][ T5179] usb 4-1: Manufacturer: syz [ 110.685640][ T5179] usb 4-1: SerialNumber: syz [ 110.716309][ T5179] usb 4-1: config 0 descriptor?? [ 110.725578][ T6223] loop0: detected capacity change from 0 to 32768 [ 110.731250][ T5179] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 110.750545][ T6223] ======================================================= [ 110.750545][ T6223] WARNING: The mand mount option has been deprecated and [ 110.750545][ T6223] and is ignored by this kernel. Remove the mand [ 110.750545][ T6223] option from the mount to silence this warning. [ 110.750545][ T6223] ======================================================= [ 110.917608][ T6223] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 111.013245][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.206179][ T27] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 111.227090][ T27] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 111.237969][ T27] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 111.247720][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.264914][ T6231] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 111.276402][ T6223] syz.0.117 (6223) used greatest stack depth: 17712 bytes left [ 111.301959][ T27] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 111.417212][ T5791] ocfs2: Unmounting device (7,0) on (node local) [ 111.723640][ T5851] usb 2-1: USB disconnect, device number 3 [ 111.834528][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 111.834544][ T28] audit: type=1326 audit(1756431284.968:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd018ebe9 code=0x7ffc0000 [ 111.948478][ T28] audit: type=1326 audit(1756431284.998:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd018ebe9 code=0x7ffc0000 [ 112.013524][ T28] audit: type=1326 audit(1756431285.008:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7efcd018ebe9 code=0x7ffc0000 [ 112.074861][ T28] audit: type=1326 audit(1756431285.008:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd018ebe9 code=0x7ffc0000 [ 112.140125][ T28] audit: type=1326 audit(1756431285.018:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7efcd018ebe9 code=0x7ffc0000 [ 112.171887][ T28] audit: type=1326 audit(1756431285.018:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd018ebe9 code=0x7ffc0000 [ 112.233196][ T28] audit: type=1326 audit(1756431285.018:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7efcd018ebe9 code=0x7ffc0000 [ 112.280647][ T28] audit: type=1326 audit(1756431285.018:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd018ebe9 code=0x7ffc0000 [ 112.350275][ T28] audit: type=1326 audit(1756431285.018:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd018ebe9 code=0x7ffc0000 [ 112.385726][ T5179] gspca_ov534_9: reg_w failed -71 [ 112.399315][ T28] audit: type=1326 audit(1756431285.018:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7efcd018ebe9 code=0x7ffc0000 [ 112.703222][ T5179] gspca_ov534_9: Unknown sensor 0000 [ 112.703321][ T5179] ov534_9: probe of 4-1:0.0 failed with error -22 [ 112.733527][ T5179] usb 4-1: USB disconnect, device number 5 [ 113.210705][ T6266] process 'syz.3.133' launched './file1' with NULL argv: empty string added [ 113.567310][ T6275] use of bytesused == 0 is deprecated and will be removed in the future, [ 113.612688][ T6275] use the actual size instead. [ 114.063177][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.298015][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 114.352641][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 114.402252][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 114.455458][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 114.478574][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 114.510022][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 114.521116][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 114.530871][ T9] usb 3-1: Product: syz [ 114.537816][ T9] usb 3-1: Manufacturer: syz [ 114.569186][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 114.582435][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 114.597554][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 114.613467][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 114.995020][ C1] wdm_int_callback: 36 callbacks suppressed [ 114.995043][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 115.008366][ C1] wdm_int_callback: 36 callbacks suppressed [ 115.008385][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 115.022397][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 115.029656][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 115.036115][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 115.043133][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 115.050256][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 115.057087][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 115.063820][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 115.070793][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 115.078322][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 115.085143][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 115.091650][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 115.098646][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 115.105438][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 115.112439][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 115.119355][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 115.126162][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 115.132874][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 115.139968][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 115.148021][ T5851] usb 3-1: USB disconnect, device number 2 [ 115.148089][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 115.196980][ T6308] syz.3.146 uses obsolete (PF_INET,SOCK_PACKET) [ 115.454044][ T6311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.147'. [ 115.484632][ T6311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.147'. [ 115.633965][ T6314] block device autoloading is deprecated and will be removed. [ 115.875918][ T6319] loop3: detected capacity change from 0 to 64 [ 115.882704][ T6320] loop0: detected capacity change from 0 to 16 [ 115.908973][ T6320] erofs: (device loop0): mounted with root inode @ nid 36. [ 115.965082][ T6320] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 115.979630][ T6320] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 115.993507][ T6320] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 116.035012][ T6319] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 116.051247][ T6320] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 116.063312][ T6320] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 116.070385][ T6319] overlayfs: failed to set xattr on upper [ 116.076175][ T6320] erofs: (device loop0): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 116.080709][ T6319] overlayfs: ...falling back to redirect_dir=nofollow. [ 116.089719][ T6320] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 116.100104][ T6319] overlayfs: ...falling back to index=off. [ 116.112696][ T6320] erofs: (device loop0): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 116.118238][ T6319] overlayfs: ...falling back to uuid=null. [ 116.127319][ T6320] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 116.127345][ T6320] erofs: (device loop0): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 116.127391][ T6320] erofs: (device loop0): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 116.127410][ T6320] erofs: (device loop0): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 116.127948][ T6320] erofs: (device loop0): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 116.189194][ T6320] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 116.201604][ T6320] erofs: (device loop0): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 116.212075][ T6320] erofs: (device loop0): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 116.221604][ T6320] erofs: (device loop0): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 116.231916][ T6320] erofs: (device loop0): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 116.242941][ T6320] syz.0.151: attempt to access beyond end of device [ 116.242941][ T6320] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 116.257164][ T6320] syz.0.151: attempt to access beyond end of device [ 116.257164][ T6320] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 116.272036][ T6320] syz.0.151: attempt to access beyond end of device [ 116.272036][ T6320] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 116.287661][ T6320] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[2639] [ 116.299539][ T6320] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 116.311935][ T6320] erofs: (device loop0): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 116.321350][ T6320] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 116.332301][ T6320] erofs: (device loop0): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 116.343156][ T6320] erofs: (device loop0): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 116.352867][ T6320] syz.0.151: attempt to access beyond end of device [ 116.352867][ T6320] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 116.367405][ T6320] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[3537] [ 116.611719][ T5801] Trying to free block not in datazone [ 116.969694][ T6335] Bluetooth: MGMT ver 1.22 [ 117.069774][ T6339] loop3: detected capacity change from 0 to 164 [ 118.950756][ T6384] loop0: detected capacity change from 0 to 2048 [ 119.049833][ T6384] GPT:first_usable_lbas don't match. [ 119.067016][ T6384] GPT:34 != 290 [ 119.082169][ T6384] GPT: Use GNU Parted to correct GPT errors. [ 119.090283][ T6388] input: syz0 as /devices/virtual/input/input6 [ 119.124047][ T6384] loop0: p1 p2 p3 [ 119.159916][ T6389] loop2: detected capacity change from 0 to 7 [ 119.184365][ T6389] Dev loop2: unable to read RDB block 7 [ 119.206163][ T6389] loop2: unable to read partition table [ 119.225501][ T6389] loop2: partition table beyond EOD, truncated [ 119.232134][ T6389] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 119.476561][ T6393] netlink: 24 bytes leftover after parsing attributes in process `syz.3.175'. [ 119.749928][ T5807] udevd[5807]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 119.763707][ T5805] udevd[5805]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 119.794900][ T5808] udevd[5808]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 121.837461][ T6431] warning: `syz.0.190' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.151647][ T6439] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 122.990368][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 122.990385][ T28] audit: type=1800 audit(1756431296.118:35): pid=6458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.197" name="bus" dev="overlay" ino=284 res=0 errno=0 [ 123.303337][ T6468] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 123.938081][ T6494] loop0: detected capacity change from 0 to 16 [ 123.969244][ T6494] erofs: (device loop0): mounted with root inode @ nid 36. [ 124.348404][ T6501] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 126.091543][ T6522] could not allocate digest TFM handle cryptd(blake2b-160) [ 126.183257][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 126.380293][ T23] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.398534][ T23] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 126.412596][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 126.428346][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 126.448366][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 126.468696][ T23] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.479313][ T23] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 126.491230][ T23] usb 1-1: Product: syz [ 126.502762][ T23] usb 1-1: Manufacturer: syz [ 126.521006][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 126.535379][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 126.548909][ T23] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 126.558619][ T23] cdc_wdm 1-1:1.0: Unknown control protocol [ 126.945708][ C1] wdm_int_callback: 7 callbacks suppressed [ 126.945734][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 126.958885][ C1] wdm_int_callback: 7 callbacks suppressed [ 126.958904][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 126.972396][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 126.979541][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 126.987299][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 126.994518][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 127.003178][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 127.010358][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 127.017076][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 127.024151][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 127.030510][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 127.037488][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 127.044041][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 127.050943][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 127.064002][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 127.070671][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 127.077440][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 127.084719][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 127.091521][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 127.098682][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 127.111838][ T23] usb 1-1: USB disconnect, device number 4 [ 127.111906][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 127.191670][ T6507] loop3: detected capacity change from 0 to 262144 [ 127.210167][ T6507] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.217 (6507) [ 127.246339][ T6507] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 127.259108][ T6507] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 127.269709][ T6507] BTRFS info (device loop3): enabling ssd optimizations [ 127.277130][ T6507] BTRFS info (device loop3): using spread ssd allocation scheme [ 127.285342][ T6507] BTRFS info (device loop3): using free space tree [ 127.419611][ T6507] BTRFS info (device loop3): auto enabling async discard [ 127.850037][ T5801] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 127.874785][ T6560] netlink: 24 bytes leftover after parsing attributes in process `syz.2.229'. [ 128.538765][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'. [ 128.713518][ T6571] loop1: detected capacity change from 0 to 8192 [ 128.764274][ T6571] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 128.857750][ T6571] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 128.919426][ T6571] REISERFS (device loop1): using ordered data mode [ 128.954506][ T6571] reiserfs: using flush barriers [ 129.038740][ T6571] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 129.124126][ T6571] REISERFS (device loop1): checking transaction log (loop1) [ 129.157125][ T6571] REISERFS (device loop1): Using r5 hash to sort names [ 129.185818][ T6571] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 130.838943][ T6595] netlink: 'syz.3.243': attribute type 10 has an invalid length. [ 130.910189][ T28] audit: type=1326 audit(1756431304.038:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b8ebe9 code=0x7ffc0000 [ 130.950088][ T6595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.970191][ T6595] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 130.993703][ T28] audit: type=1326 audit(1756431304.068:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b8ebe9 code=0x7ffc0000 [ 131.020211][ T6596] bond0: entered promiscuous mode [ 131.030364][ T28] audit: type=1326 audit(1756431304.078:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc462b8ebe9 code=0x7ffc0000 [ 131.057518][ T6596] bond_slave_0: entered promiscuous mode [ 131.078486][ T6596] bond_slave_1: entered promiscuous mode [ 131.087634][ T28] audit: type=1326 audit(1756431304.098:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b8ebe9 code=0x7ffc0000 [ 131.116708][ T6596] batadv0: entered promiscuous mode [ 131.194394][ T28] audit: type=1326 audit(1756431304.098:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b8ebe9 code=0x7ffc0000 [ 131.248918][ T28] audit: type=1326 audit(1756431304.098:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fc462b8ebe9 code=0x7ffc0000 [ 131.326665][ T28] audit: type=1326 audit(1756431304.098:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b8ebe9 code=0x7ffc0000 [ 131.392781][ T28] audit: type=1326 audit(1756431304.098:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b8ebe9 code=0x7ffc0000 [ 131.452766][ T28] audit: type=1326 audit(1756431304.098:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc462b8ebe9 code=0x7ffc0000 [ 131.501957][ T28] audit: type=1326 audit(1756431304.298:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b8ebe9 code=0x7ffc0000 [ 131.955207][ T6616] tipc: Started in network mode [ 131.960953][ T6616] tipc: Node identity ac1414aa, cluster identity 4711 [ 131.982522][ T6616] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 131.997259][ T6616] tipc: Enabled bearer , priority 10 [ 132.063410][ T27] IPVS: starting estimator thread 0... [ 132.125325][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 132.133635][ T5851] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.239194][ T6614] loop1: detected capacity change from 0 to 40427 [ 132.259532][ T6614] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 132.267921][ T6614] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 132.274018][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 132.285234][ T6617] IPVS: using max 16 ests per chain, 38400 per kthread [ 132.317645][ T6614] F2FS-fs (loop1): invalid crc value [ 132.347819][ T6614] F2FS-fs (loop1): Found nat_bits in checkpoint [ 132.413321][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 132.429127][ T6614] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 132.436430][ T6614] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 132.544126][ T5851] usb 3-1: Using ep0 maxpacket: 16 [ 132.553217][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 132.582809][ T5851] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.627285][ T5851] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.693235][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 132.843192][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 133.093073][ T27] tipc: Node number set to 2886997162 [ 133.133188][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 133.237268][ T5851] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.253127][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.261689][ T5851] usb 3-1: Product: syz [ 133.266679][ T5851] usb 3-1: Manufacturer: syz [ 133.271501][ T5851] usb 3-1: SerialNumber: syz [ 133.384042][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.391511][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.413163][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 133.554352][ T5851] usb 3-1: 0:2 : does not exist [ 133.590002][ T5851] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 133.740763][ T5851] usb 3-1: USB disconnect, device number 3 [ 133.842617][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.943256][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.341595][ T6639] capability: warning: `syz.0.258' uses 32-bit capabilities (legacy support in use) [ 134.736615][ T6654] loop2: detected capacity change from 0 to 1024 [ 134.769640][ T6654] EXT4-fs: Ignoring removed orlov option [ 134.856803][ T6654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.022798][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.599398][ T6676] netlink: 'syz.0.271': attribute type 10 has an invalid length. [ 135.618996][ T6676] syz_tun: entered promiscuous mode [ 135.648722][ T6676] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 135.905020][ T6688] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.277'. [ 136.135792][ T5179] libceph: connect (1)[c::]:6789 error -101 [ 136.149080][ T5179] libceph: mon0 (1)[c::]:6789 connect error [ 136.249151][ T6693] ceph: No mds server is up or the cluster is laggy [ 136.494288][ T6709] netlink: 'syz.2.283': attribute type 10 has an invalid length. [ 136.523330][ T6709] syz_tun: entered promiscuous mode [ 136.567820][ T6709] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 136.824360][ T6719] netlink: 24 bytes leftover after parsing attributes in process `syz.3.286'. [ 136.938100][ T6703] loop0: detected capacity change from 0 to 32768 [ 136.965874][ T6703] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.282 (6703) [ 137.019359][ T6703] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 137.053153][ C1] net_ratelimit: 3 callbacks suppressed [ 137.053171][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 137.072265][ T6703] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 137.083264][ T6703] BTRFS info (device loop0): enabling auto defrag [ 137.100566][ T6703] BTRFS info (device loop0): doing ref verification [ 137.117227][ T6703] BTRFS info (device loop0): use no compression [ 137.133558][ T6703] BTRFS info (device loop0): force clearing of disk cache [ 137.151428][ T6703] BTRFS info (device loop0): max_inline at 57 [ 137.168376][ T6703] BTRFS info (device loop0): disabling free space tree [ 137.343445][ T6703] BTRFS info (device loop0): enabling ssd optimizations [ 137.367201][ T6703] BTRFS info (device loop0): auto enabling async discard [ 137.419431][ T6703] BTRFS info (device loop0): rebuilding free space tree [ 137.493668][ T6703] BTRFS info (device loop0): disabling free space tree [ 137.502289][ T6703] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 137.515235][ T6703] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 137.996463][ T6750] Zero length message leads to an empty skb [ 138.056720][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 138.056736][ T28] audit: type=1800 audit(1756431311.188:48): pid=6703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.282" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 138.093389][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 138.243677][ T27] libceph: connect (1)[c::]:6789 error -101 [ 138.249901][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 138.287190][ T6764] Bluetooth: hci0: unsupported parameter 65535 [ 138.293616][ T6764] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 138.347362][ T5791] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 138.421869][ T6759] ceph: No mds server is up or the cluster is laggy [ 138.806981][ T6773] netlink: 'syz.3.296': attribute type 10 has an invalid length. [ 139.133235][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 139.180598][ T6762] loop1: detected capacity change from 0 to 32768 [ 139.254719][ T6762] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.302 (6762) [ 139.325127][ T6762] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.366882][ T6762] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 139.382274][ T6783] loop0: detected capacity change from 0 to 1024 [ 139.403172][ T6762] BTRFS info (device loop1): setting nodatasum [ 139.420049][ T6783] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.433759][ T6762] BTRFS info (device loop1): enabling auto defrag [ 139.440961][ T6762] BTRFS info (device loop1): doing ref verification [ 139.491638][ T6762] BTRFS info (device loop1): force clearing of disk cache [ 139.501942][ T6783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.550500][ T6762] BTRFS info (device loop1): turning on sync discard [ 139.576488][ T6762] BTRFS info (device loop1): setting nodatacow, compression disabled [ 139.623358][ T6762] BTRFS info (device loop1): use zlib compression, level 3 [ 139.652370][ T6762] BTRFS info (device loop1): using free space tree [ 139.830776][ T6762] BTRFS info (device loop1): enabling ssd optimizations [ 139.872397][ T6762] BTRFS info (device loop1): rebuilding free space tree [ 139.925279][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.033240][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 140.090785][ T28] audit: type=1804 audit(1756431313.208:49): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.302" name="/newroot/66/bus/bus" dev="loop1" ino=263 res=1 errno=0 [ 140.169411][ T28] audit: type=1804 audit(1756431313.268:50): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.302" name="/newroot/66/bus/bus" dev="loop1" ino=263 res=1 errno=0 [ 140.193878][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 140.243271][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 140.274350][ T27] usb 4-1: config 0 has no interfaces? [ 140.289677][ T27] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 140.320273][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.354572][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 140.373426][ T27] usb 4-1: Product: syz [ 140.387603][ T27] usb 4-1: Manufacturer: syz [ 140.452114][ T27] usb 4-1: SerialNumber: syz [ 140.493955][ T27] usb 4-1: config 0 descriptor?? [ 140.585521][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.610956][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.636787][ T23] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 140.661983][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.703938][ T23] usb 1-1: config 0 descriptor?? [ 140.760269][ T5796] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 141.152677][ T23] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 141.160344][ T23] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 141.169445][ T23] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 141.178432][ T23] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 141.213201][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 141.221405][ T23] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 141.229714][ T23] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 141.249548][ T23] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 141.283784][ T23] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 141.328556][ T6813] loop1: detected capacity change from 0 to 16 [ 141.374689][ T6813] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 142735) [ 141.394722][ T23] cp2112 0003:10C4:EA90.0004: Part Number: 0x00 Device Version: 0x00 [ 142.000573][ T6807] cp2112 0003:10C4:EA90.0004: Error starting transaction: -38 [ 142.017604][ T23] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71 [ 142.038758][ T23] usb 1-1: USB disconnect, device number 5 [ 142.253190][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 142.621624][ T9] usb 4-1: USB disconnect, device number 6 [ 142.890360][ T6836] fuse: root generation should be zero [ 142.965260][ T6841] loop3: detected capacity change from 0 to 8192 [ 143.293170][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 143.371121][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 143.384305][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 143.637067][ T6860] netlink: 'syz.2.322': attribute type 10 has an invalid length. [ 143.714989][ T28] audit: type=1326 audit(1756431316.848:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e00b8ebe9 code=0x7ffc0000 [ 143.774254][ T6860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.781286][ T28] audit: type=1326 audit(1756431316.848:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e00b8ebe9 code=0x7ffc0000 [ 143.812247][ T6860] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 143.838441][ T28] audit: type=1326 audit(1756431316.848:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e00b8ebe9 code=0x7ffc0000 [ 143.851674][ T6863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.323'. [ 143.914572][ T28] audit: type=1326 audit(1756431316.848:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e00b8ebe9 code=0x7ffc0000 [ 143.944800][ T28] audit: type=1326 audit(1756431316.848:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f8e00b8ebe9 code=0x7ffc0000 [ 143.971155][ T28] audit: type=1326 audit(1756431316.848:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e00b8ebe9 code=0x7ffc0000 [ 144.009557][ T28] audit: type=1326 audit(1756431316.858:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e00b8ebe9 code=0x7ffc0000 [ 144.033149][ T28] audit: type=1326 audit(1756431316.888:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8e00b8ebe9 code=0x7ffc0000 [ 144.086762][ T6864] bond0: entered promiscuous mode [ 144.092071][ T6864] bond_slave_0: entered promiscuous mode [ 144.105473][ T6864] bond_slave_1: entered promiscuous mode [ 144.119672][ T6864] batadv0: entered promiscuous mode [ 144.186846][ T28] audit: type=1326 audit(1756431317.308:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e00b8ebe9 code=0x7ffc0000 [ 144.229911][ T28] audit: type=1326 audit(1756431317.308:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e00b8ebe9 code=0x7ffc0000 [ 144.333186][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 144.559035][ T6884] bridge: RTM_NEWNEIGH with invalid ether address [ 144.704275][ T6879] mmap: syz.1.327 (6879) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 145.373210][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 145.778388][ T6905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.336'. [ 146.413204][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 146.582450][ T6917] netlink: 'syz.0.339': attribute type 10 has an invalid length. [ 146.687716][ T6917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.772043][ T6917] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 146.857037][ T6919] bond0: entered promiscuous mode [ 146.862519][ T6919] bond_slave_0: entered promiscuous mode [ 146.913579][ T6919] bond_slave_1: entered promiscuous mode [ 146.931808][ T6919] batadv0: entered promiscuous mode [ 147.100917][ T6927] loop2: detected capacity change from 0 to 256 [ 147.180146][ T6927] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.223965][ T6927] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 147.291473][ T6927] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 147.455461][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 147.523125][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 147.714813][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.737043][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.788915][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 147.812764][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.844011][ T9] usb 1-1: config 0 descriptor?? [ 148.493179][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 148.603094][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 148.819639][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.849999][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.879412][ T23] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 148.903179][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.936020][ T23] usb 4-1: config 0 descriptor?? [ 149.120049][ T9] uclogic 0003:256C:006D.0005: v1 frame probing failed: -71 [ 149.143670][ T9] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 149.172400][ T9] uclogic: probe of 0003:256C:006D.0005 failed with error -71 [ 149.213470][ T9] usb 1-1: USB disconnect, device number 6 [ 149.428683][ T23] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 149.463321][ T23] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 149.470940][ T23] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 149.503113][ T23] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 149.510517][ T23] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 149.533190][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 149.540839][ T23] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 149.548235][ T23] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 149.564873][ T23] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 149.674163][ T23] cp2112 0003:10C4:EA90.0006: Part Number: 0x00 Device Version: 0x00 [ 150.240595][ T6933] loop1: detected capacity change from 0 to 131072 [ 150.285659][ T6933] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-4) [ 150.306598][ T6952] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 150.359208][ T23] cp2112 0003:10C4:EA90.0006: error reading lock byte: -71 [ 150.393852][ T23] usb 4-1: USB disconnect, device number 7 [ 150.573153][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 150.813171][ T5864] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 151.613172][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 151.742370][ T6988] loop3: detected capacity change from 0 to 128 [ 152.277964][ T7006] loop0: detected capacity change from 0 to 1024 [ 152.296897][ T7004] loop1: detected capacity change from 0 to 1024 [ 152.307387][ T7006] EXT4-fs: Ignoring removed oldalloc option [ 152.352578][ T7006] EXT4-fs: Ignoring removed bh option [ 152.375913][ T7006] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.394946][ T7008] loop2: detected capacity change from 0 to 7 [ 152.407259][ T5808] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 152.445458][ T7008] loop2: [ 152.465827][ T7008] loop2: partition table partially beyond EOD, truncated [ 152.500219][ T7006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.653199][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 152.693843][ T7006] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:427: inode #2: comm syz.0.375: No space for directory leaf checksum. Please run e2fsck -D. [ 152.742063][ T7006] EXT4-fs error (device loop0): ext4_validate_inode_bitmap:106: comm syz.0.375: Corrupt inode bitmap - block_group = 0, inode_bitmap = 4 [ 152.780820][ T7006] EXT4-fs error (device loop0) in ext4_free_inode:363: Filesystem failed CRC [ 152.901955][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.915152][ T7018] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 153.594548][ T7032] overlayfs: failed to clone upperpath [ 153.693164][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 154.112231][ T7039] overlayfs: failed to clone upperpath [ 154.733243][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 155.466419][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'. [ 155.478441][ T7080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.516785][ T7080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.547013][ T7080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.561469][ T7080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.673671][ T7080] bond0: (slave batadv0): Releasing backup interface [ 155.735489][ T7080] batadv0 (unregistering): left promiscuous mode [ 155.773499][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 155.846285][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'. [ 155.866941][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.403'. [ 156.813191][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 157.015106][ T7112] [U] [ 157.019291][ T7112] [U] [ 157.022636][ T7112] [U] [ 157.025644][ T7112] [U] [ 157.028470][ T7112] [U] [ 157.031530][ T7112] [U] [ 157.034490][ T7112] [U] [ 157.037335][ T7112] [U] [ 157.040471][ T7112] [U] [ 157.043444][ T7112] [U] [ 157.046136][ T7112] [U] [ 157.052379][ T7111] [U] [ 157.250553][ T7098] loop3: detected capacity change from 0 to 32768 [ 157.282728][ T7098] (syz.3.408,7098,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 157.315485][ T7098] (syz.3.408,7098,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 157.379460][ T7098] JBD2: Ignoring recovery information on journal [ 157.546740][ T7098] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 157.682043][ T7098] ocfs2: Unmounting device (7,3) on (node local) [ 157.853186][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 158.298867][ T7139] loop1: detected capacity change from 0 to 40427 [ 158.322576][ T7139] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 158.341519][ T7139] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 158.397085][ T7139] F2FS-fs (loop1): Found nat_bits in checkpoint [ 158.533963][ T7139] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 158.568519][ T7139] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 158.576133][ T7139] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 158.715229][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 158.715246][ T28] audit: type=1800 audit(1756431331.848:70): pid=7139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.416" name="bus" dev="loop1" ino=11 res=0 errno=0 [ 158.893190][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 159.195902][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.429'. [ 159.934843][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 160.337104][ T7199] netlink: 'syz.1.436': attribute type 10 has an invalid length. [ 160.366664][ T7199] netlink: 40 bytes leftover after parsing attributes in process `syz.1.436'. [ 160.403503][ T7199] batadv0: entered promiscuous mode [ 160.411950][ T7199] batadv0: entered allmulticast mode [ 160.440294][ T7199] bridge0: port 3(batadv0) entered blocking state [ 160.483506][ T7199] bridge0: port 3(batadv0) entered disabled state [ 160.539044][ T7199] bridge0: port 3(batadv0) entered blocking state [ 160.546588][ T7199] bridge0: port 3(batadv0) entered forwarding state [ 160.699826][ T7206] fuse: Bad value for 'fd' [ 160.764742][ T3456] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 160.775070][ T3456] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 160.973182][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 161.521618][ T7200] loop1: detected capacity change from 0 to 40427 [ 161.582626][ T7200] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x7 [ 161.608954][ T7200] F2FS-fs (loop1): invalid crc value [ 161.634319][ T7200] F2FS-fs (loop1): Found nat_bits in checkpoint [ 161.731782][ T7200] F2FS-fs (loop1): Start checkpoint disabled! [ 161.750710][ T7200] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 162.023131][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 162.363970][ T5865] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 162.453949][ T7212] overlayfs: failed to clone upperpath [ 162.522455][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.453'. [ 162.584752][ T5865] usb 2-1: Using ep0 maxpacket: 32 [ 162.609612][ T5865] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 162.630971][ T5865] usb 2-1: config 0 has no interface number 0 [ 162.642626][ T7235] vlan2: entered allmulticast mode [ 162.657495][ T7235] bond1: entered allmulticast mode [ 162.658937][ T5865] usb 2-1: config 0 interface 12 has no altsetting 0 [ 162.682837][ T5865] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 162.697846][ T5865] usb 2-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 162.708414][ T5865] usb 2-1: Product: syz [ 162.714630][ T5865] usb 2-1: Manufacturer: syz [ 162.719595][ T5865] usb 2-1: SerialNumber: syz [ 162.749748][ T5865] usb 2-1: config 0 descriptor?? [ 162.790575][ T5795] bond0: (slave syz_tun): Releasing backup interface [ 162.904647][ T7242] lo: entered allmulticast mode [ 162.920529][ T7241] lo: left allmulticast mode [ 163.053323][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 163.612614][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 163.637402][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.646759][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.655786][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.665747][ T5806] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 163.674809][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 164.093195][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 164.111972][ T7255] chnl_net:caif_netlink_parms(): no params data found [ 164.462151][ T7255] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.485000][ T7255] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.502846][ T7255] bridge_slave_0: entered allmulticast mode [ 164.512233][ T7255] bridge_slave_0: entered promiscuous mode [ 164.530159][ T7255] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.549131][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.563400][ T7255] bridge_slave_1: entered allmulticast mode [ 164.579656][ T7255] bridge_slave_1: entered promiscuous mode [ 164.623371][ T5865] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 164.643130][ T5865] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 164.651211][ T5865] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 164.661722][ T5865] f81534: probe of 2-1:0.12 failed with error -71 [ 164.702925][ T7255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.736021][ T5865] usb 2-1: USB disconnect, device number 4 [ 164.772276][ T7255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.881216][ T7255] team0: Port device team_slave_0 added [ 164.898404][ T7255] team0: Port device team_slave_1 added [ 164.957093][ T7255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.970155][ T7255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.017430][ T7255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.042361][ T7255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.051619][ T7255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.088154][ T7255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.133269][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 165.168894][ T7255] hsr_slave_0: entered promiscuous mode [ 165.184215][ T7255] hsr_slave_1: entered promiscuous mode [ 165.195741][ T7255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.204717][ T7255] Cannot create hsr debugfs directory [ 165.320721][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'. [ 165.366823][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.470'. [ 165.511142][ T7289] netlink: 'syz.1.472': attribute type 2 has an invalid length. [ 165.693220][ T5806] Bluetooth: hci2: command tx timeout [ 165.716093][ T5806] Bluetooth: hci0: Invalid handle: 0x1300 > 0x0eff [ 165.763400][ T7255] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 165.778253][ T7255] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 165.841136][ T7255] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 165.857086][ T7255] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 165.931031][ T7304] netlink: 20 bytes leftover after parsing attributes in process `syz.3.477'. [ 166.025085][ T7308] netlink: 60 bytes leftover after parsing attributes in process `syz.1.476'. [ 166.053492][ T7308] unsupported nlmsg_type 40 [ 166.173302][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 166.248678][ T7255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.321532][ T7255] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.369131][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.376765][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.452317][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.460734][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.637560][ T7255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.213331][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 167.236563][ T7329] bond0: (slave batadv0): Releasing backup interface [ 167.253978][ T7329] batadv0: left promiscuous mode [ 167.286787][ T7329] bridge_slave_0: left promiscuous mode [ 167.293812][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.332832][ T7329] bridge_slave_1: left allmulticast mode [ 167.342217][ T7329] bridge_slave_1: left promiscuous mode [ 167.352746][ T7329] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.369479][ T7329] bond0: (slave bond_slave_0): Releasing backup interface [ 167.380677][ T7329] bond_slave_0: left promiscuous mode [ 167.433905][ T7329] bond0: (slave bond_slave_1): Releasing backup interface [ 167.444689][ T7329] bond_slave_1: left promiscuous mode [ 167.529912][ T7329] team0: Port device team_slave_0 removed [ 167.566365][ T7329] team0: Port device team_slave_1 removed [ 167.577224][ T7329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.594083][ T7329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.610299][ T7329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.633201][ T7329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.681688][ T7339] loop1: detected capacity change from 0 to 8192 [ 167.760458][ T7255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.770625][ T7339] loop1: p1 < > p3 < p5 > p4 [ 167.778128][ T5806] Bluetooth: hci2: command tx timeout [ 167.788409][ T7339] loop1: partition table partially beyond EOD, truncated [ 167.825541][ T7339] loop1: p1 start 4294967040 is beyond EOD, truncated [ 168.253277][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 168.281104][ T6244] udevd[6244]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 168.284566][ T5808] udevd[5808]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 168.295603][ T5805] udevd[5805]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 168.705883][ T7255] veth0_vlan: entered promiscuous mode [ 168.736540][ T7255] veth1_vlan: entered promiscuous mode [ 168.929222][ T7255] veth0_macvtap: entered promiscuous mode [ 168.975707][ T7255] veth1_macvtap: entered promiscuous mode [ 169.052200][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.088529][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.116941][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.142657][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.163401][ T7255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.224468][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.245524][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.293163][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 169.315131][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.359065][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.378751][ T7255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.395304][ T7255] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.438366][ T7255] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.474462][ T7255] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.493461][ T7255] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.708356][ T2946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.721725][ T2946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.854013][ T5806] Bluetooth: hci2: command tx timeout [ 169.898326][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.924055][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.333472][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 171.373189][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 171.424983][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 171.693930][ T7398] Driver unsupported XDP return value 0 on prog (id 124) dev N/A, expect packet loss! [ 171.938232][ T5806] Bluetooth: hci2: command tx timeout [ 172.413226][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 172.436998][ T7400] loop4: detected capacity change from 0 to 32768 [ 172.469215][ T7400] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.509 (7400) [ 172.521137][ T7400] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 172.546479][ T7400] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 172.567051][ T7400] BTRFS info (device loop4): force zlib compression, level 3 [ 172.576307][ T7400] BTRFS info (device loop4): force clearing of disk cache [ 172.584883][ T7400] BTRFS info (device loop4): setting nodatasum [ 172.594068][ T7400] BTRFS info (device loop4): allowing degraded mounts [ 172.602811][ T7400] BTRFS info (device loop4): enabling disk space caching [ 172.612002][ T7400] BTRFS info (device loop4): disk space caching is enabled [ 172.814200][ T7400] BTRFS info (device loop4): auto enabling async discard [ 172.844442][ T7400] BTRFS info (device loop4): rebuilding free space tree [ 172.912678][ T7400] BTRFS info (device loop4): disabling free space tree [ 172.932749][ T7400] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 172.955190][ T7400] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 173.093483][ T7424] cgroup: fork rejected by pids controller in /syz0 [ 173.317286][ T7255] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 173.453182][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 174.330710][ T7492] netlink: 36 bytes leftover after parsing attributes in process `syz.1.525'. [ 174.493183][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 174.629548][ T7478] loop0: detected capacity change from 0 to 32768 [ 174.673999][ T7478] XFS: noikeep mount option is deprecated. [ 174.746141][ T7478] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.016901][ T7478] XFS (loop0): Ending clean mount [ 175.051501][ T7478] XFS (loop0): Quotacheck needed: Please wait. [ 175.242397][ T7478] XFS (loop0): Quotacheck: Done. [ 175.543171][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 175.892850][ T28] audit: type=1800 audit(1756431349.018:71): pid=7478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.521" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 176.034039][ T28] audit: type=1804 audit(1756431349.158:72): pid=7478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.521" name="/newroot/125/bus/bus" dev="loop0" ino=9291 res=1 errno=0 [ 176.174311][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 176.238147][ T5791] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 176.573279][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 177.623167][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 178.292667][ T7555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'. [ 178.403814][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.547'. [ 178.653193][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 178.774211][ T7560] netlink: 40 bytes leftover after parsing attributes in process `syz.1.548'. [ 179.037092][ T7565] loop0: detected capacity change from 0 to 8 [ 179.146515][ T7565] SQUASHFS error: zlib decompression failed, data probably corrupt [ 179.193130][ T7565] SQUASHFS error: Failed to read block 0x9b: -5 [ 179.215663][ T7565] SQUASHFS error: Unable to read metadata cache entry [99] [ 179.243217][ T7565] SQUASHFS error: Unable to read inode 0x127 [ 179.693204][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 179.896840][ T7565] loop0: detected capacity change from 0 to 32768 [ 179.944920][ T7565] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 179.954136][ T7565] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 180.003562][ T7565] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 180.033764][ T27] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 180.041587][ T27] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 180.115161][ T27] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 73ms [ 180.136937][ T27] gfs2: fsid=syz:syz.0: jid=0: Done [ 180.144816][ T7565] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 180.734590][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 181.253442][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 181.444119][ T27] usb 2-1: too many configurations: 13, using maximum allowed: 8 [ 181.468987][ T27] usb 2-1: config 0 has no interfaces? [ 181.479931][ T27] usb 2-1: config 0 has no interfaces? [ 181.497541][ T27] usb 2-1: config 0 has no interfaces? [ 181.507717][ T27] usb 2-1: config 0 has no interfaces? [ 181.517935][ T27] usb 2-1: config 0 has no interfaces? [ 181.528078][ T27] usb 2-1: config 0 has no interfaces? [ 181.542717][ T27] usb 2-1: config 0 has no interfaces? [ 181.554590][ T27] usb 2-1: config 0 has no interfaces? [ 181.566108][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.583796][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.606497][ T27] usb 2-1: Product: syz [ 181.611056][ T27] usb 2-1: Manufacturer: syz [ 181.620784][ T27] usb 2-1: SerialNumber: syz [ 181.637780][ T27] usb 2-1: config 0 descriptor?? [ 181.773160][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 181.912925][ T5864] usb 2-1: USB disconnect, device number 5 [ 182.054065][ T7609] macvlan0: entered allmulticast mode [ 182.074801][ T7609] veth1_vlan: entered allmulticast mode [ 182.129898][ T7609] team0: Port device macvlan0 added [ 182.483193][ T27] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 182.623475][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 182.685462][ T27] usb 5-1: config 0 has no interfaces? [ 182.699252][ T27] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 182.719821][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.753463][ T27] usb 5-1: Product: syz [ 182.757724][ T27] usb 5-1: Manufacturer: syz [ 182.764236][ T27] usb 5-1: SerialNumber: syz [ 182.781939][ T27] usb 5-1: config 0 descriptor?? [ 182.813398][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 182.867776][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 182.877338][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 182.905011][ T8] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 182.924127][ T8] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 182.933118][ T8] usb 2-1: Product: syz [ 182.937831][ T8] usb 2-1: Manufacturer: syz [ 182.944018][ T8] usb 2-1: SerialNumber: syz [ 182.962434][ T8] usb 2-1: config 0 descriptor?? [ 183.079137][ T7588] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 183.335516][ T5179] usb 5-1: USB disconnect, device number 2 [ 183.853161][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 184.470659][ T7628] loop0: detected capacity change from 0 to 32768 [ 184.689495][ T7628] syz.0.574: attempt to access beyond end of device [ 184.689495][ T7628] loop0: rw=0, sector=67109120, nr_sectors = 8 limit=32768 [ 184.705012][ T7628] metapage_read_end_io: I/O error [ 184.711365][ T7628] read_mapping_page failed! [ 184.716652][ T7628] jfs_mount: diMount failed w/rc = -5 [ 184.726490][ T7628] Mount JFS Failure: -5 [ 184.730768][ T7628] jfs_mount failed w/return code = -5 [ 184.893162][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 184.968454][ T7633] loop4: detected capacity change from 0 to 1024 [ 185.016230][ T7633] EXT4-fs: Ignoring removed orlov option [ 185.077123][ T5865] usb 2-1: USB disconnect, device number 6 [ 185.828791][ T6244] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 185.933173][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 186.587226][ T7637] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 186.633209][ T5806] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 186.644022][ T5806] Bluetooth: hci0: Injecting HCI hardware error event [ 186.655492][ T5806] Bluetooth: hci0: hardware error 0x00 [ 186.724848][ T7633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.944426][ T28] audit: type=1800 audit(1756431360.078:73): pid=7633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.575" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 186.973139][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 187.085287][ T28] audit: type=1804 audit(1756431360.088:74): pid=7646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.575" name="/newroot/19/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 187.209642][ T7255] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.611158][ T7664] kvm: pic: non byte write [ 187.844018][ T7671] netlink: 240 bytes leftover after parsing attributes in process `syz.1.586'. [ 188.013159][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 188.043538][ T7654] ceph: No mds server is up or the cluster is laggy [ 188.050944][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 188.068853][ T7679] loop4: detected capacity change from 0 to 1764 [ 188.083357][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 188.733787][ T5806] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 189.053156][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 189.080254][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.595'. [ 189.125988][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.595'. [ 190.093146][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.276701][ T7730] loop0: detected capacity change from 0 to 512 [ 190.311026][ T7730] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 190.332100][ T7730] EXT4-fs (loop0): invalid journal inode [ 190.340684][ T7730] EXT4-fs (loop0): can't get journal size [ 190.388497][ T7730] EXT4-fs (loop0): 1 truncate cleaned up [ 190.397950][ T7730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.683141][ T7733] loop0: detected capacity change from 512 to 2 [ 190.692093][ T7724] loop4: detected capacity change from 0 to 40427 [ 190.732125][ T7724] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 190.749374][ T7730] syz.0.610: attempt to access beyond end of device [ 190.749374][ T7730] loop0: rw=14337, sector=74, nr_sectors = 2 limit=2 [ 190.760235][ T7724] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 190.794376][ T7730] Buffer I/O error on dev loop0, logical block 37, lost sync page write [ 190.815143][ T7732] ext4lazyinit: attempt to access beyond end of device [ 190.815143][ T7732] loop0: rw=2057, sector=10, nr_sectors = 16 limit=2 [ 190.817591][ T7730] EXT4-fs error (device loop0): ext4_alloc_branch:385: inode #13: block 37: comm syz.0.610: IO error syncing itable block [ 190.849503][ T7732] ext4lazyinit: attempt to access beyond end of device [ 190.849503][ T7732] loop0: rw=2049, sector=10, nr_sectors = 16 limit=2 [ 190.878363][ T7724] F2FS-fs (loop4): invalid crc value [ 190.884530][ T7730] syz.0.610: attempt to access beyond end of device [ 190.884530][ T7730] loop0: rw=145409, sector=2, nr_sectors = 2 limit=2 [ 190.900277][ T7730] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 190.911155][ T7730] EXT4-fs (loop0): I/O error while writing superblock [ 190.927275][ T7724] F2FS-fs (loop4): Found nat_bits in checkpoint [ 190.938116][ T7730] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm syz.0.610: Error while async write back metadata [ 190.975345][ T7730] syz.0.610: attempt to access beyond end of device [ 190.975345][ T7730] loop0: rw=145409, sector=2, nr_sectors = 2 limit=2 [ 191.012404][ T7730] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 191.032359][ T7730] EXT4-fs (loop0): I/O error while writing superblock [ 191.046272][ T7730] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm syz.0.610: Error while async write back metadata [ 191.066874][ T7724] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 191.078114][ T7730] syz.0.610: attempt to access beyond end of device [ 191.078114][ T7730] loop0: rw=145409, sector=2, nr_sectors = 2 limit=2 [ 191.097404][ T7724] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 191.123106][ T7730] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 191.133365][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 191.180586][ T7730] EXT4-fs (loop0): I/O error while writing superblock [ 191.220210][ T7730] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm syz.0.610: Error while async write back metadata [ 191.235175][ T7730] syz.0.610: attempt to access beyond end of device [ 191.235175][ T7730] loop0: rw=145409, sector=2, nr_sectors = 2 limit=2 [ 191.249138][ T7730] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 191.258069][ T7730] EXT4-fs (loop0): I/O error while writing superblock [ 191.284313][ T7730] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm syz.0.610: Error while async write back metadata [ 191.307763][ T7730] syz.0.610: attempt to access beyond end of device [ 191.307763][ T7730] loop0: rw=145409, sector=2, nr_sectors = 2 limit=2 [ 191.328743][ T28] audit: type=1804 audit(1756431364.418:75): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.607" name="/newroot/24/file0/bus" dev="loop4" ino=10 res=1 errno=0 [ 191.335836][ T7730] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 191.366787][ T7730] EXT4-fs (loop0): I/O error while writing superblock [ 191.395632][ T7730] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm syz.0.610: Error while async write back metadata [ 191.432728][ T7730] syz.0.610: attempt to access beyond end of device [ 191.432728][ T7730] loop0: rw=145409, sector=2, nr_sectors = 2 limit=2 [ 191.452236][ T7730] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 191.502440][ T7730] EXT4-fs (loop0): I/O error while writing superblock [ 191.516122][ T7730] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm syz.0.610: Error while async write back metadata [ 191.548314][ T7730] syz.0.610: attempt to access beyond end of device [ 191.548314][ T7730] loop0: rw=145409, sector=2, nr_sectors = 2 limit=2 [ 191.562663][ T7730] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 191.575363][ T7730] EXT4-fs (loop0): I/O error while writing superblock [ 191.584471][ T7730] EXT4-fs error (device loop0): mb_free_blocks:1938: group 0, inode 13: block 49:freeing already freed block (bit 48); block bitmap corrupt. [ 191.603330][ T7730] EXT4-fs (loop0): pa ffff888078633658: logic 524, phys. 49, len 203 [ 191.611740][ T7730] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5372: group 0, free 203, pa_free 202 [ 191.624741][ T5865] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 191.643244][ T5865] EXT4-fs (loop0): I/O error while writing superblock [ 191.668016][ T7730] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm syz.0.610: Error while async write back metadata [ 191.703286][ T7730] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 191.714501][ T7730] EXT4-fs warning (device loop0): ext4_end_bio:357: I/O error 10 writing to inode 13 starting block 252) [ 191.727265][ T7730] Buffer I/O error on device loop0, logical block 252 [ 191.734974][ T7730] Buffer I/O error on device loop0, logical block 253 [ 191.742176][ T7730] Buffer I/O error on device loop0, logical block 254 [ 191.749505][ T7730] Buffer I/O error on device loop0, logical block 255 [ 191.758445][ T7730] EXT4-fs warning (device loop0): ext4_end_bio:357: I/O error 10 writing to inode 13 starting block 26) [ 191.770938][ T7730] Buffer I/O error on device loop0, logical block 26 [ 191.779266][ T7730] EXT4-fs warning (device loop0): ext4_end_bio:357: I/O error 10 writing to inode 13 starting block 38) [ 191.790977][ T7730] Buffer I/O error on device loop0, logical block 38 [ 191.798147][ T7730] Buffer I/O error on device loop0, logical block 39 [ 191.805047][ T7730] Buffer I/O error on device loop0, logical block 40 [ 191.819655][ T7730] Buffer I/O error on device loop0, logical block 41 [ 191.827027][ T7730] Buffer I/O error on device loop0, logical block 42 [ 191.970428][ T5791] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 192.173295][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.243428][ T5791] bond0: (slave syz_tun): Releasing backup interface [ 193.213263][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.344548][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.355736][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.366692][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.386394][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.395303][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 193.405206][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.905610][ T7780] chnl_net:caif_netlink_parms(): no params data found [ 194.114974][ T7780] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.122759][ T7780] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.142111][ T7780] bridge_slave_0: entered allmulticast mode [ 194.157722][ T7780] bridge_slave_0: entered promiscuous mode [ 194.170824][ T7780] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.180528][ T7780] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.188984][ T7780] bridge_slave_1: entered allmulticast mode [ 194.197233][ T7780] bridge_slave_1: entered promiscuous mode [ 194.253179][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.278238][ T7780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.302298][ T7780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.386813][ T7780] team0: Port device team_slave_0 added [ 194.412339][ T7780] team0: Port device team_slave_1 added [ 194.489196][ T7780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.502446][ T7780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.534330][ T7780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.549271][ T7780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.573251][ T7780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.576368][ T7802] input: syz0 as /devices/virtual/input/input7 [ 194.641721][ T7780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.824765][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.831865][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.884370][ T7780] hsr_slave_0: entered promiscuous mode [ 194.904138][ T7780] hsr_slave_1: entered promiscuous mode [ 194.932095][ T7780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.943424][ T7780] Cannot create hsr debugfs directory [ 195.091355][ T7812] fuse: Bad value for 'fd' [ 195.293151][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 195.463139][ T5806] Bluetooth: hci0: command tx timeout [ 195.617767][ T7780] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 195.647543][ T7780] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 195.681854][ T7780] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 195.707091][ T7780] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 196.018964][ T7780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.080215][ T7780] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.126935][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.134190][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.199051][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.206788][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.333151][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.946961][ T7780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.374393][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 197.552595][ T5806] Bluetooth: hci0: command tx timeout [ 197.939056][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.644'. [ 198.413171][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 198.679243][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d4c6800: rx timeout, send abort [ 198.690945][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d4c6800: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 199.104676][ T7780] veth0_vlan: entered promiscuous mode [ 199.176468][ T7780] veth1_vlan: entered promiscuous mode [ 199.338534][ T7780] veth0_macvtap: entered promiscuous mode [ 199.409142][ T7780] veth1_macvtap: entered promiscuous mode [ 199.453139][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.470716][ T7851] loop1: detected capacity change from 0 to 2048 [ 199.535039][ T7780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.551405][ T7851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.586185][ T7780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.597087][ T7780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.608868][ T7780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.613979][ T5806] Bluetooth: hci0: command tx timeout [ 199.620011][ T7780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.636925][ T7780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.652007][ T7780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.704998][ T7780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.753200][ T7780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.777019][ T7780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.797451][ T7780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.803994][ T7851] EXT4-fs error (device loop1): ext4_xattr_ibody_get:653: inode #15: comm syz.1.647: corrupted in-inode xattr: bad magic number in in-inode xattr [ 199.809851][ T7780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.864869][ T7851] EXT4-fs error (device loop1): get_max_inline_xattr_value_size:69: inode #15: comm syz.1.647: corrupt xattr in inline inode [ 199.867601][ T7780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.897066][ T7780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.921317][ T7851] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.647: corrupted in-inode xattr: bad magic number in in-inode xattr [ 199.952908][ T7780] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.956712][ T7851] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: block 1803188595: comm syz.1.647: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 199.993563][ T7780] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.004879][ T7780] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.007832][ T7851] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 200.015776][ T7780] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.042397][ T7851] EXT4-fs (loop1): This should not happen!! Data will be lost [ 200.042397][ T7851] [ 200.164250][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025283800: rx timeout, send abort [ 200.172758][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025283c00: rx timeout, send abort [ 200.183119][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888025283800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 200.198170][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888025283c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 200.231368][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.284173][ T2946] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm kworker/u4:8: corrupted in-inode xattr: bad magic number in in-inode xattr [ 200.293136][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.330306][ T2980] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm kworker/u4:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 200.395164][ T5796] EXT4-fs (loop1): Inode 15 (ffff88805efe5000): i_reserved_data_blocks (1) not cleared! [ 200.417573][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.458637][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.651'. [ 200.493191][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.553638][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.567709][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.866593][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'. [ 201.195123][ T28] audit: type=1326 audit(1756431374.328:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.1.658" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88ad98ebe9 code=0x0 [ 201.533503][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 201.705029][ T5806] Bluetooth: hci0: command tx timeout [ 202.580132][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.751437][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880539e9400: rx timeout, send abort [ 202.759998][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880539e9400: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 203.615891][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.763099][ T785] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 203.923379][ T7907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.663'. [ 203.963761][ T785] usb 5-1: Using ep0 maxpacket: 16 [ 203.971605][ T785] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 203.983165][ T785] usb 5-1: config 0 has no interface number 0 [ 203.989714][ T785] usb 5-1: config 0 interface 41 has no altsetting 0 [ 204.000845][ T785] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 204.012317][ T785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.021480][ T785] usb 5-1: Product: syz [ 204.026756][ T785] usb 5-1: Manufacturer: syz [ 204.032142][ T785] usb 5-1: SerialNumber: syz [ 204.068391][ T785] usb 5-1: config 0 descriptor?? [ 204.082769][ T785] CoreChips: probe of 5-1:0.41 failed with error -22 [ 204.364246][ T9] usb 5-1: USB disconnect, device number 3 [ 204.386487][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880538dbc00: rx timeout, send abort [ 204.653230][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.894981][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880538dbc00: abort rx timeout. Force session deactivation [ 205.693421][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.736792][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 207.147161][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c5e7c00: rx timeout, send abort [ 207.155734][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806c5e7c00: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 207.160867][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 207.171197][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 207.300037][ T7949] loop5: detected capacity change from 0 to 512 [ 207.370554][ T7949] EXT4-fs (loop5): Test dummy encryption mode enabled [ 207.495417][ T7949] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 207.564610][ T7949] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 207.614177][ T7949] EXT4-fs (loop5): 1 truncate cleaned up [ 207.631787][ T7949] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.773141][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.143427][ T7949] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 208.234875][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806c0c5c00: rx timeout, send abort [ 208.243482][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806c0c5400: rx timeout, send abort [ 208.252347][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806c0c5c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 208.268597][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806c0c5400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 208.423480][ T7949] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 208.476795][ T7780] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.813180][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.297632][ T7991] veth1_vlan: left allmulticast mode [ 209.354451][ T7991] team0: Port device macvlan0 removed [ 209.403535][ T7994] netlink: 'syz.3.690': attribute type 10 has an invalid length. [ 209.449299][ T7994] bond0: left promiscuous mode [ 209.464365][ T7994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.474367][ T7994] team0: Failed to send port change of device bond0 via netlink (err -105) [ 209.515293][ T7994] team0: Failed to send options change via netlink (err -105) [ 209.539500][ T7994] team0: Port device bond0 added [ 209.596642][ T7997] netlink: 'syz.4.692': attribute type 1 has an invalid length. [ 209.724606][ T7997] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.833302][ T8011] loop5: detected capacity change from 0 to 256 [ 209.853262][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.879697][ T8000] bond1: (slave geneve2): making interface the new active one [ 209.902461][ T8011] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 209.915566][ T8011] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 209.941446][ T8000] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 209.972344][ T8011] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 209.997819][ T8003] bond1: entered promiscuous mode [ 210.053083][ T8003] geneve2: entered promiscuous mode [ 210.741421][ T8021] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 210.894641][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.496815][ T8037] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 211.933150][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.182332][ T8047] loop1: detected capacity change from 0 to 1024 [ 212.201823][ T8047] EXT4-fs: Ignoring removed oldalloc option [ 212.225911][ T8047] EXT4-fs: Ignoring removed bh option [ 212.260803][ T8047] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 212.340551][ T8047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.605677][ T8047] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:427: inode #2: comm syz.1.707: No space for directory leaf checksum. Please run e2fsck -D. [ 212.622709][ T8054] loop4: detected capacity change from 0 to 128 [ 212.641396][ T8047] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:106: comm syz.1.707: Corrupt inode bitmap - block_group = 0, inode_bitmap = 4 [ 212.683092][ T8047] EXT4-fs error (device loop1) in ext4_free_inode:363: Filesystem failed CRC [ 212.704618][ T5808] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 212.810400][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.973132][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.013496][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.053240][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.669047][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'. [ 215.924234][ T8112] loop5: detected capacity change from 0 to 1024 [ 215.952475][ T8112] hfsplus: unable to parse mount options [ 216.093348][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.192606][ T8116] loop4: detected capacity change from 0 to 1024 [ 216.202631][ T8116] EXT4-fs: Ignoring removed oldalloc option [ 216.219942][ T8116] EXT4-fs: Ignoring removed bh option [ 216.251770][ T8116] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 216.306892][ T8116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.422494][ T8116] EXT4-fs warning (device loop4): ext4_dirblock_csum_set:427: inode #2: comm syz.4.734: No space for directory leaf checksum. Please run e2fsck -D. [ 216.451062][ T8116] EXT4-fs error (device loop4): ext4_validate_inode_bitmap:106: comm syz.4.734: Corrupt inode bitmap - block_group = 0, inode_bitmap = 4 [ 216.507159][ T8116] EXT4-fs error (device loop4) in ext4_free_inode:363: Filesystem failed CRC [ 216.680712][ T7255] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.133183][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.116850][ T28] audit: type=1326 audit(1756431391.248:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbcf8ebe9 code=0x7ffc0000 [ 218.173167][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.188383][ T28] audit: type=1326 audit(1756431391.248:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0fbcf8ebe9 code=0x7ffc0000 [ 218.245475][ T28] audit: type=1326 audit(1756431391.248:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbcf8ebe9 code=0x7ffc0000 [ 218.313397][ T28] audit: type=1326 audit(1756431391.248:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0fbcf8ebe9 code=0x7ffc0000 [ 218.371271][ T28] audit: type=1326 audit(1756431391.248:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0fbcf8ec23 code=0x7ffc0000 [ 218.429225][ T28] audit: type=1326 audit(1756431391.488:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0fbcf8d69f code=0x7ffc0000 [ 218.634305][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.745'. [ 218.683663][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 218.690478][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 218.697494][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 218.704192][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 218.712632][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 218.720824][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 218.739955][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 218.748252][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 218.756265][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 218.764356][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 218.772666][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 218.780671][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 218.788827][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 218.797341][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 218.805870][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 218.814331][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 218.823347][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 218.831721][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 218.840369][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 218.849376][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 218.857934][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 218.866122][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 218.874757][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 218.883119][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 218.891342][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 218.895681][ T8142] loop4: detected capacity change from 0 to 32768 [ 218.899752][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 218.914953][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 218.924557][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 218.933221][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 218.933547][ T28] audit: type=1326 audit(1756431392.008:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0fbcf8ec77 code=0x7ffc0000 [ 218.941566][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 218.941666][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 218.980345][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 218.980727][ T8142] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.742 (8142) [ 218.991283][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 218.991307][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 218.991397][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 218.991413][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 218.991493][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 218.991507][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 218.991595][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 218.991610][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 218.991695][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 218.991708][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 218.991794][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.059367][ T28] audit: type=1326 audit(1756431392.018:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0fbcf8d550 code=0x7ffc0000 [ 219.061322][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.061439][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.095390][ T8142] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 219.118345][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.118478][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.118496][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.118582][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.118597][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.118682][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.118697][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.118780][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.118794][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.118887][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.118902][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.118991][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.119006][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.119093][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.119108][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.119195][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.119211][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.119296][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.119311][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.119400][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.119415][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.119497][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.141417][ T28] audit: type=1326 audit(1756431392.018:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fbcf8e7eb code=0x7ffc0000 [ 219.146980][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.147094][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.147108][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.147205][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.147220][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.147305][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.147320][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.147402][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.147416][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.147501][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.147516][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.147592][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.223166][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 219.223402][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.237911][ T28] audit: type=1326 audit(1756431392.058:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0fbcf8d84a code=0x7ffc0000 [ 219.239602][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.259382][ T8142] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 219.264173][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.264287][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.264304][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.264387][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.264403][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.264489][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.264503][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.264588][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.298665][ T8142] BTRFS info (device loop4): using free space tree [ 219.304571][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.304695][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.304710][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.304799][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.304814][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.304898][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.304913][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.305009][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.305024][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.305101][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.614638][ T8142] BTRFS info (device loop4): enabling ssd optimizations [ 219.622366][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.689937][ T8142] BTRFS info (device loop4): auto enabling async discard [ 219.924235][ T7255] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.253304][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.651762][ T8192] [U] [ 220.654511][ T8192] [U] [ 220.657316][ T8192] [U] [ 220.660125][ T8192] [U] [ 220.662879][ T8192] [U] [ 220.665655][ T8192] [U] [ 220.668348][ T8192] [U] [ 220.671086][ T8192] [U] [ 220.674388][ T8192] [U] [ 220.677444][ T8192] [U] [ 220.680366][ T8192] [U] [ 220.727556][ T8190] [U] [ 221.293150][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.675602][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 222.333243][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.961573][ T8218] loop1: detected capacity change from 0 to 32768 [ 223.373314][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.540060][ T8218] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 223.552451][ T8218] overlayfs: failed to set uuid (bus/file1, err=-1); falling back to uuid=null. [ 223.673814][ T5796] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 223.673814][ T5796] [ 223.714371][ T5796] ERROR: (device loop1): remounting filesystem as read-only [ 223.787837][ T8236] loop4: detected capacity change from 0 to 32768 [ 223.821269][ T8236] (syz.4.767,8236,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 223.851521][ T8236] (syz.4.767,8236,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 223.890655][ T8236] JBD2: Ignoring recovery information on journal [ 223.944080][ T8236] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 224.351495][ T8236] ocfs2: Unmounting device (7,4) on (node local) [ 224.413166][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.132817][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.779'. [ 225.145512][ T8269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.779'. [ 225.210378][ T8264] netlink: 'syz.4.777': attribute type 2 has an invalid length. [ 225.453162][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.503127][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.532452][ T8305] loop5: detected capacity change from 0 to 32768 [ 226.560326][ T8305] (syz.5.787,8305,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 226.747137][ T8305] (syz.5.787,8305,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 226.905599][ T8305] JBD2: Ignoring recovery information on journal [ 226.922092][ T8313] netlink: 'syz.3.790': attribute type 2 has an invalid length. [ 227.114483][ T8305] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 227.269733][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 227.269750][ T28] audit: type=1326 audit(1756431400.398:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.3.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b8ebe9 code=0x7ffc0000 [ 227.440012][ T28] audit: type=1326 audit(1756431400.448:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.3.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b8ebe9 code=0x7ffc0000 [ 227.533631][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.534945][ T28] audit: type=1326 audit(1756431400.448:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.3.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fc462b8ebe9 code=0x7ffc0000 [ 227.573607][ T28] audit: type=1326 audit(1756431400.448:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.3.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b8ebe9 code=0x7ffc0000 [ 227.620369][ T8305] ocfs2: Unmounting device (7,5) on (node local) [ 227.651722][ T28] audit: type=1326 audit(1756431400.448:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.3.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b8ebe9 code=0x7ffc0000 [ 227.707665][ T28] audit: type=1326 audit(1756431400.458:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.3.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fc462b8ebe9 code=0x7ffc0000 [ 227.752631][ T28] audit: type=1326 audit(1756431400.458:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.3.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b8ebe9 code=0x7ffc0000 [ 227.838893][ T28] audit: type=1326 audit(1756431400.458:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.3.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc462b8ebe9 code=0x7ffc0000 [ 227.904340][ T28] audit: type=1326 audit(1756431400.558:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.3.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b8ebe9 code=0x7ffc0000 [ 227.941671][ T28] audit: type=1326 audit(1756431400.558:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.3.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc462b8ebe9 code=0x7ffc0000 [ 228.573115][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.655531][ T8353] netlink: 64 bytes leftover after parsing attributes in process `syz.4.804'. [ 229.613288][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.922408][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.817'. [ 230.055044][ T8371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.817'. [ 230.467270][ T8379] loop1: detected capacity change from 0 to 128 [ 230.604237][ T785] Process accounting resumed [ 230.610824][ T785] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 230.637371][ T785] FAT-fs (loop1): Filesystem has been set read-only [ 230.660630][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.878266][ T8391] fuse: Bad value for 'fd' [ 231.240948][ T8403] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 231.307483][ T8405] netlink: 64 bytes leftover after parsing attributes in process `syz.1.831'. [ 231.693310][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.733251][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.470215][ T8449] cgroup: fork rejected by pids controller in /syz3 [ 233.773279][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.594885][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 234.594902][ T28] audit: type=1326 audit(1756431407.728:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbcf8ebe9 code=0x7ffc0000 [ 234.614823][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.846'. [ 234.661589][ T28] audit: type=1326 audit(1756431407.728:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbcf8ebe9 code=0x7ffc0000 [ 234.727987][ T28] audit: type=1326 audit(1756431407.728:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f0fbcf8ebe9 code=0x7ffc0000 [ 234.762559][ T28] audit: type=1326 audit(1756431407.728:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbcf8ebe9 code=0x7ffc0000 [ 234.796261][ T28] audit: type=1326 audit(1756431407.728:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbcf8ebe9 code=0x7ffc0000 [ 234.820491][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.833598][ T28] audit: type=1326 audit(1756431407.728:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f0fbcf8ebe9 code=0x7ffc0000 [ 234.857811][ T28] audit: type=1326 audit(1756431407.728:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbcf8ebe9 code=0x7ffc0000 [ 234.883428][ T28] audit: type=1326 audit(1756431407.728:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbcf8ebe9 code=0x7ffc0000 [ 234.947359][ T28] audit: type=1326 audit(1756431407.728:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0fbcf8ebe9 code=0x7ffc0000 [ 234.977588][ T28] audit: type=1326 audit(1756431407.788:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbcf8ebe9 code=0x7ffc0000 [ 235.203470][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'. [ 235.258968][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880254e9c00: rx timeout, send abort [ 235.280010][ T8512] netlink: 20 bytes leftover after parsing attributes in process `syz.3.844'. [ 235.759119][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802bb45000: rx timeout, send abort [ 235.768160][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880254e9c00: abort rx timeout. Force session deactivation [ 235.853317][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.268013][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802bb45000: abort rx timeout. Force session deactivation [ 236.893255][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.959387][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'. [ 237.860600][ T8589] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 237.933285][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 238.633419][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.875'. [ 238.683203][ T8601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.906890][ T8601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.973408][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 239.706715][ T8623] capability: warning: `syz.4.886' uses deprecated v2 capabilities in a way that may be insecure [ 240.013280][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.424598][ T8608] overlayfs: failed to resolve './file0': -2 [ 241.053133][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.155449][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.894'. [ 241.440920][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.895'. [ 241.478641][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.728172][ T8644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.093144][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 243.133163][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 243.804962][ T8692] netlink: 40 bytes leftover after parsing attributes in process `syz.4.909'. [ 244.173156][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.213127][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.594460][ T8719] netlink: 36 bytes leftover after parsing attributes in process `syz.3.918'. [ 245.657180][ T8723] fuse: Bad value for 'fd' [ 245.829712][ T8731] bridge0: port 3(batadv0) entered disabled state [ 245.899308][ T8731] bridge_slave_0: left allmulticast mode [ 245.906228][ T8731] bridge_slave_0: left promiscuous mode [ 245.940893][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.972249][ T8731] bridge_slave_1: left allmulticast mode [ 245.982887][ T8731] bridge_slave_1: left promiscuous mode [ 245.994459][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.050947][ T8731] bond0: (slave bond_slave_0): Releasing backup interface [ 246.071760][ T8731] bond0: (slave bond_slave_1): Releasing backup interface [ 246.213506][ T8731] team0: Port device team_slave_0 removed [ 246.232438][ T8731] team0: Port device team_slave_1 removed [ 246.253153][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 246.262660][ T8731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.277877][ T8731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.303945][ T8731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.312216][ T8731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.293212][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.306157][ T5797] Bluetooth: hci2: command tx timeout [ 248.333140][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.863923][ T8771] netlink: 240 bytes leftover after parsing attributes in process `syz.3.935'. [ 249.060179][ T8778] bridge_slave_0: left allmulticast mode [ 249.071252][ T8778] bridge_slave_0: left promiscuous mode [ 249.080508][ T8778] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.098718][ T8778] bridge_slave_1: left allmulticast mode [ 249.131690][ T8778] bridge_slave_1: left promiscuous mode [ 249.178295][ T8778] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.204895][ T8778] bond0: (slave bond_slave_0): Releasing backup interface [ 249.248752][ T8778] bond0: (slave bond_slave_1): Releasing backup interface [ 249.366334][ T8778] team0: Port device team_slave_0 removed [ 249.373148][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.400702][ T8778] team0: Port device team_slave_1 removed [ 249.414907][ T8778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.418003][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.5.942'. [ 249.425036][ T8778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.448469][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.5.942'. [ 249.462560][ T8778] bond1: (slave geneve2): Releasing active interface [ 249.470899][ T8778] geneve2: left promiscuous mode [ 250.423214][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.830369][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.953'. [ 250.956266][ T8816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.956'. [ 250.992601][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.956'. [ 251.081359][ T8824] netlink: 'syz.3.960': attribute type 8 has an invalid length. [ 251.206142][ T8830] overlayfs: failed to clone upperpath [ 251.228083][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 251.320445][ T8832] netlink: 'syz.5.963': attribute type 1 has an invalid length. [ 251.411018][ T8832] veth3: entered promiscuous mode [ 251.430496][ T8832] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 251.463118][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.505412][ T8838] ================================================================== [ 251.514161][ T8838] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2635/0x4510 [ 251.522448][ T8838] Read of size 1 at addr ffff88805e69e2f8 by task syz.1.965/8838 [ 251.530558][ T8838] [ 251.532914][ T8838] CPU: 1 PID: 8838 Comm: syz.1.965 Not tainted syzkaller #0 [ 251.540239][ T8838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 251.550601][ T8838] Call Trace: [ 251.553907][ T8838] [ 251.556903][ T8838] dump_stack_lvl+0x16c/0x230 [ 251.562152][ T8838] ? __lock_acquire+0x7c80/0x7c80 [ 251.567597][ T8838] ? show_regs_print_info+0x20/0x20 [ 251.573013][ T8838] ? load_image+0x3b0/0x3b0 [ 251.577645][ T8838] ? __virt_addr_valid+0x469/0x540 [ 251.582996][ T8838] print_report+0xac/0x220 [ 251.587639][ T8838] ? xfrm_state_find+0x2635/0x4510 [ 251.592905][ T8838] kasan_report+0x117/0x150 [ 251.597619][ T8838] ? xfrm_state_find+0x2635/0x4510 [ 251.603133][ T8838] xfrm_state_find+0x2635/0x4510 [ 251.608395][ T8838] ? xfrm_state_find+0x321/0x4510 [ 251.613477][ T8838] ? xfrm_sad_getinfo+0x170/0x170 [ 251.618557][ T8838] ? xfrm_resolve_and_create_bundle+0x6a9/0x2c20 [ 251.625029][ T8838] ? dst_release+0x79/0x1a0 [ 251.629864][ T8838] xfrm_resolve_and_create_bundle+0x727/0x2c20 [ 251.636348][ T8838] ? xfrm_policy_lookup_bytype+0x133/0x1070 [ 251.642753][ T8838] ? xfrm_expand_policies+0x690/0x690 [ 251.648351][ T8838] ? xfrm_policy_find_inexact_candidates+0x650/0x680 [ 251.655262][ T8838] ? xfrm_policy_lookup_bytype+0x1013/0x1070 [ 251.661817][ T8838] ? lockdep_hardirqs_on+0x98/0x150 [ 251.667264][ T8838] ? xfrm_policy_lookup_bytype+0x133/0x1070 [ 251.673302][ T8838] ? ip_route_output_key_hash+0x12f/0x340 [ 251.679593][ T8838] ? xfrm_expand_policies+0x41a/0x690 [ 251.685647][ T8838] xfrm_lookup_with_ifid+0x556/0x19c0 [ 251.691688][ T8838] ? __xfrm_sk_clone_policy+0x850/0x850 [ 251.697552][ T8838] ? ip_tunnel_siocdevprivate+0x11d/0x1c0 [ 251.703431][ T8838] ? make_kuid+0x1b1/0x640 [ 251.707981][ T8838] ? __put_user_ns+0x50/0x50 [ 251.712898][ T8838] xfrm_lookup_route+0x3c/0x1b0 [ 251.718090][ T8838] ipip6_tunnel_bind_dev+0x215/0x620 [ 251.723617][ T8838] ? ipip6_tunnel_ctl+0x9e0/0x9e0 [ 251.728787][ T8838] ? ipip6_tunnel_init+0xe2/0x600 [ 251.734106][ T8838] ipip6_tunnel_init+0xea/0x600 [ 251.739092][ T8838] register_netdevice+0x66c/0x1ae0 [ 251.744613][ T8838] ? netif_stacked_transfer_operstate+0x210/0x210 [ 251.757339][ T8838] ? __lock_acquire+0x7c80/0x7c80 [ 251.762547][ T8838] ? dev_addr_check+0x20/0x240 [ 251.767450][ T8838] ? ipip6_tunnel_create+0x81/0x2d0 [ 251.773033][ T8838] ipip6_tunnel_create+0x10c/0x2d0 [ 251.778281][ T8838] ipip6_tunnel_locate+0x518/0x730 [ 251.783624][ T8838] ? check_6rd+0x670/0x670 [ 251.788785][ T8838] ? bpf_lsm_capable+0x9/0x10 [ 251.793692][ T8838] ipip6_tunnel_ctl+0x6ae/0x9e0 [ 251.798693][ T8838] ip_tunnel_siocdevprivate+0x11d/0x1c0 [ 251.804476][ T8838] ? ip_tunnel_update+0xb10/0xb10 [ 251.809954][ T8838] ipip6_tunnel_siocdevprivate+0x349/0x15e0 [ 251.816370][ T8838] ? sit_tunnel_xmit+0x1f70/0x1f70 [ 251.821602][ T8838] ? __mutex_trylock_common+0x153/0x250 [ 251.827375][ T8838] ? trace_raw_output_contention_end+0xd0/0xd0 [ 251.833693][ T8838] ? rcu_is_watching+0x15/0xb0 [ 251.838864][ T8838] ? trace_contention_end+0x39/0xe0 [ 251.844365][ T8838] ? __mutex_lock+0x304/0xcc0 [ 251.849403][ T8838] ? full_name_hash+0x92/0xe0 [ 251.854333][ T8838] dev_ifsioc+0xae6/0xe20 [ 251.858845][ T8838] ? dev_ioctl+0x1170/0x1170 [ 251.863628][ T8838] ? dev_load+0x21/0x1f0 [ 251.867924][ T8838] ? dev_load+0x21/0x1f0 [ 251.872282][ T8838] dev_ioctl+0x87a/0x1170 [ 251.876819][ T8838] sock_ioctl+0x726/0x7a0 [ 251.881608][ T8838] ? sock_poll+0x3d0/0x3d0 [ 251.886333][ T8838] ? bpf_lsm_file_ioctl+0x9/0x10 [ 251.891619][ T8838] ? security_file_ioctl+0x80/0xa0 [ 251.897122][ T8838] ? sock_poll+0x3d0/0x3d0 [ 251.901854][ T8838] __se_sys_ioctl+0xfd/0x170 [ 251.906739][ T8838] do_syscall_64+0x55/0xb0 [ 251.911324][ T8838] ? clear_bhb_loop+0x40/0x90 [ 251.916666][ T8838] ? clear_bhb_loop+0x40/0x90 [ 251.921648][ T8838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.927782][ T8838] RIP: 0033:0x7f88ad98ebe9 [ 251.932498][ T8838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.953360][ T8838] RSP: 002b:00007f88ae774038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.962166][ T8838] RAX: ffffffffffffffda RBX: 00007f88adbb5fa0 RCX: 00007f88ad98ebe9 [ 251.974614][ T8838] RDX: 0000200000001040 RSI: 00000000000089f1 RDI: 0000000000000003 [ 251.983107][ T8838] RBP: 00007f88ada11e19 R08: 0000000000000000 R09: 0000000000000000 [ 251.992069][ T8838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.000779][ T8838] R13: 00007f88adbb6038 R14: 00007f88adbb5fa0 R15: 00007ffcff7b0268 [ 252.009240][ T8838] [ 252.012600][ T8838] [ 252.014940][ T8838] Allocated by task 7492: [ 252.019666][ T8838] kasan_set_track+0x4e/0x70 [ 252.024603][ T8838] __kasan_slab_alloc+0x6c/0x80 [ 252.029793][ T8838] slab_post_alloc_hook+0x6e/0x4d0 [ 252.035301][ T8838] kmem_cache_alloc+0x11e/0x2e0 [ 252.040267][ T8838] xfrm_state_alloc+0x22/0x2a0 [ 252.045400][ T8838] __find_acq_core+0x7d8/0x19d0 [ 252.050537][ T8838] xfrm_find_acq+0x6a/0x90 [ 252.054978][ T8838] xfrm_alloc_userspi+0x57a/0xa90 [ 252.060128][ T8838] xfrm_user_rcv_msg+0x596/0x870 [ 252.065345][ T8838] netlink_rcv_skb+0x216/0x480 [ 252.070245][ T8838] xfrm_netlink_rcv+0x79/0x90 [ 252.075261][ T8838] netlink_unicast+0x751/0x8d0 [ 252.080064][ T8838] netlink_sendmsg+0x8c1/0xbe0 [ 252.085108][ T8838] ____sys_sendmsg+0x5bf/0x950 [ 252.090689][ T8838] ___sys_sendmsg+0x220/0x290 [ 252.095485][ T8838] __se_sys_sendmsg+0x1a5/0x270 [ 252.100418][ T8838] do_syscall_64+0x55/0xb0 [ 252.105130][ T8838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.111249][ T8838] [ 252.113597][ T8838] The buggy address belongs to the object at ffff88805e69e000 [ 252.113597][ T8838] which belongs to the cache xfrm_state of size 848 [ 252.128374][ T8838] The buggy address is located 760 bytes inside of [ 252.128374][ T8838] freed 848-byte region [ffff88805e69e000, ffff88805e69e350) [ 252.142791][ T8838] [ 252.145217][ T8838] The buggy address belongs to the physical page: [ 252.151831][ T8838] page:ffffea000179a700 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805e69e000 pfn:0x5e69c [ 252.163675][ T8838] head:ffffea000179a700 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 252.172912][ T8838] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 252.181362][ T8838] page_type: 0xffffffff() [ 252.186341][ T8838] raw: 00fff00000000840 ffff88801d2ec140 0000000000000000 0000000000000001 [ 252.195392][ T8838] raw: ffff88805e69e000 0000000080100000 00000001ffffffff 0000000000000000 [ 252.204612][ T8838] page dumped because: kasan: bad access detected [ 252.211403][ T8838] page_owner tracks the page as allocated [ 252.217712][ T8838] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6045, tgid 6044 (syz.2.58), ts 99072856835, free_ts 98950845833 [ 252.238250][ T8838] post_alloc_hook+0x1cd/0x210 [ 252.243306][ T8838] get_page_from_freelist+0x195c/0x19f0 [ 252.248971][ T8838] __alloc_pages+0x1e3/0x460 [ 252.254014][ T8838] alloc_slab_page+0x5d/0x170 [ 252.258907][ T8838] new_slab+0x87/0x2e0 [ 252.263097][ T8838] ___slab_alloc+0xc6d/0x12f0 [ 252.267915][ T8838] kmem_cache_alloc+0x1b7/0x2e0 [ 252.272775][ T8838] xfrm_state_alloc+0x22/0x2a0 [ 252.277541][ T8838] xfrm_state_find+0x2944/0x4510 [ 252.282485][ T8838] xfrm_resolve_and_create_bundle+0x727/0x2c20 [ 252.288664][ T8838] xfrm_lookup_with_ifid+0x261/0x19c0 [ 252.294167][ T8838] xfrm_lookup_route+0x3c/0x1b0 [ 252.299042][ T8838] rawv6_sendmsg+0xd07/0x17f0 [ 252.304098][ T8838] ____sys_sendmsg+0x5bf/0x950 [ 252.309169][ T8838] ___sys_sendmsg+0x220/0x290 [ 252.314036][ T8838] __sys_sendmmsg+0x275/0x4a0 [ 252.318739][ T8838] page last free stack trace: [ 252.323414][ T8838] free_unref_page_prepare+0x7ce/0x8e0 [ 252.328993][ T8838] free_unref_page+0x32/0x2e0 [ 252.333830][ T8838] __slab_free+0x35e/0x410 [ 252.338340][ T8838] qlist_free_all+0x75/0xe0 [ 252.342969][ T8838] kasan_quarantine_reduce+0x143/0x160 [ 252.348551][ T8838] __kasan_slab_alloc+0x22/0x80 [ 252.353697][ T8838] slab_post_alloc_hook+0x6e/0x4d0 [ 252.359010][ T8838] kmem_cache_alloc_node+0x150/0x330 [ 252.364935][ T8838] __alloc_skb+0x108/0x2c0 [ 252.369667][ T8838] netlink_sendmsg+0x65b/0xbe0 [ 252.374445][ T8838] ____sys_sendmsg+0x5bf/0x950 [ 252.379416][ T8838] ___sys_sendmsg+0x220/0x290 [ 252.384119][ T8838] __se_sys_sendmsg+0x1a5/0x270 [ 252.389096][ T8838] do_syscall_64+0x55/0xb0 [ 252.393710][ T8838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.400034][ T8838] [ 252.402453][ T8838] Memory state around the buggy address: [ 252.408685][ T8838] ffff88805e69e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 252.417073][ T8838] ffff88805e69e200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 252.425540][ T8838] >ffff88805e69e280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 252.434161][ T8838] ^ [ 252.442660][ T8838] ffff88805e69e300: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 252.451022][ T8838] ffff88805e69e380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 252.459637][ T8838] ================================================================== [ 252.471672][ T8838] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 252.479186][ T8838] CPU: 0 PID: 8838 Comm: syz.1.965 Not tainted syzkaller #0 [ 252.486776][ T8838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.497300][ T8838] Call Trace: [ 252.500694][ T8838] [ 252.503836][ T8838] dump_stack_lvl+0x16c/0x230 [ 252.508904][ T8838] ? show_regs_print_info+0x20/0x20 [ 252.513198][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.521548][ T8838] ? load_image+0x3b0/0x3b0 [ 252.526597][ T8838] panic+0x2c0/0x710 [ 252.530721][ T8838] ? bpf_jit_dump+0xd0/0xd0 [ 252.535280][ T8838] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 252.541210][ T8838] ? _raw_spin_unlock+0x40/0x40 [ 252.546081][ T8838] ? print_memory_metadata+0x314/0x400 [ 252.551814][ T8838] ? xfrm_state_find+0x2635/0x4510 [ 252.556934][ T8838] check_panic_on_warn+0x84/0xa0 [ 252.561981][ T8838] ? xfrm_state_find+0x2635/0x4510 [ 252.567419][ T8838] end_report+0x6f/0x140 [ 252.571852][ T8838] kasan_report+0x128/0x150 [ 252.576634][ T8838] ? xfrm_state_find+0x2635/0x4510 [ 252.581925][ T8838] xfrm_state_find+0x2635/0x4510 [ 252.586918][ T8838] ? xfrm_state_find+0x321/0x4510 [ 252.592239][ T8838] ? xfrm_sad_getinfo+0x170/0x170 [ 252.597283][ T8838] ? xfrm_resolve_and_create_bundle+0x6a9/0x2c20 [ 252.604015][ T8838] ? dst_release+0x79/0x1a0 [ 252.608804][ T8838] xfrm_resolve_and_create_bundle+0x727/0x2c20 [ 252.615154][ T8838] ? xfrm_policy_lookup_bytype+0x133/0x1070 [ 252.621210][ T8838] ? xfrm_expand_policies+0x690/0x690 [ 252.627025][ T8838] ? xfrm_policy_find_inexact_candidates+0x650/0x680 [ 252.633986][ T8838] ? xfrm_policy_lookup_bytype+0x1013/0x1070 [ 252.640447][ T8838] ? lockdep_hardirqs_on+0x98/0x150 [ 252.645797][ T8838] ? xfrm_policy_lookup_bytype+0x133/0x1070 [ 252.651811][ T8838] ? ip_route_output_key_hash+0x12f/0x340 [ 252.658021][ T8838] ? xfrm_expand_policies+0x41a/0x690 [ 252.663410][ T8838] xfrm_lookup_with_ifid+0x556/0x19c0 [ 252.669052][ T8838] ? __xfrm_sk_clone_policy+0x850/0x850 [ 252.674862][ T8838] ? ip_tunnel_siocdevprivate+0x11d/0x1c0 [ 252.680736][ T8838] ? make_kuid+0x1b1/0x640 [ 252.685514][ T8838] ? __put_user_ns+0x50/0x50 [ 252.690300][ T8838] xfrm_lookup_route+0x3c/0x1b0 [ 252.695419][ T8838] ipip6_tunnel_bind_dev+0x215/0x620 [ 252.701285][ T8838] ? ipip6_tunnel_ctl+0x9e0/0x9e0 [ 252.706692][ T8838] ? ipip6_tunnel_init+0xe2/0x600 [ 252.712429][ T8838] ipip6_tunnel_init+0xea/0x600 [ 252.717379][ T8838] register_netdevice+0x66c/0x1ae0 [ 252.722769][ T8838] ? netif_stacked_transfer_operstate+0x210/0x210 [ 252.729475][ T8838] ? __lock_acquire+0x7c80/0x7c80 [ 252.734503][ T8838] ? dev_addr_check+0x20/0x240 [ 252.739380][ T8838] ? ipip6_tunnel_create+0x81/0x2d0 [ 252.744775][ T8838] ipip6_tunnel_create+0x10c/0x2d0 [ 252.749983][ T8838] ipip6_tunnel_locate+0x518/0x730 [ 252.755281][ T8838] ? check_6rd+0x670/0x670 [ 252.760147][ T8838] ? bpf_lsm_capable+0x9/0x10 [ 252.764933][ T8838] ipip6_tunnel_ctl+0x6ae/0x9e0 [ 252.769803][ T8838] ip_tunnel_siocdevprivate+0x11d/0x1c0 [ 252.775457][ T8838] ? ip_tunnel_update+0xb10/0xb10 [ 252.780678][ T8838] ipip6_tunnel_siocdevprivate+0x349/0x15e0 [ 252.787338][ T8838] ? sit_tunnel_xmit+0x1f70/0x1f70 [ 252.793298][ T8838] ? __mutex_trylock_common+0x153/0x250 [ 252.799773][ T8838] ? trace_raw_output_contention_end+0xd0/0xd0 [ 252.806618][ T8838] ? rcu_is_watching+0x15/0xb0 [ 252.811578][ T8838] ? trace_contention_end+0x39/0xe0 [ 252.816898][ T8838] ? __mutex_lock+0x304/0xcc0 [ 252.822195][ T8838] ? full_name_hash+0x92/0xe0 [ 252.827001][ T8838] dev_ifsioc+0xae6/0xe20 [ 252.831463][ T8838] ? dev_ioctl+0x1170/0x1170 [ 252.836767][ T8838] ? dev_load+0x21/0x1f0 [ 252.841377][ T8838] ? dev_load+0x21/0x1f0 [ 252.846042][ T8838] dev_ioctl+0x87a/0x1170 [ 252.850675][ T8838] sock_ioctl+0x726/0x7a0 [ 252.855666][ T8838] ? sock_poll+0x3d0/0x3d0 [ 252.860476][ T8838] ? bpf_lsm_file_ioctl+0x9/0x10 [ 252.866157][ T8838] ? security_file_ioctl+0x80/0xa0 [ 252.872029][ T8838] ? sock_poll+0x3d0/0x3d0 [ 252.876660][ T8838] __se_sys_ioctl+0xfd/0x170 [ 252.881436][ T8838] do_syscall_64+0x55/0xb0 [ 252.886007][ T8838] ? clear_bhb_loop+0x40/0x90 [ 252.891064][ T8838] ? clear_bhb_loop+0x40/0x90 [ 252.895929][ T8838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.902109][ T8838] RIP: 0033:0x7f88ad98ebe9 [ 252.906793][ T8838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.927395][ T8838] RSP: 002b:00007f88ae774038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.936055][ T8838] RAX: ffffffffffffffda RBX: 00007f88adbb5fa0 RCX: 00007f88ad98ebe9 [ 252.944990][ T8838] RDX: 0000200000001040 RSI: 00000000000089f1 RDI: 0000000000000003 [ 252.953692][ T8838] RBP: 00007f88ada11e19 R08: 0000000000000000 R09: 0000000000000000 [ 252.962046][ T8838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.970371][ T8838] R13: 00007f88adbb6038 R14: 00007f88adbb5fa0 R15: 00007ffcff7b0268 [ 252.978584][ T8838] [ 252.982185][ T8838] Kernel Offset: disabled [ 252.986683][ T8838] Rebooting in 86400 seconds..