last executing test programs: 56.761108249s ago: executing program 1 (id=1933): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x200040a0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00\x00\x008 '], 0x20) 56.562346736s ago: executing program 1 (id=1937): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x1c, r1, 0x5, 0x70bd26, 0x80, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x20000014) 56.370325644s ago: executing program 1 (id=1942): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$inet(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'dvmrp0\x00', 0x100}) r4 = socket(0xa, 0x800, 0x2) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x10, 0x3}, {}, {0xe, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xb, 0x3, 0x10000000, 0x2, 0xd03}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r7, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) epoll_create1(0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) 54.650782548s ago: executing program 1 (id=1948): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x104) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00') 54.370917757s ago: executing program 1 (id=1952): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 53.919573213s ago: executing program 1 (id=1957): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000180)=[r1, r1, r1]) setregid(0x0, r1) socket$inet(0x2, 0x2, 0x1) 53.422355874s ago: executing program 32 (id=1957): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000180)=[r1, r1, r1]) setregid(0x0, r1) socket$inet(0x2, 0x2, 0x1) 4.635983604s ago: executing program 5 (id=2293): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) ioprio_set$pid(0x2, 0x0, 0x6000) sendfile(r0, r0, 0x0, 0x7f03) 4.573482335s ago: executing program 5 (id=2294): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001150300ef000000040000000000000010000500000000002000000000000000"], 0x24, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f0000000380)={[0x4]}, 0x8) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.010024592s ago: executing program 3 (id=2301): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x73, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff003d3a00fc010000000000000000000000000001ff020000000000000000000000000001020190780000000060000000000011010000000000000000000000000000000100000000000000000000ffffe0000001330006d16600000017"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001"], 0xfdef) 2.671543089s ago: executing program 4 (id=2304): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) ioprio_set$pid(0x2, 0x0, 0x6000) sendfile(r0, r0, 0x0, 0x7f03) 2.67128335s ago: executing program 0 (id=2305): socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000003d40)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8001}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2.596163328s ago: executing program 2 (id=2306): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) write$P9_RREADDIR(r0, &(0x7f0000000080)={0xb, 0x29, 0x2, {0x6}}, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) 2.500984312s ago: executing program 3 (id=2307): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000010000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18010000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000002000000a00000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac14140c000000000000000000000000fc000000000000000000000000000001e0000001000000000000000000000000fe8000000000000000000000000000aa6c040000ffffffff0a4f0a0000000000000000000000ffff7f000001fc020000000000000000000000000000fc020000000400000000000001000001fc0200000000000008000000000000003c000000000000000a000a002c0013"], 0x118}}, 0x0) 2.50033125s ago: executing program 4 (id=2308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x6, 0x603, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.363972501s ago: executing program 3 (id=2309): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = inotify_init() openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x543180, 0x0) inotify_add_watch(r1, 0x0, 0x400017e) inotify_init1(0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, 0x0, 0x5000180) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(&(0x7f0000000340)=""/243, 0xf3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) connect$inet6(r7, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 2.341336751s ago: executing program 4 (id=2310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x598a, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x7}, 0x80, &(0x7f0000004900)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 1.741852241s ago: executing program 4 (id=2311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) 1.568170526s ago: executing program 0 (id=2312): socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1.437226527s ago: executing program 5 (id=2313): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000002060108000000000000000000000000050005000a00000005000100070000000500040000000000090002"], 0x68}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.43619813s ago: executing program 2 (id=2314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.435843323s ago: executing program 3 (id=2315): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)={0x5, 0x355, 0x509, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, "35cf52530599b474"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x51) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r2, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) close(r3) 1.314295764s ago: executing program 5 (id=2316): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)) gettid() timer_create(0x1, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = gettid() tkill(r1, 0x16) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x101, 0x1, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xa, 0xa}, {0xb, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r2, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.230986229s ago: executing program 0 (id=2317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}]}]}, 0x44}}, 0x0) 1.229445335s ago: executing program 2 (id=2318): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=@newtaction={0x84, 0x30, 0x127, 0x0, 0x10000, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x20000000, 0xffff, 0xbe35, 0x654, {0x59, 0x1, 0x8001, 0x7, 0x1, 0x80006}, {0x80, 0x0, 0x7, 0x9, 0x33a0, 0x6}, 0x6, 0x6, 0x7f}}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa, {0x0, 0x3f}}}}]}]}, 0x84}}, 0x40) 1.176917317s ago: executing program 3 (id=2319): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x402, 0x2a) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$nl_rdma(0x10, 0x3, 0x14) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) unshare(0x62040200) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x17) openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa4242, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) 1.087127752s ago: executing program 0 (id=2320): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) 1.085609972s ago: executing program 2 (id=2321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x598a, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x7}, 0x80, &(0x7f0000004900)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 1.006613972s ago: executing program 2 (id=2322): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x4004041}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000002580)=0x200000080000400) socket$inet(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 919.781737ms ago: executing program 2 (id=2323): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001150300ef000000040000000000000010000500000000002000000000000000"], 0x24, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f0000000380)={[0x4]}, 0x8) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 861.588223ms ago: executing program 3 (id=2324): setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 639.962275ms ago: executing program 4 (id=2325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffff1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x44}}, 0x0) 589.327214ms ago: executing program 0 (id=2326): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x200040a0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00\x00'], 0x20) 360.637068ms ago: executing program 0 (id=2327): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x26, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@typed={0x7, 0x3, 0x0, 0x0, @binary='G\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r1, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f0000000000)=""/4078, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 331.970492ms ago: executing program 5 (id=2328): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) 283.262828ms ago: executing program 4 (id=2329): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x3, 0x7b0, &(0x7f0000000f80)="$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") r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0'}, 0x14) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 0s ago: executing program 5 (id=2330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) socket(0x10, 0x80002, 0x4) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) kernel console output (not intermixed with test programs): sge=6 [ 168.938662][ T6717] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 169.012920][ T6717] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 169.075012][ T6717] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 169.227482][ T6717] wlan0 speed is unknown, defaulting to 1000 [ 169.274400][ T6717] wlan0 speed is unknown, defaulting to 1000 [ 169.425234][ T6717] wlan0 speed is unknown, defaulting to 1000 [ 169.457042][ T6717] wlan0 speed is unknown, defaulting to 1000 [ 169.477789][ T6717] wlan0 speed is unknown, defaulting to 1000 [ 171.050762][ T6738] netlink: 'syz.0.285': attribute type 1 has an invalid length. [ 171.075556][ T6738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.091184][ T6739] netlink: 868 bytes leftover after parsing attributes in process `syz.4.286'. [ 171.107453][ T6738] bond1: (slave veth0_to_bond): making interface the new active one [ 171.109059][ T6738] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 171.133740][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.285'. [ 171.161605][ T6742] netlink: 868 bytes leftover after parsing attributes in process `syz.4.286'. [ 171.173137][ T5729] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 171.283651][ T6746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.287'. [ 171.292960][ T6746] netlink: 'syz.2.287': attribute type 7 has an invalid length. [ 171.303854][ T6746] netlink: 'syz.2.287': attribute type 8 has an invalid length. [ 171.311931][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'. [ 171.329599][ T5729] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 171.340699][ T5729] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 171.340740][ T5729] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 171.340799][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.381914][ T6746] gretap0: entered promiscuous mode [ 171.389977][ T6746] gretap0: left promiscuous mode [ 171.395705][ T6749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.287'. [ 171.395758][ T6749] netlink: 'syz.2.287': attribute type 7 has an invalid length. [ 171.395772][ T6749] netlink: 'syz.2.287': attribute type 8 has an invalid length. [ 171.395783][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'. [ 171.450344][ T6749] gretap0: entered promiscuous mode [ 171.459962][ T6749] gretap0: left promiscuous mode [ 172.167302][ T6755] vivid-001: disconnect [ 173.643076][ T6731] vivid-001: reconnect [ 173.648163][ T5624] usb 4-1: USB disconnect, device number 12 [ 174.107828][ T6784] netlink: 'syz.2.299': attribute type 1 has an invalid length. [ 174.132358][ T6784] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.151643][ T6784] bond1: (slave veth0_to_bond): making interface the new active one [ 174.152537][ T6784] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 174.154331][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.299'. [ 176.446616][ T6796] loop2: detected capacity change from 0 to 7 [ 176.504621][ T6796] Dev loop2: unable to read RDB block 7 [ 176.506768][ T6796] loop2: unable to read partition table [ 176.549426][ T6796] loop2: partition table beyond EOD, truncated [ 176.549590][ T6796] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 178.304723][ T6809] netlink: zone id is out of range [ 178.305749][ T6809] netlink: get zone limit has 4 unknown bytes [ 180.990240][ T6835] fuse: Bad value for 'fd' [ 181.350128][ T6843] netlink: 20 bytes leftover after parsing attributes in process `syz.1.319'. [ 181.359490][ T6843] openvswitch: netlink: Flow actions attr not present in new flow. [ 184.621455][ T6875] netlink: 28 bytes leftover after parsing attributes in process `syz.4.328'. [ 185.374765][ T6888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.333'. [ 185.389056][ T6888] openvswitch: netlink: Flow actions attr not present in new flow. [ 186.581659][ T6903] netlink: zone id is out of range [ 186.582016][ T6903] netlink: get zone limit has 4 unknown bytes [ 188.238165][ T6916] wlan0 speed is unknown, defaulting to 1000 [ 190.235649][ T6931] netlink: 'syz.2.347': attribute type 1 has an invalid length. [ 190.245407][ T6930] xt_connbytes: Forcing CT accounting to be enabled [ 190.245591][ T6930] Cannot find set identified by id 0 to match [ 190.261787][ T6931] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.270871][ T6931] macvlan2: entered promiscuous mode [ 190.270885][ T6931] macvlan2: entered allmulticast mode [ 190.271459][ T6931] bond2: entered promiscuous mode [ 190.271859][ T6931] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 190.335103][ T6931] bond2: left promiscuous mode [ 190.613855][ T6939] fuse: Invalid rootmode [ 190.697606][ T6942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.351'. [ 191.719312][ T6954] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 192.089868][ T6956] vivid-003: disconnect [ 192.173020][ T6959] Bluetooth: hci0: unsupported parameter 255 [ 192.173063][ T6959] Bluetooth: hci0: unsupported parameter 255 [ 193.832981][ T6955] vivid-003: reconnect [ 194.320232][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.320304][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.038465][ T6982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.059533][ T6982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.174496][ T6982] netlink: 36 bytes leftover after parsing attributes in process `syz.0.363'. [ 195.273342][ T6982] netlink: 64 bytes leftover after parsing attributes in process `syz.0.363'. [ 195.494775][ T6988] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 195.495169][ T6988] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 195.533927][ T6988] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 195.551424][ T6988] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 195.556588][ T6988] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 195.567483][ T6988] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 195.568095][ T6988] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 195.595305][ T6988] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 195.608332][ T6988] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 195.614040][ T6988] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 195.669371][ T6996] Bluetooth: hci0: unsupported parameter 255 [ 195.669401][ T6996] Bluetooth: hci0: unsupported parameter 255 [ 197.341531][ T5816] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 197.559010][ T5816] usb 5-1: Using ep0 maxpacket: 16 [ 197.568311][ T5816] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 197.635292][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.635402][ T5816] usb 5-1: Product: syz [ 197.635476][ T5816] usb 5-1: Manufacturer: syz [ 197.635489][ T5816] usb 5-1: SerialNumber: syz [ 197.741829][ T5816] usb 5-1: config 0 descriptor?? [ 199.282382][ T5816] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 199.575274][ T5816] ssu100 5-1:0.0: probe with driver ssu100 failed with error -32 [ 199.764410][ T7021] netlink: 'syz.1.361': attribute type 1 has an invalid length. [ 199.790958][ T7021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.825540][ T7021] macvlan2: entered promiscuous mode [ 199.825569][ T7021] macvlan2: entered allmulticast mode [ 199.826184][ T7021] bond2: entered promiscuous mode [ 199.826528][ T7021] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 199.879555][ T7021] bond2: left promiscuous mode [ 200.965108][ T7034] netlink: 'syz.4.374': attribute type 1 has an invalid length. [ 201.205415][ T7037] Bluetooth: hci0: unsupported parameter 255 [ 201.215066][ T7037] Bluetooth: hci0: unsupported parameter 255 [ 201.526124][ T5631] Bluetooth: hci4: command 0x0406 tx timeout [ 201.528051][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 201.528573][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 201.548363][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 201.548421][ T5631] Bluetooth: hci0: command 0x0406 tx timeout [ 201.928629][ T25] usb 5-1: USB disconnect, device number 7 [ 202.053818][ T7030] syz.1.379 (7030): drop_caches: 2 [ 205.920257][ T7064] tmpfs: Unknown parameter 'grpquota/#/msr' [ 206.174556][ T7068] netlink: 'syz.1.389': attribute type 1 has an invalid length. [ 206.196845][ T7068] 8021q: adding VLAN 0 to HW filter on device bond3 [ 206.227789][ T30] audit: type=1326 audit(1786076146.339:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7069 comm="syz.2.390" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fe3f9e0d9 code=0x0 [ 206.263784][ T7068] macvlan2: entered promiscuous mode [ 206.263828][ T7068] macvlan2: entered allmulticast mode [ 206.264540][ T7068] bond3: entered promiscuous mode [ 206.265992][ T7068] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 206.305582][ T7068] bond3: left promiscuous mode [ 207.840583][ T5816] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 208.088843][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 208.094772][ T5816] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 208.128027][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.136337][ T5816] usb 2-1: Product: syz [ 208.140625][ T5816] usb 2-1: Manufacturer: syz [ 208.145349][ T5816] usb 2-1: SerialNumber: syz [ 208.159376][ T5816] usb 2-1: config 0 descriptor?? [ 208.176851][ T5816] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 208.400035][ T5816] ssu100 2-1:0.0: probe with driver ssu100 failed with error -32 [ 210.670537][ T7115] netlink: 'syz.1.393': attribute type 1 has an invalid length. [ 211.001607][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 211.516622][ T7128] overlayfs: missing 'workdir' [ 211.744272][ T7133] jffs2: notice: (7133) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 211.753494][ T43] usb 2-1: USB disconnect, device number 5 [ 211.927996][ T7139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.932140][ T7139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.984341][ T7142] netlink: 'syz.3.410': attribute type 10 has an invalid length. [ 211.997459][ T7142] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.999676][ T7142] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.030578][ T7143] vivid-000: disconnect [ 212.471164][ T7142] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.471355][ T7142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.472635][ T7142] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.473458][ T7142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.495582][ T7142] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 212.677863][ T7145] cgroup: Unknown subsys name 'euid' [ 212.987649][ T7138] vivid-000: reconnect [ 213.149587][ T7163] ip6erspan0: entered allmulticast mode [ 213.515450][ T7169] overlayfs: missing 'workdir' [ 214.365153][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 214.416834][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 216.282127][ T7205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.285500][ T7205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.332134][ T7206] cgroup: Unknown subsys name 'euid' [ 216.495781][ T7208] vivid-000: disconnect [ 217.888470][ T7202] vivid-000: reconnect [ 217.994536][ T7213] wlan0 speed is unknown, defaulting to 1000 [ 219.045986][ T7250] random: crng reseeded on system resumption [ 219.691631][ T30] audit: type=1326 audit(1786076159.809:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.1.445" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc96979e0d9 code=0x0 [ 220.171391][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 220.249400][ T4933] Bluetooth: hci4: command 0x0406 tx timeout [ 221.674516][ T7281] netlink: zone id is out of range [ 221.691881][ T7281] netlink: get zone limit has 4 unknown bytes [ 223.753020][ T7298] wlan0 speed is unknown, defaulting to 1000 [ 224.493003][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 225.251451][ T7319] netlink: 20 bytes leftover after parsing attributes in process `syz.1.466'. [ 225.251493][ T7319] openvswitch: netlink: Flow actions attr not present in new flow. [ 225.628849][ T5750] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 225.784481][ T7329] key id 000004d2 not found [ 225.791693][ T5750] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 225.802080][ T5750] usb 5-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 225.802146][ T5750] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 64 [ 225.802173][ T5750] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 225.802214][ T5750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.850975][ T5750] usb 5-1: config 0 descriptor?? [ 225.856832][ T7323] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 226.047766][ T7333] vivid-001: disconnect [ 226.410143][ T43] usb 5-1: USB disconnect, device number 8 [ 226.902346][ T7330] vivid-001: reconnect [ 227.527243][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.477'. [ 228.754784][ T7363] key id 000004d2 not found [ 230.357603][ T7379] vivid-002: disconnect [ 230.771700][ T30] audit: type=1326 audit(1786076170.889:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.2.490" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fe3f9e0d9 code=0x0 [ 231.872010][ T7373] vivid-002: reconnect [ 231.971586][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 232.087640][ T7398] socket: no more sockets [ 232.107279][ T7401] netlink: 'syz.2.492': attribute type 10 has an invalid length. [ 232.137942][ T7399] 8021q: adding VLAN 0 to HW filter on device bond3 [ 232.146993][ T7401] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.147383][ T7401] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.179225][ T7401] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.179367][ T7401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.179697][ T7401] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.179826][ T7401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.212183][ T7406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.496'. [ 232.221220][ T7406] openvswitch: netlink: Flow actions attr not present in new flow. [ 232.273456][ T7401] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 232.642596][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'. [ 232.927964][ T7414] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 232.928040][ T7414] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 234.177466][ T30] audit: type=1326 audit(1786076174.289:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.0.502" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6b559e0d9 code=0x0 [ 234.561475][ T7435] comedi comedi1: pcl724: I/O base address or length out of range [ 235.480367][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'. [ 236.863413][ T7456] overlayfs: failed to resolve './file0': -2 [ 237.247241][ T7466] cgroup: Unknown subsys name 'euid' [ 238.059790][ T30] audit: type=1326 audit(1786076178.179:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.0.524" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6b559e0d9 code=0x0 [ 238.186551][ T30] audit: type=1326 audit(1786076178.299:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.4.525" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9aaf9e0d9 code=0x7ffc0000 [ 238.186872][ T30] audit: type=1326 audit(1786076178.299:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.4.525" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9aaf9e0d9 code=0x7ffc0000 [ 238.187442][ T30] audit: type=1326 audit(1786076178.299:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.4.525" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9aaf9e0d9 code=0x7ffc0000 [ 238.187793][ T30] audit: type=1326 audit(1786076178.299:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.4.525" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb9aaf9e0d9 code=0x7ffc0000 [ 238.237883][ T30] audit: type=1326 audit(1786076178.349:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.4.525" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9aaf9e0d9 code=0x7ffc0000 [ 238.298068][ T30] audit: type=1326 audit(1786076178.409:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.4.525" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb9aaf5e90e code=0x7ffc0000 [ 238.352872][ T30] audit: type=1326 audit(1786076178.469:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.4.525" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb9aaf5e90e code=0x7ffc0000 [ 238.357230][ T30] audit: type=1326 audit(1786076178.469:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.4.525" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb9aaf5e90e code=0x7ffc0000 [ 238.358445][ T30] audit: type=1326 audit(1786076178.469:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.4.525" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb9aaf5e90e code=0x7ffc0000 [ 246.301591][ T7575] netlink: 16 bytes leftover after parsing attributes in process `syz.3.553'. [ 248.023754][ T7596] ALSA: mixer_oss: invalid OSS volume '' [ 250.952319][ T7620] netlink: 900 bytes leftover after parsing attributes in process `syz.3.570'. [ 251.023360][ T7623] vivid-000: disconnect [ 251.040689][ T5624] wlan0 speed is unknown, defaulting to 1000 [ 251.054712][ T7620] netlink: 900 bytes leftover after parsing attributes in process `syz.3.570'. [ 251.521143][ T7617] vivid-000: reconnect [ 251.873127][ T7636] ALSA: mixer_oss: invalid OSS volume '' [ 253.276750][ T7652] syz_tun: entered allmulticast mode [ 253.523504][ T7653] syz_tun: left allmulticast mode [ 254.704142][ T7666] netlink: 900 bytes leftover after parsing attributes in process `syz.3.585'. [ 254.719718][ T7667] vivid-002: disconnect [ 254.755454][ T7668] netlink: 900 bytes leftover after parsing attributes in process `syz.3.585'. [ 255.743997][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.744129][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.944352][ T7664] vivid-002: reconnect [ 259.422194][ T7708] netlink: 900 bytes leftover after parsing attributes in process `syz.3.598'. [ 259.473927][ T7709] netlink: 900 bytes leftover after parsing attributes in process `syz.3.598'. [ 259.686323][ T7711] socket: no more sockets [ 261.599025][ T5728] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 263.500158][ T5728] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 263.501207][ T5728] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 263.501235][ T5728] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.501273][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.734160][ T5728] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 263.735031][ T5728] usb 5-1: invalid MIDI out EP 0 [ 263.780174][ T7757] netlink: 900 bytes leftover after parsing attributes in process `syz.0.617'. [ 263.840970][ T7761] netlink: 900 bytes leftover after parsing attributes in process `syz.0.617'. [ 264.023993][ T7763] vivid-003: disconnect [ 265.221069][ T30] kauditd_printk_skb: 157 callbacks suppressed [ 265.221121][ T30] audit: type=1326 audit(1786076205.339:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7768 comm="syz.0.622" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6b559e0d9 code=0x0 [ 265.301109][ T5728] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 265.804465][ T7778] comedi comedi1: pcl724: I/O base address or length out of range [ 266.479659][ T7735] vivid-003: reconnect [ 266.480512][ T5750] usb 5-1: USB disconnect, device number 9 [ 266.577988][ T7781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.590142][ T7781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.422183][ T7792] socket: no more sockets [ 268.456821][ T7792] socket: no more sockets [ 269.363870][ T7810] netlink: 68 bytes leftover after parsing attributes in process `syz.1.633'. [ 269.490070][ T30] audit: type=1326 audit(1786076209.599:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.1.634" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc96979e0d9 code=0x0 [ 269.922208][ T7816] comedi comedi1: pcl724: I/O base address or length out of range [ 272.553053][ T7835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.553478][ T7835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.651047][ T7838] netlink: 68 bytes leftover after parsing attributes in process `syz.3.644'. [ 273.270606][ T30] audit: type=1326 audit(1786076213.389:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7846 comm="syz.4.648" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9aaf9e0d9 code=0x0 [ 273.699109][ T7852] comedi comedi1: pcl724: I/O base address or length out of range [ 274.435291][ T7860] netlink: 20 bytes leftover after parsing attributes in process `syz.3.649'. [ 274.445446][ T7860] openvswitch: netlink: Flow actions attr not present in new flow. [ 275.978452][ T7882] udc dummy_udc.0: unsupported command 'c' [ 276.367547][ T30] audit: type=1326 audit(1786076216.479:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.0.660" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6b559e0d9 code=0x0 [ 276.748045][ T7899] comedi comedi1: pcl724: I/O base address or length out of range [ 277.572132][ T7898] cgroup: Unknown subsys name 'euid' [ 278.270307][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.667'. [ 278.378901][ T5728] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 278.547881][ T5728] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 278.569468][ T5728] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 278.569521][ T5728] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.569588][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.612710][ T5728] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 278.622975][ T5728] usb 2-1: invalid MIDI out EP 0 [ 278.918508][ T7908] vivid-002: disconnect [ 278.946159][ T30] audit: type=1326 audit(1786076219.059:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.2.674" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fe3f9e0d9 code=0x0 [ 279.066177][ T7931] random: crng reseeded on system resumption [ 280.312626][ T5728] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 280.810205][ T7932] Restarting kernel threads ... [ 280.810663][ T7932] Done restarting kernel threads. [ 280.920894][ T7906] vivid-002: reconnect [ 280.926331][ T5750] usb 2-1: USB disconnect, device number 6 [ 281.128314][ T7943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.128600][ T7943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.203599][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.679'. [ 281.558447][ T7955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.682'. [ 281.568384][ T7955] openvswitch: netlink: Flow actions attr not present in new flow. [ 283.496607][ T30] audit: type=1326 audit(1786076223.609:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7971 comm="syz.0.688" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6b559e0d9 code=0x0 [ 283.875899][ T7978] comedi comedi1: pcl724: I/O base address or length out of range [ 284.267981][ T7979] random: crng reseeded on system resumption [ 284.295389][ T7979] Restarting kernel threads ... [ 284.295873][ T7979] Done restarting kernel threads. [ 285.668861][ T5728] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 285.822115][ T5728] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 285.862443][ T5728] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 285.875489][ T5728] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.875703][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.646401][ T5728] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 287.647321][ T5728] usb 2-1: invalid MIDI out EP 0 [ 287.670259][ T7987] vivid-002: disconnect [ 288.042496][ T5728] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 288.633723][ T7984] vivid-002: reconnect [ 288.646756][ T5624] usb 2-1: USB disconnect, device number 7 [ 290.044863][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.709'. [ 291.741286][ T8073] dlm: no locking on control device [ 291.971900][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 292.051837][ T5624] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 292.133025][ T8077] netlink: 'syz.1.722': attribute type 10 has an invalid length. [ 292.170034][ T8084] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.185684][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.186325][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.221779][ T5624] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 292.232663][ T5624] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 292.238913][ T8077] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.239034][ T8077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.239298][ T8077] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.239433][ T8077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.244363][ T5624] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 292.244415][ T5624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.310137][ T5624] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 292.318061][ T5624] usb 5-1: invalid MIDI out EP 0 [ 292.335183][ T8077] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 292.613194][ T5624] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 292.619254][ T8099] vivid-003: disconnect [ 294.003877][ T8090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.725'. [ 294.018436][ T8117] socket: no more sockets [ 294.150839][ T8074] vivid-003: reconnect [ 294.151876][ T5742] usb 5-1: USB disconnect, device number 10 [ 294.181353][ T8122] netlink: 'syz.3.738': attribute type 1 has an invalid length. [ 294.201252][ T8122] 8021q: adding VLAN 0 to HW filter on device bond2 [ 294.275620][ T8122] bond1: (slave veth0_to_bond): Releasing active interface [ 294.281778][ T8122] bond2: (slave veth0_to_bond): making interface the new active one [ 294.282605][ T8122] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 294.298539][ T8122] macvlan2: entered promiscuous mode [ 294.298555][ T8122] macvlan2: entered allmulticast mode [ 294.299363][ T8122] bond2: entered promiscuous mode [ 294.299381][ T8122] veth0_to_bond: entered promiscuous mode [ 294.300130][ T8122] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 294.300505][ T8122] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 294.300573][ T8122] bond2: left promiscuous mode [ 294.300581][ T8122] veth0_to_bond: left promiscuous mode [ 294.641800][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.741'. [ 294.641849][ T8133] bond3: option mode: unable to set because the bond device is up [ 294.664060][ T8133] netlink: 'syz.2.741': attribute type 10 has an invalid length. [ 294.664344][ T8133] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.664525][ T8133] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.529119][ T5624] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 295.937188][ T5624] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 295.975937][ T5624] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.994755][ T5624] usb 5-1: config 0 has no interfaces? [ 296.001980][ T5624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.094134][ T5624] usb 5-1: config 0 descriptor?? [ 296.307424][ T5624] usb 5-1: USB disconnect, device number 11 [ 299.249208][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 299.400279][ T10] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 299.403496][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.403520][ T10] usb 5-1: Product: syz [ 299.403534][ T10] usb 5-1: Manufacturer: syz [ 299.403547][ T10] usb 5-1: SerialNumber: syz [ 299.422286][ T10] usb 5-1: config 0 descriptor?? [ 300.365682][ T8189] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 300.482872][ T8189] bond0 (unregistering): Released all slaves [ 300.646673][ T8217] smbdirect: ib_dev[syz0] removed [ 300.730816][ T8217] xt_TPROXY: Can be used only with -p tcp or -p udp [ 301.307258][ T10] usb 5-1: Firmware version (0.0) predates our first public release. [ 301.307300][ T10] usb 5-1: Please update to version 0.2 or newer [ 301.346254][ T8220] netlink: 68 bytes leftover after parsing attributes in process `syz.0.769'. [ 301.422872][ T5624] usb 5-1: USB disconnect, device number 12 [ 301.605358][ T8226] netlink: 'syz.3.770': attribute type 1 has an invalid length. [ 301.681134][ T5628] udevd[5628]: setting mode of /dev/bus/usb/005/012 to 020664 failed: No such file or directory [ 301.681269][ T5628] udevd[5628]: setting owner of /dev/bus/usb/005/012 to uid=0, gid=0 failed: No such file or directory [ 301.738512][ T8233] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 301.750390][ T8233] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 301.859251][ T8226] 8021q: adding VLAN 0 to HW filter on device bond3 [ 301.896773][ T8231] bond2: (slave veth0_to_bond): Releasing active interface [ 301.962430][ T8231] bond3: (slave veth0_to_bond): making interface the new active one [ 301.983464][ T8231] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 302.045717][ T8234] macvlan2: entered promiscuous mode [ 302.051208][ T8234] macvlan2: entered allmulticast mode [ 302.057161][ T8234] bond3: entered promiscuous mode [ 302.060495][ T8234] veth0_to_bond: entered promiscuous mode [ 302.061307][ T8234] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 302.068603][ T8234] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 302.068688][ T8234] bond3: left promiscuous mode [ 302.068697][ T8234] veth0_to_bond: left promiscuous mode [ 302.175271][ T8240] netlink: 'syz.2.774': attribute type 1 has an invalid length. [ 304.105092][ T8266] cgroup: Unknown subsys name 'euid' [ 304.144715][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'. [ 304.163518][ T8267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.176291][ T8267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.242063][ T8266] socket: no more sockets [ 304.279683][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'. [ 304.279728][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.778'. [ 304.314278][ T8268] 8021q: adding VLAN 0 to HW filter on device bond4 [ 304.331328][ T8276] netlink: 68 bytes leftover after parsing attributes in process `syz.2.784'. [ 304.344542][ T8256] netlink: 'syz.3.778': attribute type 10 has an invalid length. [ 304.360785][ T8271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.377408][ T8271] bond4: (slave bond0): making interface the new active one [ 304.391658][ T8271] bond4: (slave bond0): Enslaving as an active interface with an up link [ 304.394068][ T8256] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.394339][ T8256] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.248079][ T8295] random: crng reseeded on system resumption [ 305.284476][ T8295] Restarting kernel threads ... [ 305.285054][ T8295] Done restarting kernel threads. [ 306.493999][ T8309] netlink: 68 bytes leftover after parsing attributes in process `syz.3.795'. [ 306.509156][ T5624] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 306.658874][ T5624] usb 5-1: Using ep0 maxpacket: 16 [ 306.666167][ T5624] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 306.689035][ T5624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.689079][ T5624] usb 5-1: Product: syz [ 306.689122][ T5624] usb 5-1: Manufacturer: syz [ 306.689140][ T5624] usb 5-1: SerialNumber: syz [ 306.717525][ T5624] usb 5-1: config 0 descriptor?? [ 306.746981][ T5624] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 307.119968][ T5624] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 307.624826][ T30] audit: type=1326 audit(1786076247.739:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.2.805" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fe3f9e0d9 code=0x0 [ 307.787548][ T8343] random: crng reseeded on system resumption [ 307.814516][ T8343] Restarting kernel threads ... [ 307.815020][ T8343] Done restarting kernel threads. [ 308.416832][ T8345] netlink: 'syz.4.791': attribute type 1 has an invalid length. [ 309.904318][ T8354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.904603][ T8354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.020177][ T10] usb 5-1: USB disconnect, device number 13 [ 311.098639][ T8372] CacheFiles: No cache directory specified [ 312.567500][ T8386] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 315.948423][ T8399] cgroup: Unknown subsys name 'euid' [ 316.070465][ T8401] netlink: 892 bytes leftover after parsing attributes in process `syz.2.826'. [ 316.130532][ T8403] netlink: 892 bytes leftover after parsing attributes in process `syz.2.826'. [ 316.703756][ T30] audit: type=1326 audit(1786076256.819:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.2.830" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fe3f9e0d9 code=0x0 [ 316.828844][ T5816] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 316.978873][ T5816] usb 5-1: Using ep0 maxpacket: 16 [ 316.989894][ T5816] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 317.014079][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.024119][ T5816] usb 5-1: Product: syz [ 317.029208][ T5816] usb 5-1: Manufacturer: syz [ 317.035950][ T5816] usb 5-1: SerialNumber: syz [ 317.050384][ T5816] usb 5-1: config 0 descriptor?? [ 317.170974][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.171027][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.639252][ T5816] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 317.824076][ T5816] ssu100 5-1:0.0: probe with driver ssu100 failed with error -32 [ 319.849613][ T25] usb 5-1: USB disconnect, device number 14 [ 320.165254][ T8444] cgroup: Unknown subsys name 'euid' [ 320.198160][ T8445] netlink: 892 bytes leftover after parsing attributes in process `syz.1.840'. [ 320.249907][ T8448] netlink: 892 bytes leftover after parsing attributes in process `syz.1.840'. [ 321.095216][ T30] audit: type=1326 audit(1786076261.209:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.842" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9aaf9e0d9 code=0x0 [ 325.599414][ T5750] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 325.777340][ T5750] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 325.805072][ T5750] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.805137][ T5750] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.836346][ T5750] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.844665][ T5750] usb 5-1: Product: syz [ 325.849393][ T5750] usb 5-1: Manufacturer: syz [ 325.849434][ T5750] usb 5-1: SerialNumber: syz [ 327.302726][ T5750] ttusb_dec_send_command: result bulk message failed: error -22 [ 327.329204][ T5750] ttusb-dec 5-1:1.0: probe with driver ttusb-dec failed with error -22 [ 327.345605][ T5750] usb 5-1: USB disconnect, device number 15 [ 329.884091][ T30] audit: type=1326 audit(1786076269.999:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz.2.878" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fe3f9e0d9 code=0x0 [ 330.105348][ T8559] can0: slcan on ttyS3. [ 331.935452][ T8558] can0 (unregistered): slcan off ttyS3. [ 333.514959][ T8595] ALSA: mixer_oss: invalid OSS volume '' [ 335.474521][ T30] audit: type=1326 audit(1786076275.589:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.0.893" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6b559e0d9 code=0x0 [ 336.934505][ T8635] ALSA: mixer_oss: invalid OSS volume '' [ 339.496085][ T8666] overlayfs: failed to resolve './cgroup': -2 [ 339.594594][ T8667] tipc: Trying to set illegal importance in message [ 340.596470][ T5625] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 340.632723][ T30] audit: type=1326 audit(1786076280.749:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8674 comm="syz.4.908" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9aaf9e0d9 code=0x0 [ 342.016999][ T8700] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 342.778876][ T5624] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 343.682327][ T5624] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 343.696561][ T5624] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 343.696616][ T5624] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 343.696671][ T5624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.780355][ T8707] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 343.801025][ T5624] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 344.118907][ T8724] vivid-003: disconnect [ 344.974032][ T30] audit: type=1800 audit(1786076285.089:193): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.924" name="out_ports" dev="configfs" ino=20102 res=0 errno=0 [ 345.982101][ T8705] vivid-003: reconnect [ 345.983001][ T5742] usb 5-1: USB disconnect, device number 16 [ 348.241445][ T8769] netlink: 16 bytes leftover after parsing attributes in process `syz.3.923'. [ 348.967738][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'. [ 348.967779][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.935'. [ 348.984794][ T8779] cgroup: Unknown subsys name 'euid' [ 349.103737][ T8774] netlink: 'syz.0.935': attribute type 10 has an invalid length. [ 349.112146][ T8774] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.112449][ T8774] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.173668][ T8774] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.173786][ T8774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.174062][ T8774] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.174176][ T8774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.243086][ T8774] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 349.279282][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 349.442963][ T25] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 349.445714][ T25] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 349.445747][ T25] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 349.445782][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.460447][ T8783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 349.475602][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 349.807688][ T8799] vivid-002: disconnect [ 352.756126][ T8815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.756562][ T8815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.782065][ T8815] netlink: 'syz.0.949': attribute type 1 has an invalid length. [ 352.962833][ T8778] vivid-002: reconnect [ 352.963619][ T5742] usb 2-1: USB disconnect, device number 8 [ 353.290849][ T8823] cgroup: Unknown subsys name 'euid' [ 353.388438][ T8823] socket: no more sockets [ 354.974740][ T8842] CIFS: Attempting to mount //127.0.0.1/share [ 354.979176][ T8842] CIFS: VFS: Error connecting to socket. Aborting operation. [ 354.979270][ T8842] CIFS: VFS: cifs_mount failed w/return code = -111 [ 355.248720][ T8852] netlink: 'syz.2.966': attribute type 1 has an invalid length. [ 356.416695][ T8866] fuse: Bad value for 'fd' [ 357.131593][ T8886] sctp_transport_update_pmtu: 48 callbacks suppressed [ 357.131640][ T8886] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 357.131980][ T8886] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 357.132262][ T8886] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 357.137284][ T8886] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 357.142328][ T8886] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 357.144226][ T8886] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 357.146338][ T8886] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 357.148421][ T8886] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 357.151184][ T8886] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 357.155230][ T8886] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 359.057492][ T8901] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5614] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[8901] [ 360.930749][ T30] audit: type=1326 audit(1786076301.049:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8922 comm="syz.1.990" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc96979e0d9 code=0x0 [ 361.031132][ T30] audit: type=1800 audit(1786076301.149:195): pid=8924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.991" name="in_ports" dev="configfs" ino=21582 res=0 errno=0 [ 362.393733][ T8957] cgroup: Unknown subsys name 'euid' [ 362.554457][ T8957] socket: no more sockets [ 362.581047][ T30] audit: type=1326 audit(1786076302.699:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.2.1009" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fe3f9e0d9 code=0x0 [ 364.019091][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1014'. [ 364.052728][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1014'. [ 364.052768][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1014'. [ 364.084757][ T8985] netlink: 'syz.4.1014': attribute type 10 has an invalid length. [ 364.085010][ T8985] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.085272][ T8985] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.245183][ T9002] cgroup: Unknown subsys name 'euid' [ 364.298112][ T9002] socket: no more sockets [ 364.500592][ T30] audit: type=1326 audit(1786076304.619:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.4.1022" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9aaf9e0d9 code=0x0 [ 364.726376][ T30] audit: type=1800 audit(1786076304.839:198): pid=9022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1024" name="in_ports" dev="configfs" ino=21317 res=0 errno=0 [ 365.843056][ T9042] cgroup: Unknown subsys name 'euid' [ 366.164281][ T9042] socket: no more sockets [ 366.481894][ T9052] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5616] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9052] [ 368.768570][ T30] audit: type=1326 audit(1786076308.879:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9071 comm="syz.3.1041" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb81839e0d9 code=0x0 [ 369.504008][ T9091] ubi16: attaching mtd0 [ 369.613275][ T9091] ubi16: scanning is finished [ 369.618144][ T9091] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 370.274628][ T9096] cgroup: Unknown subsys name 'euid' [ 370.315141][ T9091] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 370.612096][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1056'. [ 371.404294][ T30] audit: type=1326 audit(1786076311.519:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.2.1059" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fe3f9e0d9 code=0x0 [ 372.405934][ T9144] CacheFiles: No cache directory specified [ 372.928567][ T9160] random: crng reseeded on system resumption [ 375.050264][ T9192] CacheFiles: No cache directory specified [ 375.160010][ T30] audit: type=1326 audit(1786076315.279:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.4.1080" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9aaf9e0d9 code=0x0 [ 375.194096][ T9196] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 375.206548][ T9196] batman_adv: batadv0: Adding interface: gretap1 [ 375.206575][ T9196] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.206976][ T9196] batman_adv: batadv0: Interface activated: gretap1 [ 378.115149][ T9230] CacheFiles: No cache directory specified [ 378.289644][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1089'. [ 378.480640][ T30] audit: type=1326 audit(1786076318.599:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.3.1094" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb81839e0d9 code=0x0 [ 378.562588][ T9242] can0: slcan on ttyS3. [ 378.659458][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.659531][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.934796][ T9241] can0 (unregistered): slcan off ttyS3. [ 380.888769][ T9276] fuse: fd is not a fuse device [ 380.898464][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1104'. [ 381.108481][ T9288] CacheFiles: No cache directory specified [ 382.313938][ T9306] can0: slcan on ttyS3. [ 382.344058][ T30] audit: type=1326 audit(1786076322.459:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9302 comm="syz.1.1110" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc96979e0d9 code=0x0 [ 382.445052][ T9305] can0 (unregistered): slcan off ttyS3. [ 384.690664][ T9343] ip6erspan0: left allmulticast mode [ 385.239931][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1119'. [ 385.380631][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1119'. [ 385.380697][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1119'. [ 385.446599][ T9362] netlink: 'syz.4.1119': attribute type 10 has an invalid length. [ 385.465532][ T9369] CacheFiles: No cache directory specified [ 386.212860][ T9355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.306923][ T30] audit: type=1326 audit(1786076326.419:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9375 comm="syz.2.1128" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fe3f9e0d9 code=0x0 [ 387.307637][ T9384] overlayfs: failed to clone upperpath [ 388.933530][ T30] audit: type=1326 audit(1786076329.049:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.4.1141" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9aaf9e0d9 code=0x0 [ 389.604737][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'. [ 389.604792][ T9440] bond4: option mode: unable to set because the bond device has slaves [ 389.639980][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'. [ 389.640037][ T9440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1140'. [ 389.663629][ T9440] netlink: 'syz.3.1140': attribute type 10 has an invalid length. [ 389.780108][ T1160] bond4: (slave bond0): link status definitely down, disabling slave [ 389.816244][ T1160] bond4: now running without any active interface! [ 390.005869][ T9450] 9pnet_fd: Insufficient options for proto=fd [ 391.405016][ T9471] sctp_transport_update_pmtu: 47 callbacks suppressed [ 391.405077][ T9471] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 391.405519][ T9471] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 391.441023][ T9471] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 391.443249][ T9471] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 391.469451][ T9471] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 391.481937][ T9471] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 391.492893][ T9471] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 391.504372][ T9471] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 391.517811][ T9471] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 391.528560][ T9471] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 391.572737][ T30] audit: type=1326 audit(1786076331.689:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9474 comm="syz.0.1158" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6b559e0d9 code=0x0 [ 391.837424][ T9485] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5616] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9485] [ 393.789065][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1167'. [ 394.387275][ T30] audit: type=1326 audit(1786076334.499:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.1173" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9aaf9e0d9 code=0x0 [ 394.475806][ T9532] fuse: Bad value for 'fd' [ 396.771555][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1184'. [ 397.397589][ T9577] can0: slcan on ttyS3. [ 397.511896][ T9577] can0 (unregistered): slcan off ttyS3. [ 397.569306][ T4933] Bluetooth: hci4: command 0x0406 tx timeout [ 398.496515][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1197'. [ 400.869425][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 402.485202][ T9672] syzkaller0: entered promiscuous mode [ 402.485254][ T9672] syzkaller0: entered allmulticast mode [ 403.038259][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1228'. [ 406.114006][ T9711] netlink: get zone limit has 4 unknown bytes [ 406.298656][ T9716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1238'. [ 407.923155][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'. [ 408.128886][ T25] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 408.283969][ T25] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 408.295461][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 408.307317][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 408.318460][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 408.318518][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 408.360903][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.360946][ T25] usb 5-1: Product: syz [ 408.360977][ T25] usb 5-1: Manufacturer: syz [ 408.360995][ T25] usb 5-1: SerialNumber: syz [ 408.518616][ T25] usb 5-1: config 0 descriptor?? [ 409.035293][ T25] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 409.073850][ T9754] netlink: get zone limit has 4 unknown bytes [ 409.126702][ T5742] usb 5-1: USB disconnect, device number 17 [ 409.207848][ T9756] bridge_slave_1: left allmulticast mode [ 409.207888][ T9756] bridge_slave_1: left promiscuous mode [ 409.208414][ T9756] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.247479][ T9756] bridge_slave_0: left allmulticast mode [ 409.247517][ T9756] bridge_slave_0: left promiscuous mode [ 409.247756][ T9756] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.290358][ T9756] bond0: (slave bridge0): Releasing backup interface [ 409.341423][ T9738] adutux: No device or device unplugged -19 [ 409.561789][ T9773] jffs2: notice: (9773) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 410.423579][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'. [ 410.809454][ T9788] fuse: fd is not a fuse device [ 411.014988][ T5625] Bluetooth: hci3: hardware error 0x03 [ 411.248896][ T5742] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 411.258669][ T9809] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 411.312337][ T9811] kvm: pic: level sensitive irq not supported [ 411.312629][ T9811] kvm: pic: single mode not supported [ 411.315253][ T9811] kvm: pic: level sensitive irq not supported [ 411.408907][ T5742] usb 2-1: Using ep0 maxpacket: 8 [ 411.421299][ T5742] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 411.431941][ T5742] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 411.431984][ T5742] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 411.432021][ T5742] usb 2-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 411.432049][ T5742] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 411.432076][ T5742] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 411.432102][ T5742] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.432145][ T5742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.725822][ T5742] usb 2-1: GET_CAPABILITIES returned 0 [ 411.731806][ T5742] usbtmc 2-1:16.0: can't read capabilities [ 412.196618][ T9794] usbtmc 2-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 412.324896][ T43] usb 2-1: USB disconnect, device number 9 [ 412.670522][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 412.670570][ T9833] bond3: option mode: unable to set because the bond device is up [ 412.713896][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 412.713934][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1278'. [ 412.762059][ T9833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.795936][ T9835] netlink: 'syz.2.1278': attribute type 10 has an invalid length. [ 412.821460][ T9833] bond3: (slave bond0): making interface the new active one [ 412.840545][ T9833] bond3: (slave bond0): Enslaving as an active interface with an up link [ 413.177730][ T5625] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 414.105992][ T9846] syz_tun: entered allmulticast mode [ 414.106943][ T9846] lo: entered allmulticast mode [ 414.117233][ T9845] syz_tun: left allmulticast mode [ 414.631663][ T30] audit: type=1326 audit(1786076354.749:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.2.1290" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fe3f9e0d9 code=0x0 [ 417.222161][ T9894] overlayfs: failed to clone upperpath [ 418.182415][ T9909] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.182569][ T9909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.182901][ T9909] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.183014][ T9909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.257476][ T9913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1306'. [ 418.523392][ T9909] ip6erspan0: left allmulticast mode [ 418.951523][ T9920] fuse: fd is not a fuse device [ 419.147836][ T9913] 8021q: adding VLAN 0 to HW filter on device bond2 [ 419.174701][ T9916] bond2: entered promiscuous mode [ 419.357803][ T30] audit: type=1326 audit(1786076359.469:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.2.1303" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fe3f9e0d9 code=0x0 [ 419.445882][ T9933] wlan0 speed is unknown, defaulting to 1000 [ 419.446225][ T9933] wlan0 speed is unknown, defaulting to 1000 [ 419.456431][ T9933] wlan0 speed is unknown, defaulting to 1000 [ 419.462385][ T9933] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 419.462936][ T9933] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 419.463024][ T9933] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 419.531855][ T9933] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 419.656257][ T9934] xt_TPROXY: Can be used only with -p tcp or -p udp [ 419.716481][ T9933] wlan0 speed is unknown, defaulting to 1000 [ 419.730922][ T9933] wlan0 speed is unknown, defaulting to 1000 [ 419.750774][ T9933] wlan0 speed is unknown, defaulting to 1000 [ 419.763091][ T9933] wlan0 speed is unknown, defaulting to 1000 [ 419.775014][ T9933] wlan0 speed is unknown, defaulting to 1000 [ 422.798390][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'. [ 423.682040][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 423.724172][ T9956] 8021q: adding VLAN 0 to HW filter on device bond3 [ 423.953837][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 423.962885][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1315'. [ 423.978095][ T9956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.992550][ T9956] bond3: (slave bond0): making interface the new active one [ 424.002139][ T9956] bond3: (slave bond0): Enslaving as an active interface with an up link [ 424.056793][ T9956] netlink: 'syz.0.1315': attribute type 10 has an invalid length. [ 424.086952][ T9964] fuse: fd is not a fuse device [ 424.172273][ T9956] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.172492][ T9956] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.803864][ T30] audit: type=1326 audit(1786076364.919:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.0.1326" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6b559e0d9 code=0x0 [ 426.668252][T10015] fuse: Bad value for 'fd' [ 426.789926][ T30] audit: type=1326 audit(1786076366.909:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10017 comm="syz.1.1340" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc96979e0d9 code=0x0 [ 427.051761][T10027] can0: slcan on ttyS3. [ 427.640907][T10027] can0 (unregistered): slcan off ttyS3. [ 427.768882][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 427.872333][T10048] fuse: Bad value for 'fd' [ 427.920427][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 427.921444][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 427.921481][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 427.921517][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.933938][T10025] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 427.946617][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 428.134451][T10051] sctp_transport_update_pmtu: 106 callbacks suppressed [ 428.134492][T10051] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.134916][T10051] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.135243][T10051] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.135606][T10051] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.136828][T10051] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.137225][T10051] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.137569][T10051] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.137912][T10051] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.138259][T10051] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.138596][T10051] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 428.199342][T10059] fuse: Bad value for 'fd' [ 428.363356][T10025] vivid-003: disconnect [ 428.564738][T10070] 9pnet_virtio: no channels available for device syz [ 428.938412][ T30] audit: type=1326 audit(1786076369.049:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.2.1358" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fe3f9e0d9 code=0x0 [ 428.973844][T10024] vivid-003: reconnect [ 428.977505][ T10] usb 5-1: USB disconnect, device number 18 [ 430.032315][T10101] fuse: Bad value for 'fd' [ 430.586128][T10109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.600291][T10109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.754530][T10111] can0: slcan on ttyS3. [ 430.841920][T10116] can0 (unregistered): slcan off ttyS3. [ 430.911493][T10118] wlan0 speed is unknown, defaulting to 1000 [ 430.969216][T10130] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1369'. [ 432.193202][T10152] fuse: fd is not a fuse device [ 432.529359][T10157] wlan0 speed is unknown, defaulting to 1000 [ 432.741777][T10170] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.741911][T10170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.742248][T10170] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.742369][T10170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.873987][T10183] jffs2: notice: (10183) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 433.062831][T10187] fuse: fd is not a fuse device [ 433.084529][T10170] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.149617][ T782] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 433.199208][ T5750] wlan0 speed is unknown, defaulting to 1000 [ 433.772228][T10211] netlink: 'syz.1.1400': attribute type 1 has an invalid length. [ 433.799315][T10211] bond1: (slave veth0_to_bond): Releasing active interface [ 433.856181][T10218] jffs2: notice: (10218) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 434.569288][T10234] jffs2: notice: (10234) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 434.672263][T10239] wlan0 speed is unknown, defaulting to 1000 [ 435.038410][T10256] tipc: Started in network mode [ 435.038469][T10256] tipc: Node identity 4, cluster identity 4711 [ 435.038498][T10256] tipc: Node number set to 4 [ 435.118089][T10263] jffs2: notice: (10263) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 435.256077][T10267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.256525][T10267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.584023][T10281] vivid-000: ================= START STATUS ================= [ 435.602588][T10281] vivid-000: Test Pattern: 75% Colorbar [ 435.620181][T10281] vivid-000: Fill Percentage of Frame: 100 [ 435.626438][T10281] vivid-000: Horizontal Movement: No Movement [ 435.632995][T10281] vivid-000: Vertical Movement: No Movement [ 435.649567][T10281] vivid-000: OSD Text Mode: All [ 435.656169][T10281] vivid-000: Show Border: false [ 435.662028][T10281] vivid-000: Show Square: false [ 435.667289][T10281] vivid-000: Sensor Flipped Horizontally: false [ 435.680290][T10281] vivid-000: Sensor Flipped Vertically: false [ 435.680350][T10281] vivid-000: Insert SAV Code in Image: false [ 435.680370][T10281] vivid-000: Insert EAV Code in Image: false [ 435.680386][T10281] vivid-000: Insert Video Guard Band: false [ 435.680402][T10281] vivid-000: Reduced Framerate: false [ 435.680419][T10281] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 435.680441][T10281] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 435.680461][T10281] vivid-000: Enable Capture Cropping: true [ 435.680479][T10281] vivid-000: Enable Capture Composing: true [ 435.680497][T10281] vivid-000: Enable Capture Scaler: true [ 435.680515][T10281] vivid-000: Timestamp Source: End of Frame [ 435.680533][T10281] vivid-000: Colorspace: sRGB [ 435.680549][T10281] vivid-000: Transfer Function: Default [ 435.680567][T10281] vivid-000: Y'CbCr Encoding: Default [ 435.680584][T10281] vivid-000: HSV Encoding: Hue 0-179 [ 435.680602][T10281] vivid-000: Quantization: Default [ 435.680619][T10281] vivid-000: Apply Alpha To Red Only: false [ 435.680647][T10281] vivid-000: Standard Aspect Ratio: 4x3 [ 435.680665][T10281] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 435.680689][T10281] vivid-000: DV Timings: 640x480p59 inactive [ 435.680712][T10281] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 435.680731][T10281] vivid-000: Maximum EDID Blocks: 2 [ 435.680749][T10281] vivid-000: Limited RGB Range (16-235): false [ 435.680767][T10281] vivid-000: Rx RGB Quantization Range: Automatic [ 435.680785][T10281] vivid-000: Power Present: 0x00000001 [ 435.680805][T10281] tpg source WxH: 320x240 (Y'CbCr) [ 435.680818][T10281] tpg field: 1 [ 435.680825][T10281] tpg crop: (0,0)/320x240 [ 435.680837][T10281] tpg compose: (0,0)/320x240 [ 435.680849][T10281] tpg colorspace: 8 [ 435.680857][T10281] tpg transfer function: 0/0 [ 435.680866][T10281] tpg Y'CbCr encoding: 0/0 [ 435.680875][T10281] tpg quantization: 0/0 [ 435.680883][T10281] tpg RGB range: 0/2 [ 435.680891][T10281] vivid-000: ================== END STATUS ================== [ 435.744596][T10288] binder: BINDER_SET_CONTEXT_MGR already set [ 435.744610][T10288] binder: 10284:10288 ioctl 4018620d 200000000040 returned -16 [ 436.003823][T10294] jffs2: notice: (10294) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 436.143618][T10300] jffs2: notice: (10300) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 436.267281][T10280] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 436.527471][T10323] jffs2: notice: (10323) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 437.038967][ T43] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 437.191992][ T43] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 437.203937][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.214388][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.253885][ T43] as10x_usb: device has been detected [ 437.260842][ T43] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 437.296203][ T43] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 437.408963][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 437.434016][ T43] as10x_usb: error during firmware upload part1 [ 437.443674][ T43] Registered device Abilis Systems DVB-Titan [ 438.098352][T10370] new mount options do not match the existing superblock, will be ignored [ 438.144530][T10370] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 439.076017][ T5729] usb 2-1: USB disconnect, device number 10 [ 439.084978][T10406] fuse: Bad value for 'fd' [ 439.171102][ T5729] Unregistered device Abilis Systems DVB-Titan [ 439.175763][ T5729] as10x_usb: device has been disconnected [ 439.908644][T10423] can0: slcan on ttyS3. [ 440.040891][T10421] can0 (unregistered): slcan off ttyS3. [ 440.055204][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.055277][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.253515][T10442] fuse: Bad value for 'fd' [ 440.372493][T10448] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 442.142760][T10478] socket: no more sockets [ 442.207301][T10491] jffs2: notice: (10491) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 442.418841][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 442.570925][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 442.578271][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 442.590456][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.602002][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.602084][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.640364][ T10] usb 2-1: config 0 descriptor?? [ 442.647685][T10508] can0: slcan on ttyS3. [ 442.713894][T10508] can0 (unregistered): slcan off ttyS3. [ 442.823595][T10514] MTD: Couldn't look up './dev/mtdblock0': -2 [ 443.730714][ T10] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 443.977193][ T5729] usb 2-1: USB disconnect, device number 11 [ 443.990088][T10540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1508'. [ 443.990138][T10540] openvswitch: netlink: Flow actions attr not present in new flow. [ 444.181634][T10543] random: crng reseeded on system resumption [ 445.168348][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1514'. [ 445.191366][T10553] team_slave_0: entered promiscuous mode [ 445.191580][T10553] team_slave_0: left promiscuous mode [ 445.288486][T10561] jffs2: notice: (10561) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 445.819038][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 447.114927][T10579] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1524'. [ 447.114982][T10579] openvswitch: netlink: Flow actions attr not present in new flow. [ 447.854256][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1523'. [ 448.381066][T10596] jffs2: notice: (10596) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 449.656180][ T30] audit: type=1326 audit(1786076389.769:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10617 comm="syz.2.1536" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fe3f9e0d9 code=0x0 [ 451.253778][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'. [ 451.714677][T10642] jffs2: notice: (10642) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 452.055819][ T30] audit: type=1326 audit(1786076392.169:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10657 comm="syz.0.1551" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6b559e0d9 code=0x0 [ 453.692415][T10705] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1567'. [ 453.874539][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1571'. [ 454.384914][T10742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1581'. [ 454.476364][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1582'. [ 455.530954][T10785] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1597'. [ 456.935962][T10825] MTD: Couldn't look up './dev/mtdblock0': -2 [ 458.007504][T10823] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 458.141560][T10828] wlan0 speed is unknown, defaulting to 1000 [ 458.252220][T10839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1616'. [ 458.252392][T10839] openvswitch: netlink: Flow actions attr not present in new flow. [ 458.255002][T10840] MTD: Couldn't look up './dev/mtdblock0': -2 [ 459.569066][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 459.768440][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 459.822688][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 459.822744][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 459.846995][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.981730][T10856] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 460.203043][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 460.544744][T10867] vivid-003: disconnect [ 461.087710][T10854] vivid-003: reconnect [ 461.168933][ T10] usb 5-1: USB disconnect, device number 19 [ 461.290268][T10877] MTD: Couldn't look up './dev/mtdblock0': -2 [ 461.441375][T10881] No source specified [ 461.463550][T10880] wlan0 speed is unknown, defaulting to 1000 [ 461.493377][T10884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1631'. [ 461.493438][T10884] openvswitch: netlink: Flow actions attr not present in new flow. [ 461.681371][T10888] netlink: 'syz.2.1632': attribute type 1 has an invalid length. [ 462.323225][T10888] 8021q: adding VLAN 0 to HW filter on device bond4 [ 462.449226][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 462.479809][T10893] 8021q: adding VLAN 0 to HW filter on device bond4 [ 462.487111][T10893] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 462.499644][T10893] bond4: (slave gre1): Error -95 calling set_mac_address [ 462.680949][T10894] gretap1: entered promiscuous mode [ 462.686390][T10894] bond4: (slave gretap1): making interface the new active one [ 462.686934][T10894] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 462.733041][T10912] MTD: Couldn't look up './dev/mtdblock0': -2 [ 462.809478][T10888] 8021q: adding VLAN 0 to HW filter on device bond5 [ 462.817066][T10888] bond4: (slave bond5): Enslaving as an active interface with a down link [ 462.857791][T10899] bond4 (unregistering): (slave gretap1): Releasing active interface [ 462.886060][T10899] bond4 (unregistering): (slave bond5): Releasing active interface [ 463.076994][T10899] bond4 (unregistering): Released all slaves [ 463.432832][T10925] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 463.432954][T10925] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 463.558368][T10927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.559232][T10927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.843556][T10932] vivid-000: disconnect [ 464.116797][T10934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1647'. [ 464.116847][T10934] openvswitch: netlink: Flow actions attr not present in new flow. [ 465.024610][T10949] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1652'. [ 465.047394][T10951] MTD: Couldn't look up './dev/mtdblock0': -2 [ 465.145066][T10956] cgroup: Unknown subsys name '' [ 465.185835][T10926] vivid-000: reconnect [ 465.231695][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 465.322329][T10969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1662'. [ 465.331915][T10969] openvswitch: netlink: Flow actions attr not present in new flow. [ 465.489380][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 465.495310][ T10] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 465.505885][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.516299][ T10] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 465.528271][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.051429][ T10] usb 5-1: Product: syz [ 466.051493][ T10] usb 5-1: Manufacturer: syz [ 466.051507][ T10] usb 5-1: SerialNumber: syz [ 466.519694][T10988] MTD: Couldn't look up './dev/mtdblock0': -2 [ 466.576901][ T10] usb 5-1: USB disconnect, device number 20 [ 467.668692][T11010] MTRR 1 not used [ 467.806470][T11020] MTD: Couldn't look up './dev/mtdblock0': -2 [ 467.899573][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 467.927869][T11028] fuse: Bad value for 'fd' [ 468.075277][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 468.100770][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 468.100823][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 468.100880][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.798527][T11013] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 468.846011][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 468.950023][T11036] MTD: Couldn't look up './dev/mtdblock0': -2 [ 469.233092][T11044] vivid-003: disconnect [ 469.339789][ T30] audit: type=1800 audit(1786076409.449:215): pid=11046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1691" name="in_ports" dev="configfs" ino=28667 res=0 errno=0 [ 469.714663][T11053] MTD: Couldn't look up './dev/mtdblock0': -2 [ 469.818827][T11058] siw: device registration error -23 [ 469.821266][T11058] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1693'. [ 470.516781][T11058] xt_TPROXY: Can be used only with -p tcp or -p udp [ 470.618326][T11063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1696'. [ 470.618363][T11063] openvswitch: netlink: Flow actions attr not present in new flow. [ 470.823252][T11066] MTD: Couldn't look up './dev/mtdblock0': -2 [ 471.730441][T11074] fuse: Bad value for 'fd' [ 471.893507][T11012] vivid-003: reconnect [ 471.902741][ T5729] usb 5-1: USB disconnect, device number 21 [ 471.963355][T11078] MTD: Couldn't look up './dev/mtdblock0': -2 [ 472.169898][T11086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.181025][T11086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.831397][T11093] MTD: Couldn't look up './dev/mtdblock0': -2 [ 473.110535][T11099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1709'. [ 473.110583][T11099] openvswitch: netlink: Flow actions attr not present in new flow. [ 474.215237][T11122] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1716'. [ 474.247346][T11122] bond1: (slave veth0_to_bond): Releasing active interface [ 474.630789][T11144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1725'. [ 474.631087][T11144] openvswitch: netlink: Flow actions attr not present in new flow. [ 474.815510][T11148] loop4: detected capacity change from 0 to 4096 [ 475.573240][T11148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.770451][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.862426][T11167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1734'. [ 476.088585][T11175] CacheFiles: No cache directory specified [ 476.190818][ T43] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 476.639202][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 476.658635][ T43] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 476.739039][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.739114][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.739152][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 476.739199][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.899239][ T43] usb 2-1: config 0 descriptor?? [ 478.894874][T11195] loop0: detected capacity change from 0 to 256 [ 479.042810][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1743'. [ 479.042856][T11197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1743'. [ 479.072853][T11197] netlink: 'syz.2.1743': attribute type 10 has an invalid length. [ 479.119341][ T6334] bond3: (slave bond0): link status definitely down, disabling slave [ 479.129563][ T6334] bond3: now running without any active interface! [ 479.384646][T11206] netlink: 'syz.3.1750': attribute type 1 has an invalid length. [ 479.614328][T11212] CacheFiles: No cache directory specified [ 480.354465][ T5750] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 480.377709][ T43] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 480.395577][ T43] microsoft 0003:045E:07DA.0003: no inputs found [ 480.402768][ T43] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 480.413340][T11221] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1757'. [ 480.433499][ T43] usb 2-1: USB disconnect, device number 12 [ 480.510195][T11224] loop0: detected capacity change from 0 to 512 [ 480.522222][ T5750] usb 5-1: Using ep0 maxpacket: 8 [ 480.525766][ T5750] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 480.527772][ T5750] usb 5-1: config 0 has no interfaces? [ 480.527817][ T5750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.538392][ T5750] usb 5-1: config 0 descriptor?? [ 480.556083][T11224] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 480.606999][T11224] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1758: bad orphan inode 13 [ 480.628175][T11224] loop0: lost filesystem error report for type 5 error -117 [ 480.635156][T11224] ext4_test_bit(bit=12, block=18) = 1 [ 480.635203][T11224] is_bad_inode(inode)=0 [ 480.635216][T11224] NEXT_ORPHAN(inode)=0 [ 480.635227][T11224] max_ino=32 [ 480.635238][T11224] i_nlink=1 [ 480.673701][T11224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 480.697485][T11224] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 480.718604][T11224] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1758: bg 0: block 248: padding at end of block bitmap is not set [ 480.739829][T11224] Quota error (device loop0): write_blk: dquota write failed [ 480.749430][T11224] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 480.759714][T11224] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.1758: Failed to acquire dquot type 1 [ 480.761746][ T5750] usb 5-1: USB disconnect, device number 22 [ 480.822544][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 480.948083][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1764'. [ 481.111264][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1763'. [ 481.121421][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1763'. [ 481.141702][T11246] netlink: 'syz.0.1763': attribute type 10 has an invalid length. [ 481.150581][T11246] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.151237][T11246] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.200475][ T5923] bond3: (slave bond0): link status definitely down, disabling slave [ 481.201648][ T5923] bond3: now running without any active interface! [ 481.866820][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1776'. [ 482.338205][T11300] netlink: 'syz.3.1789': attribute type 2 has an invalid length. [ 482.463857][T11301] loop4: detected capacity change from 0 to 1024 [ 482.545145][T11301] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 482.545190][T11301] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) [ 482.608453][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'. [ 483.592256][T11324] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1801'. [ 484.948013][T11364] capability: warning: `syz.0.1816' uses deprecated v2 capabilities in a way that may be insecure [ 485.135360][T11370] loop1: detected capacity change from 0 to 1024 [ 485.177101][T11373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.180487][T11373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.220528][T11377] netlink: '%}': attribute type 10 has an invalid length. [ 485.226065][T11377] netlink: 180 bytes leftover after parsing attributes in process `%}'. [ 485.271659][T11370] hfsplus: failed to load extents file [ 486.609357][T11394] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1829'. [ 486.621330][T11394] openvswitch: netlink: Flow actions attr not present in new flow. [ 488.058452][T11410] loop4: detected capacity change from 0 to 512 [ 488.060661][T11410] EXT4-fs: Ignoring removed mblk_io_submit option [ 488.117075][T11414] binder: BINDER_SET_CONTEXT_MGR already set [ 488.130424][T11414] binder: 11413:11414 ioctl 4018620d 200000000300 returned -16 [ 488.152404][T11414] binder: 11413:11414 ioctl c0306201 0 returned -14 [ 488.163787][T11414] binder: 11413:11414 ioctl c0306201 0 returned -14 [ 488.211435][T11410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.211561][T11410] ext4 filesystem being mounted at /327/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.511699][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.620599][T11444] loop4: detected capacity change from 0 to 8192 [ 490.643596][T11450] jffs2: notice: (11450) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 490.786232][ T30] audit: type=1800 audit(1786076430.899:216): pid=11453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1847" name="file2" dev="loop4" ino=1048642 res=0 errno=0 [ 491.006524][T11461] netlink: 'syz.3.1855': attribute type 2 has an invalid length. [ 491.090029][T11463] loop1: detected capacity change from 0 to 8192 [ 491.102635][T11463] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 492.535017][T11477] loop0: detected capacity change from 0 to 4096 [ 492.539919][T11484] jffs2: notice: (11484) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 492.603588][T11477] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #3: comm syz.0.1859: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 1, max 0(0), depth 0(0) [ 492.603879][T11477] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 492.621490][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 492.621514][ C1] EXT4-fs (loop0): initial error at time 1786076432: ext4_ext_check_inode:521: inode 3 [ 492.621543][ C1] EXT4-fs (loop0): last error at time 1786076432: ext4_ext_check_inode:521: inode 3 [ 492.632166][T11477] EXT4-fs error (device loop0): ext4_quota_enable:7263: comm syz.0.1859: Bad quota inode: 3, type: 0 [ 492.632200][T11477] loop0: lost filesystem error report for type 5 error -117 [ 492.671108][T11477] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 492.671612][T11477] EXT4-fs (loop0): mount failed [ 492.724254][T11491] netlink: 'syz.3.1866': attribute type 2 has an invalid length. [ 492.993862][T11503] loop0: detected capacity change from 0 to 1024 [ 493.010942][T11503] hfsplus: failed to load extents file [ 493.205078][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'. [ 493.242862][T11509] loop4: detected capacity change from 0 to 8192 [ 493.692151][T11527] jffs2: notice: (11527) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 493.909004][T11532] netlink: 'syz.2.1878': attribute type 2 has an invalid length. [ 494.065393][T11537] loop4: detected capacity change from 0 to 1024 [ 494.096858][T11537] hfsplus: failed to load extents file [ 494.425628][T11549] loop4: detected capacity change from 0 to 2048 [ 494.450778][T11549] udf: Bad value for 'session' [ 494.527661][T11558] jffs2: notice: (11558) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 494.655458][T11564] netlink: 'syz.2.1892': attribute type 2 has an invalid length. [ 494.709707][ T5729] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 495.504215][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1891'. [ 495.858563][ T5729] usb 5-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 495.874787][ T5729] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.874837][ T5729] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 495.897881][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.897927][ T5729] usb 5-1: Product: syz [ 495.897961][ T5729] usb 5-1: Manufacturer: syz [ 495.897978][ T5729] usb 5-1: SerialNumber: syz [ 496.536741][ T5729] usb 5-1: USB disconnect, device number 23 [ 496.616285][T11599] overlayfs: failed to resolve './file0': -2 [ 497.332483][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1908'. [ 497.672289][T11619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1910'. [ 499.751631][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1926'. [ 500.836130][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 500.846857][T11712] bond4: option mode: unable to set because the bond device is up [ 500.867420][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 500.876599][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1942'. [ 500.896179][T11712] netlink: 'syz.1.1942': attribute type 10 has an invalid length. [ 500.896467][T11712] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.897151][T11712] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.057709][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.057767][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.133574][T11752] loop4: detected capacity change from 0 to 1024 [ 503.740400][T11764] MTD: Couldn't look up './dev/mtdblock0': -2 [ 504.015779][ T4933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 504.025581][ T4933] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 504.033940][ T4933] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 504.046169][ T4933] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 504.064626][ T4933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 504.237783][T11782] netlink: 'syz.0.1967': attribute type 2 has an invalid length. [ 504.561318][T11793] loop4: detected capacity change from 0 to 2048 [ 504.705498][T11793] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 504.758699][T11768] wlan0 speed is unknown, defaulting to 1000 [ 504.858945][T11793] [syz.4.1970/11793] FS: loop4 File: /file1 would truncate fibmap result [ 504.985342][T11804] MTD: Couldn't look up './dev/mtdblock0': -2 [ 505.103717][T11810] netlink: 'syz.3.1978': attribute type 2 has an invalid length. [ 505.381507][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1979'. [ 505.381555][T11822] bond4: option mode: unable to set because the bond device has slaves [ 505.406130][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1979'. [ 505.406167][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1979'. [ 505.422539][T11822] netlink: 'syz.3.1979': attribute type 10 has an invalid length. [ 505.597707][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1981'. [ 505.815688][T11768] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.815808][T11768] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.815964][T11768] bridge_slave_0: entered allmulticast mode [ 505.823878][T11768] bridge_slave_0: entered promiscuous mode [ 505.834719][T11768] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.842035][T11768] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.842202][T11768] bridge_slave_1: entered allmulticast mode [ 505.848799][T11768] bridge_slave_1: entered promiscuous mode [ 505.894388][T11844] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1987'. [ 505.894432][T11844] openvswitch: netlink: Flow actions attr not present in new flow. [ 505.907584][T11842] MTD: Couldn't look up './dev/mtdblock0': -2 [ 506.045586][T11768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.066336][T11768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.132159][ T5625] Bluetooth: hci2: command tx timeout [ 506.604220][T11768] team0: Port device team_slave_0 added [ 506.613501][T11768] team0: Port device team_slave_1 added [ 506.624679][T11851] loop4: detected capacity change from 0 to 512 [ 506.625604][T11851] EXT4-fs: Ignoring removed orlov option [ 506.635241][T11851] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 506.635260][T11851] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 506.676231][T11768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.676270][T11768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.678820][T11768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.680711][T11768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.680724][T11768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.680746][T11768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.710070][T11851] EXT4-fs (loop4): 1 truncate cleaned up [ 506.721313][T11852] netlink: 'syz.3.1988': attribute type 2 has an invalid length. [ 506.909083][T11851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.938039][T11851] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.1989: Logical block already allocated [ 507.042550][T11768] hsr_slave_0: entered promiscuous mode [ 507.045176][T11768] hsr_slave_1: entered promiscuous mode [ 507.046027][T11768] debugfs: 'hsr0' already exists in 'hsr' [ 507.046046][T11768] Cannot create hsr debugfs directory [ 507.108445][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.147610][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1993'. [ 507.211696][T11864] 8021q: adding VLAN 0 to HW filter on device bond4 [ 507.244777][T11860] bond1: (slave veth0_to_bond): Releasing active interface [ 507.257334][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1993'. [ 507.257373][T11862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1993'. [ 507.301979][T11860] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 507.325092][T11871] bond4: option mode: unable to set because the bond device has slaves [ 507.333498][T11871] netlink: 'syz.3.1993': attribute type 10 has an invalid length. [ 507.385773][T11872] macvlan2: entered promiscuous mode [ 507.393733][T11872] macvlan2: entered allmulticast mode [ 507.401563][T11872] bond4: entered promiscuous mode [ 507.406833][T11872] veth0_to_bond: entered promiscuous mode [ 507.413331][T11872] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 507.422622][T11872] bond4: left promiscuous mode [ 507.422666][T11872] veth0_to_bond: left promiscuous mode [ 507.676527][T11886] loop0: detected capacity change from 0 to 1024 [ 507.689168][T11886] hfsplus: failed to load extents file [ 507.694798][T11888] overlayfs: failed to resolve './file0': -2 [ 507.830811][T11891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2000'. [ 507.830852][T11891] openvswitch: netlink: Flow actions attr not present in new flow. [ 508.072980][T11896] netlink: 'syz.3.2002': attribute type 2 has an invalid length. [ 508.232630][ T5625] Bluetooth: hci2: command tx timeout [ 508.987711][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'. [ 508.988544][T11907] 8021q: adding VLAN 0 to HW filter on device bond2 [ 509.066682][T11914] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 509.078636][T11915] bond3: option mode: unable to set because the bond device has slaves [ 509.096264][T11907] macvlan2: entered promiscuous mode [ 509.096297][T11907] macvlan2: entered allmulticast mode [ 509.108294][T11907] bond2: entered promiscuous mode [ 509.108328][T11907] veth0_to_bond: entered promiscuous mode [ 509.138629][T11907] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 509.146204][T11915] netlink: 'syz.2.2009': attribute type 10 has an invalid length. [ 509.173723][T11920] overlayfs: failed to resolve './file0': -2 [ 509.180591][T11907] bond2: left promiscuous mode [ 509.185464][T11907] veth0_to_bond: left promiscuous mode [ 509.299136][T11768] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 509.332760][T11768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 509.333655][T11768] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 509.336014][T11924] netlink: 'syz.2.2013': attribute type 2 has an invalid length. [ 509.363958][T11768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 509.379725][T11768] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 509.422901][T11926] openvswitch: netlink: Flow actions attr not present in new flow. [ 509.423430][T11768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 509.434715][T11768] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 509.470042][T11768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 510.308905][ T5625] Bluetooth: hci2: command tx timeout [ 510.356774][T11947] overlayfs: failed to resolve './file0': -2 [ 510.464494][T11768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.510724][T11768] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.544548][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.544668][ T782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.575883][ T6368] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.576003][ T6368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.619076][T11965] __nla_validate_parse: 3 callbacks suppressed [ 510.625516][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2022'. [ 510.644297][T11965] bond3: option mode: unable to set because the bond device has slaves [ 510.658385][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2022'. [ 510.667943][T11965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2022'. [ 510.680120][T11965] netlink: 'syz.0.2022': attribute type 10 has an invalid length. [ 510.975842][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2029'. [ 511.004183][T11976] team_slave_0: entered promiscuous mode [ 511.004397][T11976] team_slave_0: left promiscuous mode [ 511.158375][T11986] No source specified [ 511.196220][T11988] overlayfs: failed to resolve './file1': -2 [ 511.912128][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2044'. [ 511.921955][T12015] No source specified [ 511.950208][T12017] team_slave_0: entered promiscuous mode [ 511.962660][T12017] team_slave_0: left promiscuous mode [ 512.016804][T11768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.369983][ T5625] Bluetooth: hci2: command tx timeout [ 512.842103][T12042] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.842227][T12042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.842534][T12042] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.842651][T12042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.910078][T12046] loop4: detected capacity change from 0 to 128 [ 512.916558][T12042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.926768][T12046] FAT-fs (loop4): invalid media value (0x07) [ 512.933434][T12046] FAT-fs (loop4): Can't find a valid FAT filesystem [ 513.241342][T12048] loop4: detected capacity change from 0 to 2048 [ 513.243354][T12048] udf: Unknown parameter 'sk Eth Pid' [ 514.045750][T12050] No source specified [ 514.099172][ T59] bond4: (slave bond0): link status definitely up, 20000 Mbps full duplex [ 514.099275][ T59] bond4: (slave bond0): making interface the new active one [ 514.127456][ T59] bond4: active interface up! [ 514.295828][T11768] veth0_vlan: entered promiscuous mode [ 514.405829][T11768] veth1_vlan: entered promiscuous mode [ 514.675238][T11768] veth0_macvtap: entered promiscuous mode [ 514.717326][T11768] veth1_macvtap: entered promiscuous mode [ 514.784799][T11768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.812227][T11768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.899809][ T5918] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.900214][ T5918] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.086988][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.087032][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.099326][ T6349] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.099400][ T6349] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.183499][ T5923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.183545][ T5923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.711006][T12083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.722266][T12083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.808877][T12102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2077'. [ 516.866846][T12104] loop5: detected capacity change from 0 to 2048 [ 516.890472][T12104] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 517.151839][T12111] netlink: 'syz.0.2082': attribute type 1 has an invalid length. [ 517.266208][T12111] 8021q: adding VLAN 0 to HW filter on device bond5 [ 517.351184][T12115] bond4: (slave veth0_to_bond): Releasing backup interface [ 517.394473][T12124] loop5: detected capacity change from 0 to 512 [ 517.431290][T12115] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 517.496355][T12111] macvlan2: entered promiscuous mode [ 517.496387][T12111] macvlan2: entered allmulticast mode [ 517.498289][T12124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.498389][T12124] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.500000][T12111] bond5: entered promiscuous mode [ 517.501892][T12111] veth0_to_bond: entered promiscuous mode [ 517.518480][T12111] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 517.551757][T12111] bond5: left promiscuous mode [ 517.551780][T12111] veth0_to_bond: left promiscuous mode [ 517.604840][ T30] audit: type=1800 audit(1786076457.719:217): pid=12124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2083" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 517.891672][T11768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.998469][T12145] Invalid ELF header magic: != ELF [ 519.005540][T12159] netlink: 'syz.3.2100': attribute type 1 has an invalid length. [ 519.042060][T12163] jffs2: notice: (12163) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 519.077280][T12166] loop0: detected capacity change from 0 to 512 [ 519.091595][T12159] 8021q: adding VLAN 0 to HW filter on device bond5 [ 519.126668][T12162] bond3: (slave veth0_to_bond): Releasing active interface [ 519.169395][T12166] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 519.186685][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 519.186710][ C0] EXT4-fs (loop0): initial error at time 1786076459: mb_free_blocks:2049: inode 11: block 64 [ 519.186747][ C0] EXT4-fs (loop0): last error at time 1786076459: mb_free_blocks:2049: inode 11: block 64 [ 519.189788][T12162] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 519.211099][T12166] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #11: comm syz.0.2102: corrupted inode contents [ 519.211130][T12166] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 519.347237][T12166] EXT4-fs error (device loop0): ext4_dirty_inode:6731: inode #11: comm syz.0.2102: mark_inode_dirty error [ 519.347290][T12166] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 519.373732][T12166] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2102: invalid indirect mapped block 1 (level 1) [ 519.373791][T12166] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 519.403060][T12166] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #11: comm syz.0.2102: corrupted inode contents [ 519.403164][T12166] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 519.451942][T12159] macvlan2: entered promiscuous mode [ 519.451972][T12159] macvlan2: entered allmulticast mode [ 519.479989][T12166] EXT4-fs error (device loop0) in ext4_orphan_del:304: Corrupt filesystem [ 519.480645][T12159] bond5: entered promiscuous mode [ 519.480666][T12159] veth0_to_bond: entered promiscuous mode [ 519.481556][T12159] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 519.508147][T12166] loop0: lost filesystem error report for type 5 error -117 [ 519.509213][T12159] bond5: left promiscuous mode [ 519.509255][T12159] veth0_to_bond: left promiscuous mode [ 519.531558][T12166] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #11: comm syz.0.2102: corrupted inode contents [ 519.546499][T12166] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 519.547622][T12166] EXT4-fs error (device loop0): ext4_truncate:4721: inode #11: comm syz.0.2102: mark_inode_dirty error [ 519.583968][T12166] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 519.584644][T12166] EXT4-fs error (device loop0) in ext4_process_orphan:346: Corrupt filesystem [ 519.595581][T12166] loop0: lost filesystem error report for type 5 error -117 [ 519.607015][T12166] EXT4-fs (loop0): 1 truncate cleaned up [ 519.624561][T12166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.666570][T12166] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 13: comm syz.0.2102: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 519.743782][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.174676][T12206] tipc: Started in network mode [ 521.174723][T12206] tipc: Node identity 4, cluster identity 4711 [ 521.174753][T12206] tipc: Node number set to 4 [ 521.336599][T12214] loop5: detected capacity change from 0 to 512 [ 521.345314][T12214] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 521.383158][T12214] EXT4-fs (loop5): 1 truncate cleaned up [ 521.399160][T12214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.225877][T11768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.434051][T12244] jffs2: notice: (12244) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 523.828430][T12262] CacheFiles: No cache directory specified [ 523.919606][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2131'. [ 523.919807][T12263] bond4: option mode: unable to set because the bond device has slaves [ 524.068828][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2131'. [ 524.106326][T12263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2131'. [ 524.619498][ T1160] bond4: (slave bond0): link status definitely down, disabling slave [ 524.630635][ T1160] bond4: now running without any active interface! [ 524.677294][T12263] netlink: 'syz.3.2131': attribute type 10 has an invalid length. [ 524.677566][T12263] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.678194][T12263] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.704644][T12271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.705106][T12271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.845297][T12273] vivid-000: disconnect [ 525.462927][T12265] vivid-000: reconnect [ 526.349151][T12287] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2139'. [ 527.282079][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2145'. [ 527.309020][T12303] team_slave_0: entered promiscuous mode [ 527.309241][T12303] team_slave_0: left promiscuous mode [ 527.762096][T12320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2152'. [ 527.762140][T12320] openvswitch: netlink: Flow actions attr not present in new flow. [ 528.931811][T12334] loop0: detected capacity change from 0 to 128 [ 528.934335][ T30] audit: type=1800 audit(1786076469.049:218): pid=12335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2157" name="in_ports" dev="configfs" ino=35092 res=0 errno=0 [ 529.089621][T12337] CacheFiles: No cache directory specified [ 530.070727][T12347] tipc: Started in network mode [ 530.070794][T12347] tipc: Node identity 4, cluster identity 4711 [ 530.070807][T12347] tipc: Node number set to 4 [ 530.081679][T12353] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2166'. [ 530.081701][T12353] openvswitch: netlink: Flow actions attr not present in new flow. [ 531.072403][ T30] audit: type=1800 audit(1786076471.189:219): pid=12365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2170" name="in_ports" dev="configfs" ino=35148 res=0 errno=0 [ 531.293626][T12371] jffs2: notice: (12371) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 531.319257][T12375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.319857][T12375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.476538][T12379] CacheFiles: No cache directory specified [ 532.292122][T12381] loop4: detected capacity change from 0 to 256 [ 532.309931][T12381] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 532.322293][T12381] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 532.361603][T12381] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 532.383146][T12381] exFAT-fs (loop4): failed to load alloc-bitmap [ 532.392402][T12381] exFAT-fs (loop4): failed to recognize exfat type [ 532.687917][T12394] kvm: emulating exchange as write [ 532.701564][T12396] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2182'. [ 532.701602][T12396] openvswitch: netlink: Flow actions attr not present in new flow. [ 532.761728][ T30] audit: type=1800 audit(1786076472.879:220): pid=12399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2184" name="in_ports" dev="configfs" ino=35263 res=0 errno=0 [ 533.570882][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2186'. [ 533.582050][T12414] bond3: option mode: unable to set because the bond device has slaves [ 533.596098][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2186'. [ 533.596138][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2186'. [ 533.640908][T12414] netlink: 'syz.2.2186': attribute type 10 has an invalid length. [ 533.878645][T12424] siw: device registration error -23 [ 533.905680][T12424] xt_TPROXY: Can be used only with -p tcp or -p udp [ 536.577908][ T43] wlan0 speed is unknown, defaulting to 1000 [ 536.586104][ T43] syz0: Port: 1 Link DOWN [ 537.178674][T12498] loop5: detected capacity change from 0 to 128 [ 537.216321][T12498] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 537.235933][T12498] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 537.280577][T12498] EXT4-fs error (device loop5): __ext4_find_entry:1628: inode #2: comm syz.5.2213: checksumming directory block 0 [ 537.297056][T12498] EXT4-fs error (device loop5): __ext4_find_entry:1628: inode #2: comm syz.5.2213: checksumming directory block 0 [ 537.457000][T11768] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 537.818219][T12514] loop0: detected capacity change from 0 to 1024 [ 538.392351][T12514] hfsplus: failed to load extents file [ 539.483508][T12540] wlan0 speed is unknown, defaulting to 1000 [ 539.605131][T12545] loop5: detected capacity change from 0 to 256 [ 539.620134][T12545] exfat: Invalid uid '0x00000000ffffffff' [ 539.741705][T12551] loop4: detected capacity change from 0 to 128 [ 540.940201][T12552] jffs2: notice: (12552) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 542.275986][T12575] loop5: detected capacity change from 0 to 1024 [ 542.363636][T12575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 542.363767][T12575] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.460935][T12583] cgroup: Unknown subsys name 'cpuset' [ 542.687490][T12590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.700392][T12590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.703645][T11768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 542.834146][T12592] fuse: Bad value for 'group_id' [ 542.834195][T12592] fuse: Bad value for 'group_id' [ 543.920000][T12607] fuse: Bad value for 'fd' [ 545.495303][T12640] fuse: Bad value for 'user_id' [ 545.501464][T12640] fuse: Bad value for 'user_id' [ 545.541115][T12640] loop4: detected capacity change from 0 to 1024 [ 545.715615][T12645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2255'. [ 545.715658][T12645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2255'. [ 546.266210][T12650] jffs2: notice: (12650) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 546.269120][T12640] hfsplus: failed to load attributes file [ 546.665421][T12667] fuse: Bad value for 'fd' [ 547.491324][T12682] overlayfs: missing 'lowerdir' [ 549.045470][T12696] wlan0 speed is unknown, defaulting to 1000 [ 550.191462][T12733] loop0: detected capacity change from 0 to 1024 [ 550.253992][T12733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.273907][T12735] jffs2: notice: (12735) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 550.444717][T12749] overlayfs: missing 'lowerdir' [ 551.378043][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.388237][T12764] netlink: 'syz.4.2283': attribute type 4 has an invalid length. [ 552.185311][T12775] loop4: detected capacity change from 0 to 128 [ 552.196117][T12775] FAT-fs (loop4): Directory bread(block 1048) failed [ 552.196180][T12775] FAT-fs (loop4): Directory bread(block 1049) failed [ 552.196202][T12775] FAT-fs (loop4): Directory bread(block 1050) failed [ 552.196222][T12775] FAT-fs (loop4): Directory bread(block 1051) failed [ 552.196252][T12775] FAT-fs (loop4): Directory bread(block 1052) failed [ 552.196273][T12775] FAT-fs (loop4): Directory bread(block 1053) failed [ 552.196294][T12775] FAT-fs (loop4): Directory bread(block 1054) failed [ 552.196315][T12775] FAT-fs (loop4): Directory bread(block 1055) failed [ 552.308243][T12778] dummy0: entered promiscuous mode [ 552.333836][T12783] overlayfs: missing 'lowerdir' [ 552.363042][T12775] syz.4.2290: attempt to access beyond end of device [ 552.363042][T12775] loop4: rw=8390659, sector=1096, nr_sectors = 8 limit=128 [ 552.408971][T12778] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 552.463506][T12778] hsr1: entered allmulticast mode [ 552.463553][T12778] dummy0: entered allmulticast mode [ 552.463622][T12778] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 552.464333][T12788] MTD: Couldn't look up './dev/mtdblock0': -2 [ 554.102465][T12811] loop0: detected capacity change from 0 to 512 [ 554.128144][T12811] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 554.137765][T12811] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 554.191554][T12811] EXT4-fs (loop0): 1 truncate cleaned up [ 554.200710][T12811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.224241][T12811] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.2302: Logical block already allocated [ 554.312238][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.361199][T12823] overlayfs: missing 'lowerdir' [ 554.501757][T12828] jffs2: notice: (12828) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 555.634965][T12848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2315'. [ 555.769437][T12854] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 555.902786][T12864] xt_hashlimit: size too large, truncated to 1048576 [ 555.909019][T12860] wlan0 speed is unknown, defaulting to 1000 [ 556.756559][T12885] netlink: 'syz.0.2327': attribute type 3 has an invalid length. [ 556.865571][T12889] loop4: detected capacity change from 0 to 2048 [ 556.941088][T12889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ ** replaying previous printk message ** [ 557.043920][T12889] ------------[ cut here ]------------ [ 557.043962][T12889] lim->dma_alignment > PAGE_SIZE [ 557.043998][T12889] WARNING: block/blk-settings.c:497 at blk_validate_limits+0x1676/0x2270, CPU#1: syz.4.2329/12889 [ 557.070013][T12889] Modules linked in: [ 557.073960][T12889] CPU: 1 UID: 0 PID: 12889 Comm: syz.4.2329 Not tainted syzkaller #0 PREEMPT(full) [ 557.083797][T12889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 557.094225][T12889] RIP: 0010:blk_validate_limits+0x1676/0x2270 [ 557.100381][T12889] Code: e8 3f 86 11 fd 90 0f 0b 90 eb 8f e8 34 86 11 fd 90 0f 0b 90 eb 84 e8 29 86 11 fd 90 0f 0b 90 e9 76 ff ff ff e8 1b 86 11 fd 90 <0f> 0b 90 e9 68 ff ff ff e8 0d 86 11 fd 90 0f 0b 90 e9 81 00 00 00 [ 557.120202][T12889] RSP: 0018:ffffc9000dc6ee60 EFLAGS: 00010283 [ 557.126304][T12889] RAX: ffffffff84b5fdd5 RBX: ffffc9000dc6f0f0 RCX: 0000000000080000 [ 557.134348][T12889] RDX: ffffc90005e31000 RSI: 0000000000000988 RDI: 0000000000000989 [ 557.142406][T12889] RBP: 00000000ffffffff R08: ffff8880238b36b7 R09: 1ffff110047166d6 [ 557.150475][T12889] R10: dffffc0000000000 R11: ffffed10047166d7 R12: ffffc9000dc6f040 [ 557.158459][T12889] R13: dffffc0000000000 R14: 1ffff92001b8de1e R15: dffffc0000000000 [ 557.166489][T12889] FS: 00007fb9abeed6c0(0000) GS:ffff888125018000(0000) knlGS:0000000000000000 [ 557.175574][T12889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 557.182247][T12889] CR2: 000020000009e030 CR3: 000000007567a000 CR4: 00000000003526f0 [ 557.190285][T12889] Call Trace: [ 557.193584][T12889] [ 557.196550][T12889] queue_limits_commit_update+0x87/0x390 [ 557.202257][T12889] loop_configure+0x7f1/0xdc0 [ 557.206980][T12889] ? __pfx_loop_configure+0x10/0x10 [ 557.212352][T12889] ? do_raw_spin_lock+0x12b/0x2f0 [ 557.217435][T12889] lo_ioctl+0xad5/0x2150 [ 557.221765][T12889] ? __lock_acquire+0x6df/0x2e50 [ 557.226740][T12889] ? __pfx_lo_ioctl+0x10/0x10 [ 557.231519][T12889] ? lock_acquire+0x115/0x350 [ 557.236237][T12889] ? lock_acquire+0x115/0x350 [ 557.241317][T12889] ? __lock_acquire+0x6df/0x2e50 [ 557.246304][T12889] ? is_bpf_text_address+0x26/0x2b0 [ 557.251568][T12889] ? is_bpf_text_address+0x292/0x2b0 [ 557.256898][T12889] ? is_bpf_text_address+0x26/0x2b0 [ 557.262220][T12889] ? __lock_acquire+0x6df/0x2e50 [ 557.267195][T12889] ? __lock_acquire+0x6df/0x2e50 [ 557.272274][T12889] ? __lock_acquire+0x6df/0x2e50 [ 557.277254][T12889] ? __lock_acquire+0x6df/0x2e50 [ 557.282316][T12889] ? lock_acquire+0x115/0x350 [ 557.287031][T12889] ? lock_acquire+0x115/0x350 [ 557.291831][T12889] ? lock_acquire+0x115/0x350 [ 557.296540][T12889] ? is_bpf_text_address+0x26/0x2b0 [ 557.301819][T12889] ? is_bpf_text_address+0x292/0x2b0 [ 557.307122][T12889] ? is_bpf_text_address+0x26/0x2b0 [ 557.312406][T12889] ? kernel_text_address+0xa5/0xe0 [ 557.317528][T12889] ? __kernel_text_address+0xd/0x30 [ 557.322822][T12889] ? unwind_get_return_address+0x4d/0x90 [ 557.328471][T12889] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 557.334836][T12889] ? arch_stack_walk+0xfb/0x150 [ 557.339781][T12889] ? stack_trace_save+0xa9/0x100 [ 557.344745][T12889] ? __pfx_stack_trace_save+0x10/0x10 [ 557.350228][T12889] ? kasan_save_track+0x4f/0x80 [ 557.355097][T12889] ? stack_depot_save_flags+0x33/0x800 [ 557.360656][T12889] ? __lock_acquire+0x6df/0x2e50 [ 557.365621][T12889] ? kasan_save_track+0x4f/0x80 [ 557.370673][T12889] ? kasan_save_track+0x3e/0x80 [ 557.375567][T12889] ? kasan_save_free_info+0x40/0x50 [ 557.380825][T12889] ? __kasan_slab_free+0x5c/0x80 [ 557.385776][T12889] ? kfree+0x1c5/0x650 [ 557.389928][T12889] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 557.395582][T12889] ? security_file_ioctl+0xc3/0x2a0 [ 557.400878][T12889] ? __se_sys_ioctl+0x47/0x170 [ 557.405675][T12889] ? do_syscall_64+0x166/0x510 [ 557.410515][T12889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.416607][T12889] ? __asan_memset+0x22/0x50 [ 557.421279][T12889] ? blk_get_meta_cap+0x19d/0x780 [ 557.426325][T12889] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 557.431787][T12889] ? blkdev_common_ioctl+0x14b7/0x3250 [ 557.437267][T12889] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 557.443011][T12889] ? kasan_quarantine_put+0xbb/0x1f0 [ 557.448335][T12889] ? tomoyo_path_number_perm+0x219/0x5f0 [ 557.454061][T12889] ? tomoyo_path_number_perm+0x219/0x5f0 [ 557.459763][T12889] ? do_vfs_ioctl+0x116f/0x1530 [ 557.464679][T12889] ? __pfx_lo_ioctl+0x10/0x10 [ 557.469454][T12889] blkdev_ioctl+0x5e3/0x740 [ 557.473980][T12889] ? __pfx_blkdev_ioctl+0x10/0x10 [ 557.479106][T12889] ? __fget_files+0x2a/0x420 [ 557.483726][T12889] ? bpf_lsm_file_ioctl+0x9/0x20 [ 557.488676][T12889] ? __pfx_blkdev_ioctl+0x10/0x10 [ 557.493847][T12889] __se_sys_ioctl+0xfc/0x170 [ 557.498455][T12889] do_syscall_64+0x166/0x510 [ 557.503115][T12889] ? trace_irq_disable+0x3b/0x140 [ 557.508167][T12889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.514355][T12889] ? clear_bhb_loop+0x40/0x90 [ 557.519080][T12889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.524991][T12889] RIP: 0033:0x7fb9aaf9e0d9 [ 557.529498][T12889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.550125][T12889] RSP: 002b:00007fb9abeed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 557.558565][T12889] RAX: ffffffffffffffda RBX: 00007fb9ab225fa0 RCX: 00007fb9aaf9e0d9 [ 557.566655][T12889] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000004 [ 557.574864][T12889] RBP: 00007fb9ab035024 R08: 0000000000000000 R09: 0000000000000000 [ 557.582917][T12889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.590947][T12889] R13: 00007fb9ab226038 R14: 00007fb9ab225fa0 R15: 00007ffdcbd1a448 [ 557.599086][T12889] [ 557.602140][T12889] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 557.609427][T12889] CPU: 1 UID: 0 PID: 12889 Comm: syz.4.2329 Not tainted syzkaller #0 PREEMPT(full) [ 557.618807][T12889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 557.628872][T12889] Call Trace: [ 557.632172][T12889] [ 557.635106][T12889] vpanic+0x56c/0xa60 [ 557.639112][T12889] ? __pfx__printk+0x10/0x10 [ 557.643713][T12889] ? __pfx_vpanic+0x10/0x10 [ 557.648231][T12889] ? is_bpf_text_address+0x292/0x2b0 [ 557.653528][T12889] ? is_bpf_text_address+0x26/0x2b0 [ 557.658747][T12889] panic+0xc5/0xd0 [ 557.662487][T12889] ? __pfx_panic+0x10/0x10 [ 557.666944][T12889] __warn+0x315/0x4c0 [ 557.670942][T12889] ? blk_validate_limits+0x1676/0x2270 [ 557.676431][T12889] ? blk_validate_limits+0x1676/0x2270 [ 557.681920][T12889] __report_bug+0x276/0x570 [ 557.686434][T12889] ? blk_validate_limits+0x1676/0x2270 [ 557.691911][T12889] ? __pfx___report_bug+0x10/0x10 [ 557.696941][T12889] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 557.702737][T12889] ? lockdep_hardirqs_on+0x7a/0x110 [ 557.707929][T12889] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 557.713723][T12889] ? __percpu_counter_sum+0x1c6/0x1f0 [ 557.719094][T12889] ? blk_validate_limits+0x1676/0x2270 [ 557.724551][T12889] report_bug+0x16a/0x220 [ 557.728871][T12889] ? blk_validate_limits+0x1676/0x2270 [ 557.734333][T12889] ? blk_validate_limits+0x1678/0x2270 [ 557.739791][T12889] handle_bug+0x9c/0x200 [ 557.744030][T12889] exc_invalid_op+0x1a/0x50 [ 557.748526][T12889] asm_exc_invalid_op+0x1a/0x20 [ 557.753364][T12889] RIP: 0010:blk_validate_limits+0x1676/0x2270 [ 557.759431][T12889] Code: e8 3f 86 11 fd 90 0f 0b 90 eb 8f e8 34 86 11 fd 90 0f 0b 90 eb 84 e8 29 86 11 fd 90 0f 0b 90 e9 76 ff ff ff e8 1b 86 11 fd 90 <0f> 0b 90 e9 68 ff ff ff e8 0d 86 11 fd 90 0f 0b 90 e9 81 00 00 00 [ 557.779114][T12889] RSP: 0018:ffffc9000dc6ee60 EFLAGS: 00010283 [ 557.785174][T12889] RAX: ffffffff84b5fdd5 RBX: ffffc9000dc6f0f0 RCX: 0000000000080000 [ 557.793135][T12889] RDX: ffffc90005e31000 RSI: 0000000000000988 RDI: 0000000000000989 [ 557.801096][T12889] RBP: 00000000ffffffff R08: ffff8880238b36b7 R09: 1ffff110047166d6 [ 557.809059][T12889] R10: dffffc0000000000 R11: ffffed10047166d7 R12: ffffc9000dc6f040 [ 557.817028][T12889] R13: dffffc0000000000 R14: 1ffff92001b8de1e R15: dffffc0000000000 [ 557.825009][T12889] ? blk_validate_limits+0x1675/0x2270 [ 557.830502][T12889] queue_limits_commit_update+0x87/0x390 [ 557.836145][T12889] loop_configure+0x7f1/0xdc0 [ 557.840826][T12889] ? __pfx_loop_configure+0x10/0x10 [ 557.846016][T12889] ? do_raw_spin_lock+0x12b/0x2f0 [ 557.851063][T12889] lo_ioctl+0xad5/0x2150 [ 557.855303][T12889] ? __lock_acquire+0x6df/0x2e50 [ 557.860246][T12889] ? __pfx_lo_ioctl+0x10/0x10 [ 557.864923][T12889] ? lock_acquire+0x115/0x350 [ 557.869603][T12889] ? lock_acquire+0x115/0x350 [ 557.874280][T12889] ? __lock_acquire+0x6df/0x2e50 [ 557.879217][T12889] ? is_bpf_text_address+0x26/0x2b0 [ 557.884411][T12889] ? is_bpf_text_address+0x292/0x2b0 [ 557.889685][T12889] ? is_bpf_text_address+0x26/0x2b0 [ 557.894878][T12889] ? __lock_acquire+0x6df/0x2e50 [ 557.899835][T12889] ? __lock_acquire+0x6df/0x2e50 [ 557.904785][T12889] ? __lock_acquire+0x6df/0x2e50 [ 557.909731][T12889] ? __lock_acquire+0x6df/0x2e50 [ 557.914669][T12889] ? lock_acquire+0x115/0x350 [ 557.919350][T12889] ? lock_acquire+0x115/0x350 [ 557.924029][T12889] ? lock_acquire+0x115/0x350 [ 557.928710][T12889] ? is_bpf_text_address+0x26/0x2b0 [ 557.933908][T12889] ? is_bpf_text_address+0x292/0x2b0 [ 557.939185][T12889] ? is_bpf_text_address+0x26/0x2b0 [ 557.944378][T12889] ? kernel_text_address+0xa5/0xe0 [ 557.949482][T12889] ? __kernel_text_address+0xd/0x30 [ 557.954669][T12889] ? unwind_get_return_address+0x4d/0x90 [ 557.960293][T12889] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 557.966443][T12889] ? arch_stack_walk+0xfb/0x150 [ 557.971297][T12889] ? stack_trace_save+0xa9/0x100 [ 557.976230][T12889] ? __pfx_stack_trace_save+0x10/0x10 [ 557.981594][T12889] ? kasan_save_track+0x4f/0x80 [ 557.986439][T12889] ? stack_depot_save_flags+0x33/0x800 [ 557.991892][T12889] ? __lock_acquire+0x6df/0x2e50 [ 557.996876][T12889] ? kasan_save_track+0x4f/0x80 [ 558.001722][T12889] ? kasan_save_track+0x3e/0x80 [ 558.006562][T12889] ? kasan_save_free_info+0x40/0x50 [ 558.011746][T12889] ? __kasan_slab_free+0x5c/0x80 [ 558.016677][T12889] ? kfree+0x1c5/0x650 [ 558.020734][T12889] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 558.026451][T12889] ? security_file_ioctl+0xc3/0x2a0 [ 558.031643][T12889] ? __se_sys_ioctl+0x47/0x170 [ 558.036399][T12889] ? do_syscall_64+0x166/0x510 [ 558.041153][T12889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.047215][T12889] ? __asan_memset+0x22/0x50 [ 558.051793][T12889] ? blk_get_meta_cap+0x19d/0x780 [ 558.056815][T12889] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 558.062184][T12889] ? blkdev_common_ioctl+0x14b7/0x3250 [ 558.067640][T12889] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 558.073277][T12889] ? kasan_quarantine_put+0xbb/0x1f0 [ 558.078564][T12889] ? tomoyo_path_number_perm+0x219/0x5f0 [ 558.084197][T12889] ? tomoyo_path_number_perm+0x219/0x5f0 [ 558.089834][T12889] ? do_vfs_ioctl+0x116f/0x1530 [ 558.094715][T12889] ? __pfx_lo_ioctl+0x10/0x10 [ 558.099389][T12889] blkdev_ioctl+0x5e3/0x740 [ 558.103891][T12889] ? __pfx_blkdev_ioctl+0x10/0x10 [ 558.108907][T12889] ? __fget_files+0x2a/0x420 [ 558.113501][T12889] ? bpf_lsm_file_ioctl+0x9/0x20 [ 558.118426][T12889] ? __pfx_blkdev_ioctl+0x10/0x10 [ 558.123448][T12889] __se_sys_ioctl+0xfc/0x170 [ 558.128034][T12889] do_syscall_64+0x166/0x510 [ 558.132618][T12889] ? trace_irq_disable+0x3b/0x140 [ 558.137629][T12889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.143688][T12889] ? clear_bhb_loop+0x40/0x90 [ 558.148375][T12889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.154257][T12889] RIP: 0033:0x7fb9aaf9e0d9 [ 558.158664][T12889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.178259][T12889] RSP: 002b:00007fb9abeed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 558.186667][T12889] RAX: ffffffffffffffda RBX: 00007fb9ab225fa0 RCX: 00007fb9aaf9e0d9 [ 558.194627][T12889] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000004 [ 558.202589][T12889] RBP: 00007fb9ab035024 R08: 0000000000000000 R09: 0000000000000000 [ 558.210549][T12889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.218511][T12889] R13: 00007fb9ab226038 R14: 00007fb9ab225fa0 R15: 00007ffdcbd1a448 [ 558.226493][T12889] [ 558.229861][T12889] Kernel Offset: disabled [ 558.234180][T12889] Rebooting in 86400 seconds..