last executing test programs: 10m27.87132448s ago: executing program 3 (id=526): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_pwait2(r5, &(0x7f0000000540)=[{}], 0x1, 0x0, 0x0, 0x0) close_range(r1, r3, 0x0) 10m26.68811098s ago: executing program 3 (id=531): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000100)={r2}) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) 10m25.702227834s ago: executing program 3 (id=534): getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r1, r1, 0x0, 0x9) socket(0x400000000010, 0x3, 0x0) 10m25.347882543s ago: executing program 3 (id=537): mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000240)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56f, &(0x7f0000000b00)="$eJzs3V1v08gawPHHpYUoR6qODkcIVQWGco5UpBKcBIIirnycSTqQ2JHtoPaKU9EUVaRwRDnSthfLcsPuSrsfgtv9EPuN0N7vXrCynfQtb6zSNgj9f1E7E3vsecaNZurWHgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDLrdh23pK68Vpraji3EviNw7fdrfsWyO1jyYh6Raz4SzIZuZouuvrPw9VX4m9L//02fbcomTjJyP7frvz94eXZmd72IwI+F7t7+y82Op3262kHcnZ+/3Rp+Mqa9kzom4ZT08qEviqXSvbd1Wqoqqauw/Uw0g3lBtqJ/EAtu7dVvlwuKp1b91tereLUdW/hgzsF2y6pR7mmdoLQ9+4+yoXuqqnXjVdLysSr4zIP4g/iYxOpSDsNpba2O+3iuBbEhfKfU6gwrlDBLhTy+UIhX7pfvv/Atmf7FtgnSF+J6X9oMV2n2HsDk5npjv9SFyOetGRN1MCXKxUJxJfGkPVdvfH/33f1yHqPjv+L6aLFq4erF+JvS3I9fXd92Pg/JJbze+3KnuzLC9mQjnSkLa+nHtH5vmqixRMjofhipCFOskR1lygpS0lKYstTWZWqhKKkKkbqoiWUdQklEp18olwJRIsjkfgSiJJlceW2KMlLWcpSFCVacrIuvrTEk5pUxEn2siXbyXEvirKGxXhQKD+0Gdne564thRGtZfzH5E61/wYm8ak3/gMAAAAAgK+Wlfz1PT7/n5NrSa5q6tqedlgAAAAAAOAUJf/5X4yTuTh3TSzO/wEAAAAA+NpYyT12lohk5Uaa2xIruV1q0B8BLkwhRAAAAAAAMKHk///X4ySZA+WGWAfTpXARAAAAAAAAX4kfDmbfHTbHbti8ZP36mwTBnPWuufYvayeZm9fZ6V4K0HdFQFRdsOa7O0mSUprMzrp60cqkhQ4mwfzYTbbkbTeOdId9cVhBMPfHp9RBAN8NDyAjJwO4PCs/yc20zM3NNN3srUlryVZNXedcv/4wL44zPxPptej/L7e/kaT5P3qNeSsj25127tmrzmZyMN7Fe3m3051AsW8exWEH4/KsvEnmW0juuRh45OeSGzG69WYt2drutO2kTidt/0y6+czxGt/Oj6jzvSylpZa6M95mj7c/E9eZzw1rfTeK/IQtfy+30jK3lm+lyYAoCuOiKByNYvCxmDyK4rgoihNGAQDTsjVmFLKODPxDxp1eZkQvtzXutwyrr5a/+utF0qMvp2WWF5KOdXZhQI9uj+vR7QlHt1/6noE0bIyN6/35xKj6Id7gw9B6w3rBig/hhTc7/5Mru3v7d7Z3Np63n7dfFgrFkn3Ptu8XZC5pRjdh7AEADDD+GTtjS1j3xpxV/+PgkoKcPJNX0pFNWUnuNkiuOBi41+yRyxBWxpy1ZpNhMn3Cy8qIs7qLyV0Ovf0WRpY9HkPx7H8QAACco6Ux4/DnjP8rY867j4/lo8+Os0ee1gYAAM6GDj5a2eh7KwhM82m+XM470apWge8+VoGp1LQyXqQDd9Xxalo1Az/yXb8eZ56Yig5V2Go2/SBSVT9QTT80a8n0gar76PdQNxwvMm7YrGsn1Mr1vchxI1Uxoauarf/UTbiqg2TjsKldUzWuExnfU6HfClydUyrU+khBU9FeZKomznqqGZiGE2TUE7/eamhV0aEbmGbkpzvs1WW8qh80kt3mpn2wAQD4Quzu7b/Y6HTar88qc3HaLQQAACcdDtfTjgQAAAAAAAAAAAAAAAAAAAAAAAxz5vf/ncx0HwAgE+9Qzi9mMqMP+Mxp/UzJfDmZsV3H2zPtmACcuT8DAAD///GvUk8=") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1cd883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 10m24.889901525s ago: executing program 3 (id=538): sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x2, @tid=r0}, &(0x7f0000bbdffc)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x2, 0x0, 0x0, 0xfffffffe) 10m24.515525544s ago: executing program 3 (id=539): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x40000038, 0x200000000005, 0x3fffc, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0x20bdb], 0xdddd0000, 0x1c4217}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect$uac2(0x5, 0x8c, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xd8c, 0x201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x80, 0xe0, 0x7, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x3, 0x1a, 0xc5}, [@processing_unit={0x5, 0x24, 0x8, 0x6, 0x1}, @output_terminal={0xc, 0x24, 0x3, 0xfd, 0x400, 0xa8, 0x3, 0x6, 0xfff9, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x0, {0x8, 0x25, 0x1, 0x81, 0x0, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x4, 0x10, {0x8, 0x25, 0x1, 0x83, 0x0, 0xa, 0x2}}}}}}}}]}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x40000d, 0x3, 0x2000, 0x4000], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x3, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x58000, 0x0, 0x0, 0x42, 0x5, 0x5, 0x3, 0x5, 0x3, 0x2, 0x87}, {0x6000, 0x3000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x1}, {0x26000, 0xeeee0000, 0xd, 0x5, 0x0, 0x42, 0x8, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xeeee0000, 0xf, 0x3, 0x15, 0x7, 0x5, 0x8, 0x5, 0x5, 0xf7, 0x83}, {0xeeee8000, 0x80a0000, 0xd2616964a087e117, 0x2f, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x1}, {0x3000, 0x3000, 0x3, 0x5, 0x7, 0x5, 0x9, 0x3, 0x8, 0x81, 0x0, 0x70}, {0xa000, 0x0, 0xd, 0x5, 0xcd, 0x7, 0x4, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0x0, 0x30}, {0xdddd0000, 0x207}, 0x80000031, 0x0, 0xdddd0000, 0x2034, 0x0, 0x1101, 0x3000, [0x6800000000000000, 0x204, 0xffffffffffffff00, 0x4008]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m23.929254209s ago: executing program 32 (id=539): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x40000038, 0x200000000005, 0x3fffc, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0x20bdb], 0xdddd0000, 0x1c4217}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect$uac2(0x5, 0x8c, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xd8c, 0x201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x80, 0xe0, 0x7, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x3, 0x1a, 0xc5}, [@processing_unit={0x5, 0x24, 0x8, 0x6, 0x1}, @output_terminal={0xc, 0x24, 0x3, 0xfd, 0x400, 0xa8, 0x3, 0x6, 0xfff9, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x0, {0x8, 0x25, 0x1, 0x81, 0x0, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x4, 0x10, {0x8, 0x25, 0x1, 0x83, 0x0, 0xa, 0x2}}}}}}}}]}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x40000d, 0x3, 0x2000, 0x4000], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x3, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x58000, 0x0, 0x0, 0x42, 0x5, 0x5, 0x3, 0x5, 0x3, 0x2, 0x87}, {0x6000, 0x3000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x1}, {0x26000, 0xeeee0000, 0xd, 0x5, 0x0, 0x42, 0x8, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xeeee0000, 0xf, 0x3, 0x15, 0x7, 0x5, 0x8, 0x5, 0x5, 0xf7, 0x83}, {0xeeee8000, 0x80a0000, 0xd2616964a087e117, 0x2f, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x1}, {0x3000, 0x3000, 0x3, 0x5, 0x7, 0x5, 0x9, 0x3, 0x8, 0x81, 0x0, 0x70}, {0xa000, 0x0, 0xd, 0x5, 0xcd, 0x7, 0x4, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0x0, 0x30}, {0xdddd0000, 0x207}, 0x80000031, 0x0, 0xdddd0000, 0x2034, 0x0, 0x1101, 0x3000, [0x6800000000000000, 0x204, 0xffffffffffffff00, 0x4008]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.486182742s ago: executing program 4 (id=2651): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r1, 0x2) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r3, 0x1) 14.220797049s ago: executing program 1 (id=2655): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(r0, 0x0) r4 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000280)={0x10000014}) 12.737378635s ago: executing program 1 (id=2656): socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x814) 12.595740949s ago: executing program 0 (id=2658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f0000000340)="ba07646c72007ced7e18", 0xa, 0x40, &(0x7f00000000c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 12.375151044s ago: executing program 1 (id=2659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 11.824879148s ago: executing program 2 (id=2660): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@multicast1, 0x1}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x1, 0x0, 0x7, 0x0, 0x40, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffbfff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.225965533s ago: executing program 0 (id=2661): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x1000, 0x3, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000300)={0x0}, 0x1) 11.144456625s ago: executing program 2 (id=2662): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2000010, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRES64, @ANYRESDEC=0x0]) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x2404) read$FUSE(r0, &(0x7f0000008640)={0x2020}, 0x2020) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) lstat(0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r3, &(0x7f00000010c0), 0x3fffff) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000000)={[{@nogrpid}, {@dioread_lock}, {@nouid32}]}, 0xfe, 0x244, &(0x7f0000000840)="$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") 10.857557202s ago: executing program 1 (id=2663): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140), 0x0, 0x7ab, &(0x7f00000001c0)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x8170b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x8, 0xb}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x200}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x2000c080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05", 0x1, 0x20000815, &(0x7f0000000140)={0x11, 0xf5, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x14) 10.736343545s ago: executing program 4 (id=2664): sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) getpriority(0x2, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 9.938274344s ago: executing program 2 (id=2665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.919331315s ago: executing program 0 (id=2666): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x44, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x5e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 4.481018239s ago: executing program 1 (id=2667): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) getsockname$llc(0xffffffffffffffff, 0x0, &(0x7f0000000100)) openat(0xffffffffffffff9c, 0x0, 0xcaa81, 0x181) mount$fuse(0x0, 0x0, 0x0, 0x50000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) 4.480289689s ago: executing program 4 (id=2668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x11) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x20008084) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r2], 0x7) 3.324404247s ago: executing program 2 (id=2669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x9, 0x0, 0x58, 0x7, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x3, 0x7, 0x45, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x4000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 3.299865108s ago: executing program 0 (id=2670): r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xffff8001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000400), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.131224562s ago: executing program 4 (id=2671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0xa45f8e804036bb63, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) 2.992080006s ago: executing program 2 (id=2672): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3801000010000100000000087e85cbcb058d791bec0efbdbdf2564010101000000000000000000000000fc0100000000000000000000000000010000000000007ae2cef1e2052b863441b49fde2e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa00000000000000000000000000000000000000000000000000000000faffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000080560000000000000000000000fcffffff0000000000000000000000001000000009000000080000002cbd7000000000000a001e000e00000000000000480001"], 0x138}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0xdddd0000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0xb, 0x4f}, {0x5000, 0x2, 0xd, 0x49, 0x8, 0xb, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x5, 0x81, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0xfc, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x1, 0x3, 0x4, 0x1, 0xbf, 0x2, 0x90, 0x1, 0xfc}, {0xeeef0000, 0x2, 0xf, 0xff, 0x3, 0x3, 0x0, 0xb, 0x5, 0x7, 0x9, 0xfd}, {0x100000, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x8, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x60000, 0x300, 0x5, 0x2000, 0x6000, [0x3, 0x400, 0x7, 0xc5]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.431761909s ago: executing program 2 (id=2673): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x0, r0}, 0x50) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf054b883620765be}, 0x40c0) r3 = socket$inet6(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(r3, 0x0, 0x0, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x3) fsopen(&(0x7f0000000000)='overlay\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) 1.736480947s ago: executing program 4 (id=2674): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$rxrpc(0x21, 0x2, 0xa) getpgid(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r1, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) futex(&(0x7f00000002c0), 0x8c, 0x1, 0x0, &(0x7f00000000c0), 0x0) 1.573487841s ago: executing program 0 (id=2675): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r0, 0x1) 182.046235ms ago: executing program 4 (id=2676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x7, 0xb}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240000a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d86dd", 0x12, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 143.923876ms ago: executing program 1 (id=2677): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10008007}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 0s ago: executing program 0 (id=2678): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x1}, 0x10) write(r1, &(0x7f00000002c0)="04", 0x1) sendto$inet6(r1, &(0x7f0000000440)="10", 0x1, 0x4044850, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x0, 0x2, 0xfbffffff}, 0x10) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) close(r1) kernel console output (not intermixed with test programs): devsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.271443][ T8892] netlink: 'syz.1.1014': attribute type 7 has an invalid length. [ 287.346546][ T8892] netlink: 'syz.1.1014': attribute type 7 has an invalid length. [ 288.922690][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1023'. [ 289.145576][ T8913] team1: entered promiscuous mode [ 289.182571][ T8913] team1: entered allmulticast mode [ 289.230675][ T8913] 8021q: adding VLAN 0 to HW filter on device team1 [ 289.308197][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1023'. [ 289.467118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #84!!! [ 289.561716][ T8917] team2: entered promiscuous mode [ 289.599094][ T8917] team2: entered allmulticast mode [ 289.708235][ T8917] 8021q: adding VLAN 0 to HW filter on device team2 [ 290.540592][ T28] audit: type=1326 audit(1785424916.798:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8923 comm="syz.4.1025" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ccd99df99 code=0x0 [ 291.639542][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1031'. [ 291.718472][ T8940] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1031'. [ 292.467451][ T8952] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1034'. [ 292.568741][ T8955] macsec1: entered promiscuous mode [ 292.620852][ T8955] virt_wifi0: entered promiscuous mode [ 293.205576][ T8969] loop4: detected capacity change from 0 to 512 [ 293.756712][ T8969] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1039: invalid indirect mapped block 4294967295 (level 1) [ 294.015253][ T8969] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1039: invalid indirect mapped block 4294967295 (level 1) [ 294.178594][ T8969] EXT4-fs (loop4): 2 truncates cleaned up [ 294.188764][ T8969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.237872][ T28] audit: type=1326 audit(1785424920.398:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.0.1041" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1af39df99 code=0x0 [ 294.379983][ T28] audit: type=1804 audit(1785424920.618:520): pid=8969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1039" name="/newroot/117/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 294.494184][ T8969] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.1039: bg 0: block 5: invalid block bitmap [ 294.670928][ T7482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.955745][ T8999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1045'. [ 296.536000][ T28] audit: type=1326 audit(1785424922.788:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.0.1055" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1af39df99 code=0x0 [ 297.176076][ T9046] loop4: detected capacity change from 0 to 1024 [ 297.201311][ T9046] ext3: Unknown parameter 'nouser_xattr' [ 297.276952][ T9048] loop1: detected capacity change from 0 to 512 [ 297.325887][ T9048] EXT4-fs: Ignoring removed i_version option [ 297.401984][ T9048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.477462][ T9048] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.771564][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.982811][ T9056] loop1: detected capacity change from 0 to 256 [ 298.029798][ T9056] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 300.794914][ T9085] loop2: detected capacity change from 0 to 512 [ 300.866626][ T9085] EXT4-fs: Ignoring removed i_version option [ 300.978526][ T9085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.047608][ T9085] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.355752][ T7341] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.356073][ T9102] binder: 9098:9102 unknown command 0 [ 302.382419][ T9102] binder: 9098:9102 ioctl c0306201 2000000001c0 returned -22 [ 302.597237][ T5927] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 302.795574][ T9107] bridge0: entered allmulticast mode [ 302.801319][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 302.818351][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 302.850762][ T5927] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 302.856594][ T9109] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1079'. [ 302.882499][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.897238][ T5927] usb 3-1: Product: syz [ 302.904576][ T5927] usb 3-1: Manufacturer: syz [ 302.917427][ T5927] usb 3-1: SerialNumber: syz [ 302.947243][ T5927] usb 3-1: config 0 descriptor?? [ 302.973814][ T9110] loop4: detected capacity change from 0 to 512 [ 302.983926][ T5927] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 302.995052][ T9110] EXT4-fs: Ignoring removed oldalloc option [ 303.018550][ T5927] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 303.056766][ T9110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.085823][ T9110] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 304.098792][ T9110] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1079'. [ 304.206085][ T5927] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 304.254754][ T7482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.409552][ T9124] netlink: 'syz.1.1084': attribute type 4 has an invalid length. [ 304.675275][ T5927] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 304.698683][ T5927] em28xx 3-1:0.0: board has no eeprom [ 306.010567][ T9132] em28xx 3-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 306.027235][ T5927] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 306.035136][ T5927] em28xx 3-1:0.0: dvb set to bulk mode. [ 306.078582][ T787] em28xx 3-1:0.0: Binding DVB extension [ 306.110959][ T5927] usb 3-1: USB disconnect, device number 3 [ 306.147914][ T5927] em28xx 3-1:0.0: Disconnecting em28xx [ 306.375294][ T787] em28xx 3-1:0.0: Registering input extension [ 306.384600][ T5927] em28xx 3-1:0.0: Closing input extension [ 306.449678][ T5927] em28xx 3-1:0.0: Freeing device [ 307.285488][ T9160] loop1: detected capacity change from 0 to 8 [ 307.837992][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1101'. [ 308.034358][ T9172] loop4: detected capacity change from 0 to 2048 [ 308.153575][ T9172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.559583][ T9193] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 308.923648][ T7482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.960594][ T9200] loop1: detected capacity change from 0 to 512 [ 309.051737][ T9200] EXT4-fs (loop1): 1 truncate cleaned up [ 309.075399][ T9200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.195964][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.752746][ T9231] input: syz0 as /devices/virtual/input/input12 [ 313.091761][ T9254] loop4: detected capacity change from 0 to 512 [ 313.103685][ T9254] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 313.202965][ T9254] EXT4-fs (loop4): 1 truncate cleaned up [ 313.232609][ T9254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.346230][ T7482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.470862][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bf0e800: rx timeout, send abort [ 313.551634][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1126'. [ 313.979156][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bf0e800: abort rx timeout. Force session deactivation [ 317.393058][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.402291][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.808474][ T9339] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 318.835259][ T9339] CIFS mount error: No usable UNC path provided in device string! [ 318.835259][ T9339] [ 318.845827][ T9339] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 324.277431][ T28] audit: type=1326 audit(1785424950.528:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.1.1170" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2d059df99 code=0x0 [ 324.741895][ T9396] overlayfs: statfs failed on './file0' [ 326.474038][ T28] audit: type=1326 audit(1785424952.728:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.0.1185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 326.521938][ T28] audit: type=1326 audit(1785424952.728:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.0.1185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 326.558556][ T28] audit: type=1326 audit(1785424952.728:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.0.1185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 326.603539][ T28] audit: type=1326 audit(1785424952.748:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.0.1185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 326.647449][ T28] audit: type=1326 audit(1785424952.748:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.0.1185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 326.715805][ T28] audit: type=1326 audit(1785424952.748:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.0.1185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 326.747667][ T9438] kvm: kvm [9437]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 326.762581][ T28] audit: type=1326 audit(1785424952.748:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.0.1185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 326.889056][ T28] audit: type=1326 audit(1785424952.748:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.0.1185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 326.925058][ T28] audit: type=1326 audit(1785424952.748:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.0.1185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 333.225180][ T9517] lo speed is unknown, defaulting to 1000 [ 333.243489][ T9517] lo speed is unknown, defaulting to 1000 [ 333.268696][ T9517] lo speed is unknown, defaulting to 1000 [ 333.450996][ T9517] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 333.688316][ T9529] xt_TCPMSS: Only works on TCP SYN packets [ 333.769820][ T9517] lo speed is unknown, defaulting to 1000 [ 333.816610][ T9517] lo speed is unknown, defaulting to 1000 [ 333.858171][ T9517] lo speed is unknown, defaulting to 1000 [ 333.900706][ T9517] lo speed is unknown, defaulting to 1000 [ 333.941406][ T9517] lo speed is unknown, defaulting to 1000 [ 334.003635][ T9517] lo speed is unknown, defaulting to 1000 [ 334.220927][ T9536] binder: 9535:9536 ioctl 4018620d 0 returned -22 [ 334.945534][ T5927] IPVS: starting estimator thread 0... [ 335.057780][ T9546] IPVS: using max 19 ests per chain, 45600 per kthread [ 338.565323][ T9576] syzkaller0: entered promiscuous mode [ 338.571860][ T9576] syzkaller0: entered allmulticast mode [ 338.591670][ T9582] netlink: 'syz.0.1236': attribute type 4 has an invalid length. [ 338.637315][ T9579] netlink: 'syz.0.1236': attribute type 4 has an invalid length. [ 339.136569][ T5813] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 339.176393][ T28] audit: type=1326 audit(1785424965.438:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9586 comm="syz.0.1239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1af39df99 code=0x0 [ 340.047873][ T5813] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.097873][ T5813] usb 5-1: New USB device found, idVendor=0a5c, idProduct=0bdc, bcdDevice=f0.66 [ 340.177344][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.189129][ T5813] usb 5-1: Product: syz [ 340.195055][ T5813] usb 5-1: Manufacturer: syz [ 340.201906][ T5813] usb 5-1: SerialNumber: syz [ 340.242984][ T5813] usb 5-1: config 0 descriptor?? [ 340.519738][ T9580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.547838][ T9580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.520340][ T9600] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 343.565384][ T9580] : renamed from veth0_to_bond (while UP) [ 343.602510][ T9608] netlink: 'syz.2.1245': attribute type 1 has an invalid length. [ 343.638457][ T9608] 8021q: adding VLAN 0 to HW filter on device bond5 [ 343.646331][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1245'. [ 343.661010][ T9609] bond5: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 343.770138][ T5761] usb 5-1: USB disconnect, device number 3 [ 343.772152][ T9609] bond5: entered allmulticast mode [ 343.920643][ T9610] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 345.395768][ T11] bond1: (slave ip6gretap1): Releasing active interface [ 345.476456][ T9640] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 345.696034][ T9644] loop1: detected capacity change from 0 to 512 [ 345.775114][ T9644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.832327][ T9644] ext4 filesystem being mounted at /308/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.384505][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.289738][ T9654] loop2: detected capacity change from 0 to 1024 [ 351.382501][ T9654] EXT4-fs: Ignoring removed orlov option [ 351.590591][ T9654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.659728][ T7341] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.199994][ T11] hsr_slave_0: left promiscuous mode [ 356.218923][ T11] hsr_slave_1: left promiscuous mode [ 356.265513][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.341332][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.383864][ T11] bridge_slave_1: left allmulticast mode [ 356.399591][ T11] bridge_slave_1: left promiscuous mode [ 356.408674][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.433146][ T11] bridge_slave_0: left allmulticast mode [ 356.446601][ T11] bridge_slave_0: left promiscuous mode [ 356.453575][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.043680][ T11] bond2 (unregistering): Released all slaves [ 357.948070][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1271'. [ 357.964235][ T9701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1271'. [ 357.967613][ T11] bond1 (unregistering): Released all slaves [ 360.187932][ T11] team0 (unregistering): Port device team_slave_1 removed [ 360.295004][ T11] team0 (unregistering): Port device team_slave_0 removed [ 360.388624][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.546385][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.188092][ T11] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 361.203999][ T11] bond0 (unregistering): Released all slaves [ 361.350420][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1272'. [ 361.509400][ T9698] tipc: Started in network mode [ 361.515225][ T9698] tipc: Node identity 4, cluster identity 4711 [ 361.522954][ T9698] tipc: Node number set to 4 [ 361.539058][ T9728] netlink: 'syz.2.1281': attribute type 1 has an invalid length. [ 361.631060][ T9728] 8021q: adding VLAN 0 to HW filter on device bond7 [ 361.639624][ T9729] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1281'. [ 361.698069][ T9729] veth7: entered allmulticast mode [ 361.710617][ T9729] bond7: (slave veth7): Enslaving as an active interface with a down link [ 361.749890][ T9730] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 361.778511][ T9733] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1282'. [ 361.805209][ T9733] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 361.827561][ T9734] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1282'. [ 361.941879][ T9734] bond6: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 362.022691][ T9749] loop1: detected capacity change from 0 to 512 [ 362.036730][ T9749] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 362.043731][ T9737] netlink: 'syz.0.1283': attribute type 1 has an invalid length. [ 362.080557][ T9749] EXT4-fs (loop1): 1 truncate cleaned up [ 362.113905][ T9749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.182028][ T9737] 8021q: adding VLAN 0 to HW filter on device bond4 [ 362.235899][ T9739] vlan3: entered promiscuous mode [ 362.260072][ T9739] vlan3: entered allmulticast mode [ 362.283215][ T9739] hsr_slave_1: entered allmulticast mode [ 362.412279][ T9740] bond4: (slave veth5): Enslaving as an active interface with a down link [ 362.507525][ T9743] bond4: (slave dummy0): making interface the new active one [ 362.519985][ T9743] dummy0: entered promiscuous mode [ 362.525742][ T9743] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 362.535040][ T9752] netlink: 'syz.0.1283': attribute type 10 has an invalid length. [ 362.547181][ T9752] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1283'. [ 362.566899][ T9752] bond4: (slave dummy0): Releasing active interface [ 362.902404][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.743892][ T9779] loop1: detected capacity change from 0 to 128 [ 363.796617][ T9779] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 363.823672][ T9779] ext4 filesystem being mounted at /324/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 363.970784][ T9779] syz.1.1295 (pid 9779) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 364.449063][ T9779] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 364.535710][ T9779] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 364.587509][ T28] audit: type=1326 audit(1785424990.828:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.0.1301" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1af39df99 code=0x0 [ 364.752381][ T9795] lo speed is unknown, defaulting to 1000 [ 364.989171][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.003765][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1302'. [ 366.828699][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 366.897365][ T9825] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.904986][ T9825] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.289877][ T9828] lo speed is unknown, defaulting to 1000 [ 367.752797][ T9835] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.760177][ T9835] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.241764][ T9835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.314632][ T9835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.903476][ T9835] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.917288][ T9835] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.935897][ T9835] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.946657][ T9835] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.668034][ T9867] kvm: pic: non byte write [ 370.190569][ T9850] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 370.599534][ T9850] usb 3-1: Using ep0 maxpacket: 16 [ 370.612298][ T9850] usb 3-1: no configurations [ 370.627747][ T9850] usb 3-1: can't read configurations, error -22 [ 370.787161][ T9850] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 370.980140][ T9850] usb 3-1: Using ep0 maxpacket: 16 [ 370.999048][ T9850] usb 3-1: no configurations [ 371.003725][ T9850] usb 3-1: can't read configurations, error -22 [ 371.061509][ T9850] usb usb3-port1: attempt power cycle [ 371.635092][ T9897] trusted_key: encrypted_key: insufficient parameters specified [ 372.018346][ T9850] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 372.082629][ T9850] usb 3-1: Using ep0 maxpacket: 16 [ 372.334944][ T9850] usb 3-1: no configurations [ 372.361463][ T9850] usb 3-1: can't read configurations, error -22 [ 372.569216][ T9850] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 372.641575][ T9850] usb 3-1: Using ep0 maxpacket: 16 [ 372.660686][ T9850] usb 3-1: no configurations [ 372.665429][ T9850] usb 3-1: can't read configurations, error -22 [ 372.763027][ T9850] usb usb3-port1: unable to enumerate USB device [ 372.934817][ T9904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1332'. [ 373.170649][ T9912] loop4: detected capacity change from 0 to 8 [ 373.285604][ T9912] SQUASHFS error: lzo decompression failed, data probably corrupt [ 373.347675][ T9912] SQUASHFS error: Failed to read block 0x1c6: -5 [ 373.369827][ T9912] SQUASHFS error: Unable to read metadata cache entry [1c4] [ 373.422063][ T9912] SQUASHFS error: Unable to read inode 0x11f [ 373.576438][ T9912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1334'. [ 374.719719][ T9940] overlayfs: failed to clone lowerpath [ 378.833231][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.843956][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.493976][T10037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1374'. [ 380.565536][T10039] loop2: detected capacity change from 0 to 1024 [ 380.605193][T10039] EXT4-fs: Ignoring removed mblk_io_submit option [ 380.699120][T10039] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 380.699120][T10039] [ 380.880234][T10039] loop2: detected capacity change from 1024 to 0 [ 382.928761][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1390'. [ 383.661541][T10096] vlan2: entered promiscuous mode [ 383.691589][T10096] bridge0: entered promiscuous mode [ 383.718005][T10096] vlan2: entered allmulticast mode [ 383.756195][T10096] bridge0: entered allmulticast mode [ 383.830471][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1397'. [ 383.904711][T10100] 9pnet: p9_errstr2errno: server reported unknown error 'I$۷= [ 383.995440][T10096] bond7: (slave veth0_to_bond): Releasing active interface [ 384.114374][T10096] bond5: (slave ip6gretap2): Releasing active interface [ 384.162808][T10096] bond7: (slave veth7): Releasing active interface [ 384.193126][T10103] netlink: 'syz.4.1399': attribute type 1 has an invalid length. [ 384.337693][T10103] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.355687][T10104] vlan4: entered allmulticast mode [ 384.379818][T10104] bond2: entered allmulticast mode [ 384.403955][T10105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.427453][T10105] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.439775][T10105] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.452219][T10105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.467441][T10105] bond2: (slave geneve2): making interface the new active one [ 384.479477][T10105] geneve2: entered allmulticast mode [ 384.489375][T10105] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 384.503908][T10108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1400'. [ 384.562480][T10111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1400'. [ 384.835873][T10115] loop4: detected capacity change from 0 to 1024 [ 384.862094][T10115] ext4: Unknown parameter 'no' [ 384.910759][T10119] Device name cannot be null; rc = [-22] [ 385.099417][T10124] loop2: detected capacity change from 0 to 512 [ 385.126546][T10124] EXT4-fs: Ignoring removed orlov option [ 385.173218][T10124] EXT4-fs: Ignoring removed mblk_io_submit option [ 385.249994][T10124] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.1405: corrupted in-inode xattr: e_value size too large [ 385.271748][T10124] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1405: couldn't read orphan inode 15 (err -117) [ 385.304401][T10124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.568284][T10124] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.1405: Logical block already allocated [ 386.205321][ T7341] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.670952][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1416'. [ 388.715677][T10156] bridge0: port 3(veth0) entered blocking state [ 388.735965][T10156] bridge0: port 3(veth0) entered disabled state [ 388.777690][T10156] veth0: entered allmulticast mode [ 388.798909][T10156] veth0: entered promiscuous mode [ 388.856148][T10157] bridge0: port 4(veth1) entered blocking state [ 388.887617][T10157] bridge0: port 4(veth1) entered disabled state [ 388.928732][T10157] veth1: entered allmulticast mode [ 388.992624][T10157] veth1: entered promiscuous mode [ 389.320221][T10160] kvm_intel: kvm [10159]: vcpu2, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x7 [ 389.479649][ T28] audit: type=1326 audit(1785425015.738:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.0.1419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 389.520739][ T28] audit: type=1326 audit(1785425015.738:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.0.1419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 389.553887][ T28] audit: type=1326 audit(1785425015.738:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.0.1419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 389.625618][ T28] audit: type=1326 audit(1785425015.738:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.0.1419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 389.687397][ T28] audit: type=1326 audit(1785425015.838:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.0.1419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff1af35e7ce code=0x7ffc0000 [ 389.724782][ T28] audit: type=1326 audit(1785425015.848:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.0.1419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff1af35e7ce code=0x7ffc0000 [ 389.771767][ T28] audit: type=1326 audit(1785425015.848:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.0.1419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff1af35e7ce code=0x7ffc0000 [ 389.810941][ T28] audit: type=1326 audit(1785425015.858:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.0.1419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff1af35e7ce code=0x7ffc0000 [ 389.847517][ T28] audit: type=1326 audit(1785425015.858:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.0.1419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff1af35e7ce code=0x7ffc0000 [ 389.882820][ T28] audit: type=1326 audit(1785425015.858:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.0.1419" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff1af35e7ce code=0x7ffc0000 [ 392.110418][T10181] loop2: detected capacity change from 0 to 8192 [ 392.170139][T10181] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 392.492777][T10199] netlink: 'syz.4.1429': attribute type 1 has an invalid length. [ 392.738693][T10200] 8021q: adding VLAN 0 to HW filter on device bond4 [ 392.758511][T10200] bond3: (slave bond4): making interface the new active one [ 392.766368][T10200] bond3: (slave bond4): Enslaving as an active interface with an up link [ 392.864410][T10199] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 392.951490][T10210] loop2: detected capacity change from 0 to 2048 [ 392.990780][T10210] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 393.063890][T10210] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 393.517778][T10225] netlink: 'syz.1.1437': attribute type 4 has an invalid length. [ 393.548745][T10225] netlink: 'syz.1.1437': attribute type 4 has an invalid length. [ 393.587789][ T9848] lo speed is unknown, defaulting to 1000 [ 394.146049][T10234] loop2: detected capacity change from 0 to 8192 [ 395.437574][ T5813] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 395.647464][ T5813] usb 3-1: Using ep0 maxpacket: 32 [ 395.671450][ T5813] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 395.681589][ T5813] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 395.707497][ T5813] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 395.757662][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 395.792003][ T5813] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 395.846400][ T5813] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 395.885424][ T5813] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 395.937367][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.006448][ T5813] usb 3-1: config 0 descriptor?? [ 396.106051][T10277] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.1457'. [ 396.318699][ T5813] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 400.299622][ T9848] usb 3-1: USB disconnect, device number 8 [ 400.415510][ T9848] usblp0: removed [ 402.876100][T10327] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 406.550995][T10376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1490'. [ 406.599384][T10375] loop4: detected capacity change from 0 to 512 [ 406.696244][T10375] EXT4-fs: Ignoring removed oldalloc option [ 406.731578][T10376] 8021q: adding VLAN 0 to HW filter on device bond8 [ 406.742996][T10375] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 406.757474][T10378] dummy0: left promiscuous mode [ 406.808180][T10375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.829034][T10378] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 406.927473][T10375] ext4 filesystem being mounted at /229/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.995053][T10385] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 406.995053][T10385] The task syz.1.1489 (10385) triggered the difference, watch for misbehavior. [ 407.323579][ T7482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.429699][T10410] bond0: (slave bond_slave_0): Releasing backup interface [ 408.498678][T10410] bond0: (slave bond_slave_1): Releasing backup interface [ 408.525282][T10410] team0: Failed to send options change via netlink (err -105) [ 408.536905][T10410] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 408.553178][T10410] team0: Port device team_slave_0 removed [ 408.564872][T10411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1496'. [ 408.586133][T10410] team0: Failed to send options change via netlink (err -105) [ 408.595300][T10410] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 408.611626][T10410] team0: Port device team_slave_1 removed [ 408.621729][T10410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.638036][T10410] bond3: (slave wlan0): Releasing active interface [ 408.644955][T10410] bond3: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 408.669591][T10410] batadv1: entered promiscuous mode [ 408.696833][T10414] loop4: detected capacity change from 0 to 64 [ 408.716907][T10410] bond1: (slave ip6gretap1): Releasing active interface [ 408.766862][T10410] bond2: (slave veth3): Releasing active interface [ 408.869556][T10410] bond3: (slave batadv1): Releasing active interface [ 408.882972][T10410] batadv1: left promiscuous mode [ 408.925586][T10410] bond5: (slave geneve2): Releasing active interface [ 408.958885][T10410] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.983121][T10410] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.015445][T10410] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.044447][T10414] syz.4.1502: attempt to access beyond end of device [ 409.044447][T10414] loop4: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 409.060415][T10410] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.084018][T10414] Buffer I/O error on dev loop4, logical block 163, lost async page write [ 409.115203][T10412] team0: Failed to send options change via netlink (err -105) [ 409.127647][T10414] syz.4.1502: attempt to access beyond end of device [ 409.127647][T10414] loop4: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 409.161798][T10414] Buffer I/O error on dev loop4, logical block 167, lost async page write [ 409.175324][T10412] team0: Mode changed to "activebackup" [ 409.185762][T10414] syz.4.1502: attempt to access beyond end of device [ 409.185762][T10414] loop4: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 409.225424][T10414] Buffer I/O error on dev loop4, logical block 169, lost async page write [ 409.256052][T10414] syz.4.1502: attempt to access beyond end of device [ 409.256052][T10414] loop4: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 409.317365][T10414] Buffer I/O error on dev loop4, logical block 171, lost async page write [ 409.333163][T10414] syz.4.1502: attempt to access beyond end of device [ 409.333163][T10414] loop4: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 409.408123][T10414] Buffer I/O error on dev loop4, logical block 172, lost async page write [ 409.436707][T10414] syz.4.1502: attempt to access beyond end of device [ 409.436707][T10414] loop4: rw=2049, sector=173, nr_sectors = 1 limit=64 [ 409.474503][T10414] Buffer I/O error on dev loop4, logical block 173, lost async page write [ 409.496551][T10422] netlink: 'syz.1.1506': attribute type 1 has an invalid length. [ 409.504756][T10414] syz.4.1502: attempt to access beyond end of device [ 409.504756][T10414] loop4: rw=2049, sector=174, nr_sectors = 1 limit=64 [ 409.593128][T10414] Buffer I/O error on dev loop4, logical block 174, lost async page write [ 409.613765][T10422] 8021q: adding VLAN 0 to HW filter on device bond8 [ 409.653177][T10414] syz.4.1502: attempt to access beyond end of device [ 409.653177][T10414] loop4: rw=2049, sector=175, nr_sectors = 1 limit=64 [ 409.669503][T10422] bond7: (slave bond8): making interface the new active one [ 409.707996][T10422] bond7: (slave bond8): Enslaving as an active interface with an up link [ 409.753290][T10414] Buffer I/O error on dev loop4, logical block 175, lost async page write [ 409.806767][T10426] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 409.826776][T10414] syz.4.1502: attempt to access beyond end of device [ 409.826776][T10414] loop4: rw=2049, sector=176, nr_sectors = 1 limit=64 [ 409.863765][T10414] Buffer I/O error on dev loop4, logical block 176, lost async page write [ 409.904917][T10414] syz.4.1502: attempt to access beyond end of device [ 409.904917][T10414] loop4: rw=2049, sector=177, nr_sectors = 1 limit=64 [ 409.959124][T10414] Buffer I/O error on dev loop4, logical block 177, lost async page write [ 412.205024][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1517'. [ 412.257479][T10460] 8021q: adding VLAN 0 to HW filter on device bond9 [ 412.352706][T10463] bond9: (slave syz_tun): Enslaving as an active interface with an up link [ 412.579408][T10467] syzkaller0: entered promiscuous mode [ 412.587646][T10467] syzkaller0: entered allmulticast mode [ 413.016789][T10470] netlink: 'syz.2.1520': attribute type 16 has an invalid length. [ 413.028197][T10470] netlink: 'syz.2.1520': attribute type 17 has an invalid length. [ 413.265448][T10470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 413.468130][T10484] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1525'. [ 413.663397][T10487] macvlan2: entered promiscuous mode [ 413.675915][T10487] vlan4: entered promiscuous mode [ 413.681352][T10487] gretap0: entered promiscuous mode [ 413.692945][T10487] vlan4: left promiscuous mode [ 413.716390][T10487] gretap0: left promiscuous mode [ 414.599419][T10499] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 415.657362][T10509] loop1: detected capacity change from 0 to 256 [ 415.664423][T10504] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 415.678895][T10509] FAT-fs (loop1): Unrecognized mount option "nonumtal=0" or missing value [ 416.084246][T10517] loop1: detected capacity change from 0 to 128 [ 416.096494][T10517] EXT4-fs (loop1): Test dummy encryption mode enabled [ 416.151800][T10517] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 416.188675][T10517] ext4 filesystem being mounted at /380/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 416.904037][T10517] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 417.112672][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 417.221410][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1547'. [ 417.633047][T10563] geneve3: entered promiscuous mode [ 417.735784][T10568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1551'. [ 417.740249][T10569] capability: warning: `syz.1.1552' uses deprecated v2 capabilities in a way that may be insecure [ 418.029498][T10571] syz.1.1554 (10571): attempted to duplicate a private mapping with mremap. This is not supported. [ 420.149405][T10609] vlan5: entered promiscuous mode [ 420.167305][T10609] gretap0: entered promiscuous mode [ 421.342670][T10619] CIFS mount error: No usable UNC path provided in device string! [ 421.342670][T10619] [ 421.352854][T10619] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 423.063558][ T9848] IPVS: starting estimator thread 0... [ 423.187711][T10644] IPVS: using max 19 ests per chain, 45600 per kthread [ 423.667119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 423.717123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 426.122923][T10674] netlink: 'syz.2.1586': attribute type 1 has an invalid length. [ 426.223840][T10674] bond9: entered promiscuous mode [ 426.242089][T10674] bond9: entered allmulticast mode [ 426.259923][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1586'. [ 426.304845][T10677] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 426.388684][T10677] bond9: (slave bridge3): making interface the new active one [ 426.400679][T10677] bridge3: entered promiscuous mode [ 426.409076][T10677] bridge3: entered allmulticast mode [ 426.428461][T10677] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 426.440780][T10674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1586'. [ 426.505991][T10674] bond9: left promiscuous mode [ 426.550997][T10674] bridge3: left promiscuous mode [ 426.558293][T10674] bond9: left allmulticast mode [ 426.565218][T10674] bridge3: left allmulticast mode [ 426.573267][T10674] 8021q: adding VLAN 0 to HW filter on device bond9 [ 429.965485][T10729] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1603'. [ 432.057578][T10764] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1615'. [ 435.668799][T10824] tipc: Failed to remove unknown binding: 66,0,0/4:376068115/376068117 [ 435.680415][T10824] tipc: Failed to remove unknown binding: 66,0,0/4:376068115/376068116 [ 435.878975][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1634'. [ 436.070022][T10822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1634'. [ 436.708551][T10832] loop4: detected capacity change from 0 to 1024 [ 436.746202][T10832] EXT4-fs: Ignoring removed bh option [ 436.797362][T10832] EXT4-fs: Ignoring removed bh option [ 436.838305][T10832] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 436.934529][T10832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.406100][T10832] random: crng reseeded on system resumption [ 437.929236][T10846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1638'. [ 438.030960][ T7482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.165536][T10851] 8021q: adding VLAN 0 to HW filter on device bond7 [ 438.194366][T10851] bond6: (slave bond7): Enslaving as an active interface with an up link [ 438.221240][T10853] bond6 (unregistering): (slave bond7): Releasing backup interface [ 438.248797][T10853] bond6 (unregistering): Released all slaves [ 440.396478][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.404765][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.624588][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 440.624680][ T28] audit: type=1804 audit(1785425066.878:582): pid=10889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1652" name="bus" dev="ramfs" ino=28872 res=1 errno=0 [ 440.753957][ T28] audit: type=1804 audit(1785425066.918:583): pid=10889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1652" name="bus" dev="ramfs" ino=28872 res=1 errno=0 [ 445.139004][T10932] syzkaller0: entered promiscuous mode [ 445.144696][T10932] syzkaller0: entered allmulticast mode [ 445.163193][T10939] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 445.793156][ T9850] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 446.007708][ T9850] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.071218][ T9850] usb 2-1: New USB device found, idVendor=0a5c, idProduct=0bdc, bcdDevice=f0.66 [ 446.087145][ T9850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.120244][ T9850] usb 2-1: Product: syz [ 446.149167][ T9850] usb 2-1: Manufacturer: syz [ 446.153839][ T9850] usb 2-1: SerialNumber: syz [ 446.201967][ T9850] usb 2-1: config 0 descriptor?? [ 446.547447][T10946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.585849][T10946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.093419][T10946] : renamed from veth0_to_bond [ 450.136266][ T9849] usb 2-1: USB disconnect, device number 4 [ 450.307520][ T28] audit: type=1326 audit(1785425076.558:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz.2.1674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6e79df99 code=0x7ffc0000 [ 450.413433][ T28] audit: type=1326 audit(1785425076.558:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz.2.1674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6e79df99 code=0x7ffc0000 [ 450.462647][ T28] audit: type=1326 audit(1785425076.558:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz.2.1674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6e79df99 code=0x7ffc0000 [ 450.509055][ T28] audit: type=1326 audit(1785425076.558:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz.2.1674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6e79df99 code=0x7ffc0000 [ 450.597954][ T28] audit: type=1326 audit(1785425076.588:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz.2.1674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f2f6e79df99 code=0x7ffc0000 [ 450.666141][ T28] audit: type=1326 audit(1785425076.588:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz.2.1674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6e79df99 code=0x7ffc0000 [ 450.691583][ T28] audit: type=1326 audit(1785425076.588:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz.2.1674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6e79df99 code=0x7ffc0000 [ 450.831632][ T28] audit: type=1326 audit(1785425076.588:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz.2.1674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6e79df99 code=0x7ffc0000 [ 450.934260][ T28] audit: type=1326 audit(1785425076.588:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz.2.1674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2f6e79df99 code=0x7ffc0000 [ 450.969357][ T28] audit: type=1326 audit(1785425076.588:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz.2.1674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6e79df99 code=0x7ffc0000 [ 454.180417][T11018] input: syz0 as /devices/virtual/input/input13 [ 454.365884][T11021] loop4: detected capacity change from 0 to 1024 [ 454.393902][T11021] EXT4-fs: Ignoring removed orlov option [ 454.437676][T11021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.039046][ T7482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.441678][T11046] netlink: 'syz.1.1704': attribute type 1 has an invalid length. [ 456.575184][T11046] 8021q: adding VLAN 0 to HW filter on device bond10 [ 456.794675][T11046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1704'. [ 456.888178][T11046] veth5: entered allmulticast mode [ 456.925758][T11046] bond10: (slave veth5): Enslaving as an active interface with a down link [ 456.951121][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1699'. [ 457.239481][T11059] loop4: detected capacity change from 0 to 512 [ 457.363974][T11059] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.1698: iget: bad i_size value: 38620345925642 [ 457.448043][T11059] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1698: couldn't read orphan inode 15 (err -117) [ 457.461956][T11059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.501707][T11063] loop1: detected capacity change from 0 to 512 [ 457.526303][T11063] EXT4-fs: Ignoring removed oldalloc option [ 457.634468][T11058] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1698'. [ 457.670933][T11063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.727577][T11061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1700'. [ 457.817822][T11063] ext4 filesystem being mounted at /410/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 457.835337][ T7482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.133223][T11069] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1700'. [ 458.686788][T11078] : renamed from veth0_to_bond (while UP) [ 459.056702][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.902060][T11089] loop4: detected capacity change from 0 to 512 [ 459.939600][T11089] EXT4-fs (loop4): bad geometry: first data block 2 is beyond end of filesystem (0) [ 462.738710][ T5813] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 463.021279][ T5813] usb 2-1: Using ep0 maxpacket: 16 [ 463.062730][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 463.115620][ T5813] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 463.139020][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.165662][ T5813] usb 2-1: Product: syz [ 463.172143][ T5813] usb 2-1: Manufacturer: syz [ 463.198000][ T5813] usb 2-1: SerialNumber: syz [ 463.226643][ T5813] usb 2-1: config 0 descriptor?? [ 463.251581][ T5813] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 463.264902][ T5813] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 463.922127][ T5813] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 464.065974][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'. [ 464.756323][ T5813] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 464.768323][ T5813] em28xx 2-1:0.0: board has no eeprom [ 466.176935][T11179] loop4: detected capacity change from 0 to 512 [ 466.245330][T11179] EXT4-fs (loop4): 1 truncate cleaned up [ 466.279148][T11179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.510722][T11166] em28xx 2-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 466.586049][T11184] xt_TCPMSS: Only works on TCP SYN packets [ 466.587893][ T5813] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 466.647789][ T5813] em28xx 2-1:0.0: dvb set to bulk mode. [ 466.668011][ T23] em28xx 2-1:0.0: Binding DVB extension [ 466.710676][ T5813] usb 2-1: USB disconnect, device number 5 [ 466.751832][ T5813] em28xx 2-1:0.0: Disconnecting em28xx [ 466.898083][ T23] em28xx 2-1:0.0: Registering input extension [ 466.928722][ T5813] em28xx 2-1:0.0: Closing input extension [ 467.033707][ T5813] em28xx 2-1:0.0: Freeing device [ 467.630079][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 467.630094][ T28] audit: type=1326 audit(1785425093.888:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11200 comm="syz.2.1754" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f6e79df99 code=0x0 [ 467.722154][T11202] lo speed is unknown, defaulting to 1000 [ 467.826993][ T7482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.304630][T11221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1750'. [ 470.202761][T11228] netlink: 'syz.4.1755': attribute type 1 has an invalid length. [ 470.326731][T11228] 8021q: adding VLAN 0 to HW filter on device bond5 [ 470.344294][T11232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1755'. [ 470.448835][T11232] veth9: entered allmulticast mode [ 470.472071][T11232] bond5: (slave veth9): Enslaving as an active interface with a down link [ 470.557336][ T9848] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 470.757261][ T9848] usb 2-1: Using ep0 maxpacket: 8 [ 470.764573][ T9848] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 470.778386][ T9848] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.792004][ T9848] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 470.801463][ T9848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.819624][ T9848] usbtmc 2-1:16.0: bulk endpoints not found [ 471.286405][ T9848] usb 2-1: USB disconnect, device number 6 [ 471.597493][T11249] netlink: 'syz.0.1762': attribute type 11 has an invalid length. [ 472.231233][T11267] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1770'. [ 473.997126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 474.057130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 474.999289][ T23] libceph: connect (1)[c::]:6789 error -101 [ 475.011344][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 475.159254][T11307] ceph: No mds server is up or the cluster is laggy [ 475.817799][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 476.161323][ T23] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 476.174577][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.186361][ T23] usb 5-1: Product: syz [ 476.192956][ T23] usb 5-1: Manufacturer: syz [ 476.508580][T11289] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.545496][T11289] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.582323][T11289] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.715414][T11289] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.009708][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1786'. [ 478.035223][T11316] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.044659][T11316] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.053500][T11316] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.063062][T11316] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.158892][T11317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1786'. [ 478.169670][ T23] usb 5-1: SerialNumber: syz [ 478.438665][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 478.512366][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 478.535443][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 478.552352][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 478.567558][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 478.635585][ T23] lan78xx: probe of 5-1:1.0 failed with error -71 [ 478.728122][ T23] usb 5-1: USB disconnect, device number 4 [ 479.004067][T11354] tipc: Enabling of bearer rejected, failed to enable media [ 479.082207][T11356] tipc: Started in network mode [ 479.107847][T11356] tipc: Node identity 4, cluster identity 4711 [ 479.126276][T11356] tipc: Node number set to 4 [ 479.268013][T11362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.349174][T11398] syzkaller0: entered promiscuous mode [ 481.354728][T11398] syzkaller0: entered allmulticast mode [ 481.763555][T11404] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 482.360499][T11415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1817'. [ 482.566623][T11419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 483.569714][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1831'. [ 483.917025][T11435] loop1: detected capacity change from 0 to 512 [ 484.063167][T11435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.095483][T11435] ext4 filesystem being mounted at /434/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.348002][T11448] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 484.411571][T11448] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2971: inode #15: comm syz.1.1833: corrupted xattr block 33: invalid ea_ino [ 484.523733][T11448] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 484.816727][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.910354][T11467] loop1: detected capacity change from 0 to 2048 [ 485.998425][T11467] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 486.091613][T11467] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 487.087965][T11478] xt_nat: multiple ranges no longer supported [ 490.095210][T11498] bond8: (slave dummy0): Releasing backup interface [ 490.142059][T11498] bond9: (slave bridge3): Releasing active interface [ 491.410813][T11523] trusted_key: encrypted_key: insufficient parameters specified [ 492.632236][T11534] netlink: 'syz.4.1852': attribute type 1 has an invalid length. [ 492.903301][T11539] loop1: detected capacity change from 0 to 64 [ 492.970316][T11536] 8021q: adding VLAN 0 to HW filter on device bond7 [ 493.029559][T11536] bond6: (slave bond7): making interface the new active one [ 493.099898][T11536] bond6: (slave bond7): Enslaving as an active interface with an up link [ 493.186411][T11539] bio_check_eod: 7 callbacks suppressed [ 493.186461][T11539] syz.1.1853: attempt to access beyond end of device [ 493.186461][T11539] loop1: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 493.283224][T11539] buffer_io_error: 6 callbacks suppressed [ 493.283313][T11539] Buffer I/O error on dev loop1, logical block 163, lost async page write [ 493.336174][T11539] syz.1.1853: attempt to access beyond end of device [ 493.336174][T11539] loop1: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 493.411515][T11539] Buffer I/O error on dev loop1, logical block 167, lost async page write [ 493.455138][T11539] syz.1.1853: attempt to access beyond end of device [ 493.455138][T11539] loop1: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 493.492320][T11539] Buffer I/O error on dev loop1, logical block 169, lost async page write [ 493.530733][T11539] syz.1.1853: attempt to access beyond end of device [ 493.530733][T11539] loop1: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 493.558633][T11539] Buffer I/O error on dev loop1, logical block 171, lost async page write [ 493.572013][T11539] syz.1.1853: attempt to access beyond end of device [ 493.572013][T11539] loop1: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 493.601837][T11541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1851'. [ 493.618555][T11539] Buffer I/O error on dev loop1, logical block 172, lost async page write [ 493.655494][T11539] syz.1.1853: attempt to access beyond end of device [ 493.655494][T11539] loop1: rw=2049, sector=173, nr_sectors = 1 limit=64 [ 493.679911][T11539] Buffer I/O error on dev loop1, logical block 173, lost async page write [ 493.729242][T11539] syz.1.1853: attempt to access beyond end of device [ 493.729242][T11539] loop1: rw=2049, sector=174, nr_sectors = 1 limit=64 [ 493.785668][T11539] Buffer I/O error on dev loop1, logical block 174, lost async page write [ 493.844725][T11539] syz.1.1853: attempt to access beyond end of device [ 493.844725][T11539] loop1: rw=2049, sector=175, nr_sectors = 1 limit=64 [ 493.915148][T11539] Buffer I/O error on dev loop1, logical block 175, lost async page write [ 493.963133][T11539] syz.1.1853: attempt to access beyond end of device [ 493.963133][T11539] loop1: rw=2049, sector=176, nr_sectors = 1 limit=64 [ 494.006912][T11539] Buffer I/O error on dev loop1, logical block 176, lost async page write [ 494.027858][T11539] syz.1.1853: attempt to access beyond end of device [ 494.027858][T11539] loop1: rw=2049, sector=177, nr_sectors = 1 limit=64 [ 494.064037][T11539] Buffer I/O error on dev loop1, logical block 177, lost async page write [ 494.095620][T11552] overlayfs: failed to clone upperpath [ 494.440768][T11557] netlink: 'syz.0.1859': attribute type 1 has an invalid length. [ 494.556304][T11557] 8021q: adding VLAN 0 to HW filter on device bond6 [ 494.677775][T11557] bond6: (slave geneve2): making interface the new active one [ 494.712832][T11557] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 495.104073][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1864'. [ 495.316962][T11575] trusted_key: encrypted_key: insufficient parameters specified [ 496.437707][T11578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.957353][T11601] loop1: detected capacity change from 0 to 512 [ 499.970720][T11601] EXT4-fs: Ignoring removed oldalloc option [ 499.980164][T11601] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 500.030131][T11601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.049855][T11601] ext4 filesystem being mounted at /445/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.078203][T11578] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.095122][T11578] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.107673][T11578] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.123074][T11578] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.272627][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.380571][T11636] syzkaller0: entered promiscuous mode [ 501.388356][T11636] syzkaller0: entered allmulticast mode [ 501.727226][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.734272][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.267592][ T5761] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 502.514478][ T5761] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 502.531755][ T5761] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 502.566934][ T5761] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 502.607838][ T5761] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 502.727114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #86!!! [ 502.787114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 502.807108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 502.936935][ T5761] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 502.966263][ T5761] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 502.977810][ T5761] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 502.990004][ T5761] usb 5-1: Product: syz [ 502.996393][ T5761] usb 5-1: Manufacturer: syz [ 506.030784][ T5761] usb 5-1: can't set config #1, error -71 [ 506.041729][ T5761] usb 5-1: USB disconnect, device number 5 [ 506.806751][T11680] loop4: detected capacity change from 0 to 512 [ 506.882157][T11680] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.1899: iget: bad i_size value: 38620345925642 [ 506.962197][T11680] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1899: couldn't read orphan inode 15 (err -117) [ 507.080348][T11680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.258690][T11688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1900'. [ 507.388744][T11680] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.1899: bg 0: block 5: invalid block bitmap [ 507.436359][T11680] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 224 with error 28 [ 507.505028][T11680] EXT4-fs (loop4): This should not happen!! Data will be lost [ 507.505028][T11680] [ 507.543181][T11680] EXT4-fs (loop4): Total free blocks count 0 [ 507.567811][T11680] EXT4-fs (loop4): Free/Dirty block details [ 507.590304][T11680] EXT4-fs (loop4): free_blocks=0 [ 507.627235][T11680] EXT4-fs (loop4): dirty_blocks=228 [ 507.632507][T11680] EXT4-fs (loop4): Block reservation details [ 507.658743][T11680] EXT4-fs (loop4): i_reserved_data_blocks=228 [ 507.862638][ T7482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.887120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 514.630007][T11729] loop4: detected capacity change from 0 to 2048 [ 514.689289][T11729] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 515.605894][ T5775] IPVS: starting estimator thread 0... [ 515.707307][T11745] IPVS: using max 18 ests per chain, 43200 per kthread [ 515.854632][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1919'. [ 515.915833][T11748] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.924945][T11748] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.933927][T11748] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.942727][T11748] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.983353][T11749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1919'. [ 516.845987][T11760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.900239][T11760] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 517.748501][T11769] loop4: detected capacity change from 0 to 512 [ 517.938578][T11769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.958211][T11769] ext4 filesystem being mounted at /339/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.047199][ T28] audit: type=1326 audit(1785425144.268:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11767 comm="syz.0.1927" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 518.143219][ T28] audit: type=1326 audit(1785425144.288:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11767 comm="syz.0.1927" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 518.535038][ T7482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.601566][ T7482] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 518.678286][ T7482] EXT4-fs error (device loop4): ext4_quota_off:7237: inode #4: comm syz-executor: mark_inode_dirty error [ 518.720398][ T7482] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 518.736887][ T7482] EXT4-fs error (device loop4): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 518.893776][ T28] audit: type=1326 audit(1785425145.148:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11767 comm="syz.0.1927" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 518.958807][ T28] audit: type=1326 audit(1785425145.188:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11767 comm="syz.0.1927" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 520.447449][ T28] audit: type=1326 audit(1785425146.698:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11784 comm="syz.1.1932" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2d059df99 code=0x0 [ 520.476116][T11786] lo speed is unknown, defaulting to 1000 [ 523.809253][T11805] netlink: 'syz.4.1936': attribute type 16 has an invalid length. [ 523.834030][T11805] netlink: 'syz.4.1936': attribute type 17 has an invalid length. [ 523.964245][T11805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.994927][T11805] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.040872][T11805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 525.382870][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'. [ 525.433476][T11816] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.442647][T11816] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.451685][T11816] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.460716][T11816] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.554171][T11817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'. [ 526.894013][T11837] CIFS: Attempting to mount //127.0.0.1/share [ 526.953457][T11837] CIFS: VFS: Error connecting to socket. Aborting operation. [ 526.994053][T11837] CIFS: VFS: cifs_mount failed w/return code = -101 [ 527.480060][T11842] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1944'. [ 527.925752][T11851] netlink: 'syz.0.1947': attribute type 1 has an invalid length. [ 528.277469][T11856] 8021q: adding VLAN 0 to HW filter on device bond9 [ 528.306007][T11856] bond8: (slave bond9): making interface the new active one [ 528.328737][T11862] loop1: detected capacity change from 0 to 512 [ 528.336134][T11856] bond8: (slave bond9): Enslaving as an active interface with an up link [ 528.370742][T11862] EXT4-fs: Ignoring removed bh option [ 528.424060][T11862] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 528.460144][T11851] bond8: (slave gretap1): Enslaving as a backup interface with an up link [ 528.492229][T11862] EXT4-fs (loop1): 1 truncate cleaned up [ 528.515853][T11862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.997765][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.424014][T11879] vlan5: entered promiscuous mode [ 529.431411][T11879] bridge0: entered promiscuous mode [ 529.438856][T11879] vlan5: entered allmulticast mode [ 529.446193][T11879] bridge0: entered allmulticast mode [ 529.576366][T11879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1954'. [ 529.600649][T11883] loop1: detected capacity change from 0 to 512 [ 529.622495][T11883] EXT4-fs: Ignoring removed orlov option [ 529.667394][T11883] EXT4-fs: Ignoring removed mblk_io_submit option [ 529.694213][T11883] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.1957: corrupted in-inode xattr: e_value size too large [ 529.711530][T11880] bond0: (slave team0): Releasing backup interface [ 529.719462][T11883] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1957: couldn't read orphan inode 15 (err -117) [ 529.748708][T11883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.761237][T11880] bridge_slave_0: left allmulticast mode [ 529.767033][T11880] bridge_slave_0: left promiscuous mode [ 529.773454][T11880] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.785218][T11880] bridge_slave_1: left allmulticast mode [ 529.793515][T11880] bridge_slave_1: left promiscuous mode [ 529.801842][T11880] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.049058][T11880] bond0: (slave bond_slave_0): Releasing backup interface [ 530.064685][T11880] bond0: (slave bond_slave_1): Releasing backup interface [ 531.553601][T11880] team0: Port device team_slave_0 removed [ 531.606250][T11880] team0: Port device team_slave_1 removed [ 531.633199][T11880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.655037][T11880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.694012][T11880] bond2: (slave geneve2): Releasing active interface [ 531.720125][T11880] geneve2: left allmulticast mode [ 531.789185][T11880] bond3: (slave bond4): Releasing backup interface [ 531.816363][T11880] bond3: (slave bond4): the permanent HWaddr of slave - e2:fe:27:75:29:5f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 531.863944][T11883] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.1957: Logical block already allocated [ 531.883981][T11880] bond3: (slave gretap1): making interface the new active one [ 531.911355][T11880] bond3: (slave gretap1): Releasing backup interface [ 531.946980][T11880] bond5: (slave veth9): Releasing active interface [ 531.972509][T11880] bond6: (slave bond7): Releasing backup interface [ 531.997523][T11884] netlink: 'syz.0.1956': attribute type 16 has an invalid length. [ 532.025923][T11884] netlink: 'syz.0.1956': attribute type 17 has an invalid length. [ 532.084426][T11884] erspan0: left promiscuous mode [ 532.183907][T11884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.203434][T11884] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.220364][T11884] dummy0: left promiscuous mode [ 532.236846][T11884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 532.416239][T11896] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 532.436843][T11896] team0 (unregistering): Port device team_slave_0 removed [ 532.448132][T11896] team0 (unregistering): Failed to send options change via netlink (err -105) [ 532.469879][T11896] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 532.490001][T11896] team0 (unregistering): Port device team_slave_1 removed [ 532.523345][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.549401][T11897] gretap0: entered promiscuous mode [ 532.569804][T11897] vlan2: entered promiscuous mode [ 536.615204][T11929] xt_nat: multiple ranges no longer supported [ 540.695735][T11938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.376123][T11948] binder: 11947:11948 unknown command 0 [ 541.413485][T11948] binder: 11947:11948 ioctl c0306201 2000000001c0 returned -22 [ 541.742874][T11957] vlan2: entered promiscuous mode [ 542.102118][T11964] syzkaller0: entered promiscuous mode [ 542.133210][T11964] syzkaller0: entered allmulticast mode [ 542.169392][T11964] tipc: Enabled bearer , priority 0 [ 542.265762][T11963] tipc: Resetting bearer [ 542.444196][T11963] tipc: Disabling bearer [ 543.707142][T11990] xt_nat: multiple ranges no longer supported [ 545.309616][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1990'. [ 546.384113][T12023] vlan5: entered promiscuous mode [ 546.412981][T12023] gretap0: entered promiscuous mode [ 546.688018][ T6928] hsr_slave_0: left promiscuous mode [ 546.733926][ T6928] hsr_slave_1: left promiscuous mode [ 546.750844][ T6928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.406639][ T6928] team0 (unregistering): Port device team_slave_1 removed [ 549.516942][ T6928] team0 (unregistering): Port device team_slave_0 removed [ 549.626761][ T6928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.741236][ T6928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.881196][ T6928] bond0 (unregistering): Released all slaves [ 552.116410][T12034] netlink: 'syz.4.1996': attribute type 10 has an invalid length. [ 552.172689][T12034] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 553.563088][T12087] gretap0: entered promiscuous mode [ 553.615975][T12087] vlan2: entered promiscuous mode [ 553.642573][T12081] Bluetooth: MGMT ver 1.22 [ 553.976598][ T6928] IPVS: stop unused estimator thread 0... [ 554.451522][T12095] loop1: detected capacity change from 0 to 4096 [ 554.864529][T12104] xt_nat: multiple ranges no longer supported [ 554.922943][T12095] EXT4-fs: Ignoring removed mblk_io_submit option [ 555.119891][T12095] EXT4-fs (loop1): Test dummy encryption mode enabled [ 555.275876][T12095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.569224][ T28] audit: type=1326 audit(1785425181.818:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12107 comm="syz.2.2009" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6e79df99 code=0x7fc00000 [ 555.737366][ T28] audit: type=1326 audit(1785425181.818:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12107 comm="syz.2.2009" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2f6e79df99 code=0x7fc00000 [ 555.912929][T12115] af_packet: tpacket_rcv: packet too big, clamped from 1550 to 4294967286. macoff=82 [ 556.004497][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.341530][T12127] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2011'. [ 556.454206][T12127] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2011'. [ 557.750134][T12159] loop1: detected capacity change from 0 to 256 [ 557.919255][T12164] loop4: detected capacity change from 0 to 128 [ 557.991104][T12166] netlink: 'syz.1.2024': attribute type 4 has an invalid length. [ 558.041509][T12166] netlink: 'syz.1.2024': attribute type 5 has an invalid length. [ 558.086285][T12166] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2024'. [ 558.412996][T12174] overlayfs: failed to clone upperpath [ 560.573049][T12205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2036'. [ 560.919285][T12211] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 561.053593][T12205] macvlan2: entered promiscuous mode [ 561.078188][T12205] macvlan2: entered allmulticast mode [ 561.110471][T12205] bond10: (slave macvlan2): Error -98 calling set_mac_address [ 561.315955][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2040'. [ 563.299041][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.417496][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.149891][T12269] syz_tun: entered promiscuous mode [ 565.621366][T12278] syzkaller0: entered promiscuous mode [ 565.640901][T12278] syzkaller0: entered allmulticast mode [ 567.541969][T12300] netlink: 'syz.0.2059': attribute type 1 has an invalid length. [ 574.387215][T12355] SET target dimension over the limit! [ 579.145823][T12403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.536690][T12451] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 581.567768][T12451] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 584.717731][T12513] loop4: detected capacity change from 0 to 64 [ 585.834773][T12536] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2120'. [ 585.907415][ T5775] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 586.127232][ T5775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.151570][ T5775] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 586.196835][ T5775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.288743][ T5775] usb 5-1: config 0 descriptor?? [ 587.282628][ T5775] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 587.333657][ T5775] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0004/input/input17 [ 587.689204][ T5775] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 587.815231][ T5775] usb 5-1: USB disconnect, device number 6 [ 588.364660][T12569] fido_id[12569]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 588.484541][T12580] netlink: 'syz.0.2129': attribute type 1 has an invalid length. [ 588.498538][T12580] netlink: 'syz.0.2129': attribute type 4 has an invalid length. [ 588.550009][T12580] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.2129'. [ 588.962645][T12585] syzkaller0: entered promiscuous mode [ 588.970545][T12585] syzkaller0: entered allmulticast mode [ 588.987798][T12585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.030644][T12587] loop4: detected capacity change from 0 to 256 [ 589.052486][T12587] exfat: Deprecated parameter 'utf8' [ 589.101501][T12587] exfat: Deprecated parameter 'utf8' [ 589.125785][T12587] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 589.412796][T12587] lo speed is unknown, defaulting to 1000 [ 589.941320][T12601] SET target dimension over the limit! [ 590.545382][ T28] audit: type=1800 audit(1785425216.798:659): pid=12589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2133" name="bus" dev="ramfs" ino=33437 res=0 errno=0 [ 595.356177][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2140'. [ 595.366850][T12622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2140'. [ 596.324083][T12623] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.876433][T12646] syzkaller0: entered promiscuous mode [ 597.898632][T12646] syzkaller0: entered allmulticast mode [ 598.277511][T12654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2148'. [ 598.707686][T12658] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 598.811157][T12660] macvlan2: entered promiscuous mode [ 598.816523][T12660] macvlan2: entered allmulticast mode [ 598.909413][T12660] bond10: (slave macvlan2): Error -98 calling set_mac_address [ 599.046764][T12671] bond8 (unregistering): Released all slaves [ 599.809549][T12681] netlink: 'syz.4.2152': attribute type 1 has an invalid length. [ 600.161418][T12682] 8021q: adding VLAN 0 to HW filter on device bond9 [ 600.285277][T12682] bond8: (slave bond9): making interface the new active one [ 600.358751][T12682] bond8: (slave bond9): Enslaving as an active interface with an up link [ 600.512599][T12691] SET target dimension over the limit! [ 600.606504][T12681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2152'. [ 600.759388][T12681] 8021q: adding VLAN 0 to HW filter on device bond8 [ 603.029826][T12710] loop4: detected capacity change from 0 to 128 [ 603.082440][T12710] FAT-fs (loop4): Unrecognized mount option "nfs(Azy" or missing value [ 605.001781][T12732] netlink: 'syz.2.2167': attribute type 1 has an invalid length. [ 605.670324][T12733] bond11: (slave bridge5): Enslaving as a backup interface with an up link [ 605.985683][T12735] macvlan2: entered promiscuous mode [ 606.077334][T12735] macvlan2: entered allmulticast mode [ 606.085848][T12735] bond11: entered promiscuous mode [ 606.152053][T12735] bridge5: entered promiscuous mode [ 606.206770][T12735] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 606.331615][T12735] bond11: left promiscuous mode [ 606.336545][T12735] bridge5: left promiscuous mode [ 606.707575][T12750] netlink: 'syz.1.2170': attribute type 1 has an invalid length. [ 606.872776][T12750] 8021q: adding VLAN 0 to HW filter on device bond11 [ 606.994898][T12754] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.057386][T12754] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.107272][T12754] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.141850][T12754] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.175431][T12754] bond11: (slave geneve3): making interface the new active one [ 607.204517][T12754] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 607.770470][T12772] loop1: detected capacity change from 0 to 1024 [ 607.831144][T12772] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 607.868710][T12772] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 607.917627][T12772] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 607.954215][T12772] EXT4-fs error (device loop1): ext4_get_journal_inode:5820: inode #5: comm syz.1.2176: unexpected bad inode w/o EXT4_IGET_BAD [ 607.988002][T12772] EXT4-fs (loop1): no journal found [ 608.006401][T12772] EXT4-fs (loop1): can't get journal size [ 608.030157][T12772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 608.143489][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.520814][T12803] Invalid option length (1045252) for dns_resolver key [ 611.943082][T12830] all: renamed from lo (while UP) [ 617.128872][T12911] netlink: 'syz.2.2201': attribute type 4 has an invalid length. [ 617.271640][T12911] netlink: 'syz.2.2201': attribute type 4 has an invalid length. [ 617.878582][T12932] netlink: 'syz.1.2207': attribute type 1 has an invalid length. [ 618.215369][T12934] bond12: (slave bridge0): Enslaving as a backup interface with an up link [ 618.376442][T12937] macvlan2: entered promiscuous mode [ 618.443291][T12937] macvlan2: entered allmulticast mode [ 618.506446][T12937] bond12: entered promiscuous mode [ 618.538056][T12937] bridge0: entered promiscuous mode [ 618.574038][T12937] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 618.653461][T12937] bond12: left promiscuous mode [ 618.671844][T12937] bridge0: left promiscuous mode [ 618.830266][T12944] lo speed is unknown, defaulting to 1000 [ 619.096293][T12945] vlan2: entered promiscuous mode [ 619.137020][T12945] vlan2: entered allmulticast mode [ 619.144831][T12945] hsr_slave_1: entered allmulticast mode [ 623.059470][T12988] loop1: detected capacity change from 0 to 1024 [ 623.070162][T12988] EXT4-fs: inline encryption not supported [ 623.083965][T12988] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 623.340189][T12988] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #3: block 1: comm syz.1.2216: lblock 1 mapped to illegal pblock 1 (length 1) [ 623.359175][T12988] EXT4-fs (loop1): Remounting filesystem read-only [ 623.365758][T12988] Quota error (device loop1): write_blk: dquota write failed [ 623.373361][T12988] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 623.383609][T12988] EXT4-fs (loop1): 1 orphan inode deleted [ 623.390830][T12988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.293478][T12999] xt_HMARK: spi-set and port-set can't be combined [ 624.386398][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.611267][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.620378][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.005767][T13002] loop4: detected capacity change from 0 to 1024 [ 625.054741][T13002] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 625.113511][T13002] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 625.146213][T13002] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 625.182129][T13002] EXT4-fs error (device loop4): ext4_get_journal_inode:5820: inode #5: comm syz.4.2222: unexpected bad inode w/o EXT4_IGET_BAD [ 625.262734][T13002] EXT4-fs (loop4): no journal found [ 625.277483][T13002] EXT4-fs (loop4): can't get journal size [ 625.300936][T13002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 625.533728][ T7482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.945509][T13069] loop1: detected capacity change from 0 to 8 [ 630.032084][T13069] SQUASHFS error: lzo decompression failed, data probably corrupt [ 630.069947][T13069] SQUASHFS error: Failed to read block 0x91: -5 [ 630.079005][T13069] SQUASHFS error: Unable to read metadata cache entry [8f] [ 630.089213][T13069] SQUASHFS error: Unable to read inode 0x11f [ 630.712798][T13089] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 630.727712][T13089] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 630.737730][T13089] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 631.375494][T13100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2246'. [ 631.993485][T13105] bond12: entered allmulticast mode [ 632.020715][T13107] loop1: detected capacity change from 0 to 512 [ 632.037295][T13108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2249'. [ 632.045127][T13107] EXT4-fs: Ignoring removed i_version option [ 632.055910][T13107] EXT4-fs: Ignoring removed bh option [ 632.111748][T13107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.131863][T13108] bridge6: entered allmulticast mode [ 632.142173][T13108] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 632.158861][T13107] ext4 filesystem being mounted at /539/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 632.162537][T13109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2249'. [ 632.349124][T13109] bridge7: entered allmulticast mode [ 632.405731][T13109] bond12: (slave bridge7): Enslaving as an active interface with a down link [ 632.452627][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.795533][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2255'. [ 633.829251][T13126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2255'. [ 634.177427][ T9845] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 634.407253][ T9845] usb 2-1: Using ep0 maxpacket: 32 [ 634.424456][ T9845] usb 2-1: unable to get BOS descriptor or descriptor too short [ 634.444501][ T9845] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 634.469880][ T9845] usb 2-1: can't read configurations, error -71 [ 634.836028][T13146] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 634.847230][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 634.862938][T13146] batman_adv: batadv0: Adding interface: gretap2 [ 634.872883][T13146] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.905699][T13146] batman_adv: batadv0: Interface activated: gretap2 [ 635.027242][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 635.077568][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 635.095283][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.120420][ T9] usb 5-1: Product: syz [ 635.124654][ T9] usb 5-1: Manufacturer: syz [ 635.143769][ T9] usb 5-1: SerialNumber: syz [ 635.167414][ T9] r8152-cfgselector 5-1: config 0 descriptor?? [ 635.790560][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 635.831755][ T9] r8152-cfgselector 5-1: USB disconnect, device number 7 [ 637.607411][ T5775] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 637.797482][ T5775] usb 5-1: Using ep0 maxpacket: 32 [ 637.840527][ T5775] usb 5-1: unable to get BOS descriptor or descriptor too short [ 637.884760][ T5775] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 637.899871][ T5775] usb 5-1: can't read configurations, error -71 [ 642.706613][T13239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2292'. [ 642.762183][T13239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2292'. [ 642.782472][T13226] syz.4.2287 (13226): drop_caches: 2 [ 643.096183][T13250] binder_alloc: 13248: pid 13248 spamming oneway? 2 buffers allocated for a total size of 5120 [ 643.354533][T13258] warn_alloc: 1 callbacks suppressed [ 643.354590][T13258] syz.1.2298: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 643.391629][T13258] CPU: 1 PID: 13258 Comm: syz.1.2298 Not tainted syzkaller #0 [ 643.399340][T13258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 643.409432][T13258] Call Trace: [ 643.412723][T13258] [ 643.415752][T13258] dump_stack_lvl+0x18c/0x250 [ 643.420734][T13258] ? show_regs_print_info+0x20/0x20 [ 643.426024][T13258] ? load_image+0x420/0x420 [ 643.430587][T13258] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 643.437132][T13258] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 643.443670][T13258] warn_alloc+0x246/0x340 [ 643.448040][T13258] ? zone_watermark_ok_safe+0x230/0x230 [ 643.453597][T13258] __vmalloc_node_range+0x129/0x1320 [ 643.459128][T13258] ? __mutex_trylock_common+0x160/0x270 [ 643.464717][T13258] ? mark_lock+0x94/0x320 [ 643.469070][T13258] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 643.475230][T13258] ? lock_chain_count+0x20/0x20 [ 643.480099][T13258] ? free_vm_area+0x50/0x50 [ 643.484701][T13258] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 643.490984][T13258] ? lockdep_hardirqs_on+0x98/0x150 [ 643.496235][T13258] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 643.502401][T13258] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 643.508340][T13258] vmalloc+0x79/0x90 [ 643.512261][T13258] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 643.518157][T13258] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 643.523800][T13258] dvb_demux_do_ioctl+0x454/0x530 [ 643.528832][T13258] dvb_usercopy+0x195/0x2b0 [ 643.533334][T13258] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 643.538879][T13258] ? dvb_generic_ioctl+0xb0/0xb0 [ 643.543824][T13258] ? dvb_demux_ioctl+0x15/0x30 [ 643.548848][T13258] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 643.554397][T13258] ? dvb_demux_poll+0x210/0x210 [ 643.559252][T13258] dvb_demux_ioctl+0x29/0x30 [ 643.563847][T13258] __se_sys_ioctl+0xfd/0x170 [ 643.568528][T13258] do_syscall_64+0x55/0xb0 [ 643.572948][T13258] ? clear_bhb_loop+0x40/0x90 [ 643.577622][T13258] ? clear_bhb_loop+0x40/0x90 [ 643.582329][T13258] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 643.588230][T13258] RIP: 0033:0x7fe2d059df99 [ 643.592713][T13258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.612380][T13258] RSP: 002b:00007fe2d1521028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 643.620867][T13258] RAX: ffffffffffffffda RBX: 00007fe2d0825fa0 RCX: 00007fe2d059df99 [ 643.628844][T13258] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 643.636810][T13258] RBP: 00007fe2d0634ec4 R08: 0000000000000000 R09: 0000000000000000 [ 643.644779][T13258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.652758][T13258] R13: 00007fe2d0826038 R14: 00007fe2d0825fa0 R15: 00007ffc2c4236c8 [ 643.660743][T13258] [ 643.803970][T13258] Mem-Info: [ 643.807394][T13258] active_anon:18194 inactive_anon:4 isolated_anon:0 [ 643.807394][T13258] active_file:6579 inactive_file:49318 isolated_file:0 [ 643.807394][T13258] unevictable:17735 dirty:288 writeback:0 [ 643.807394][T13258] slab_reclaimable:11149 slab_unreclaimable:120261 [ 643.807394][T13258] mapped:24722 shmem:13343 pagetables:791 [ 643.807394][T13258] sec_pagetables:0 bounce:0 [ 643.807394][T13258] kernel_misc_reclaimable:0 [ 643.807394][T13258] free:1283194 free_pcp:13541 free_cma:0 [ 643.852981][T13258] Node 0 active_anon:72776kB inactive_anon:16kB active_file:26316kB inactive_file:197072kB unevictable:69404kB isolated(anon):0kB isolated(file):0kB mapped:98888kB dirty:1152kB writeback:0kB shmem:51836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13280kB pagetables:3164kB sec_pagetables:0kB all_unreclaimable? no [ 643.973675][T13258] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 644.044074][T13258] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 644.102010][T13258] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 644.132433][T13258] Node 0 DMA32 free:1227036kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:73364kB inactive_anon:16kB active_file:26316kB inactive_file:196252kB unevictable:69404kB writepending:1160kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:29324kB local_pcp:12636kB free_cma:0kB [ 644.206592][T13258] lowmem_reserve[]: 0 0 0 0 0 [ 644.243495][T13258] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 644.356886][T13258] lowmem_reserve[]: 0 0 0 0 0 [ 644.380171][T13258] Node 1 Normal free:3890228kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23592kB local_pcp:14448kB free_cma:0kB [ 644.427589][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 644.474158][T13258] lowmem_reserve[]: 0 0 0 0 0 [ 644.483571][T13258] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 644.506051][T13258] Node 0 DMA32: 5*4kB (ME) 73*8kB (ME) 408*16kB (UM) 760*32kB (UME) 1293*64kB (UME) 458*128kB (UM) 96*256kB (UME) 40*512kB (UME) 12*1024kB (UME) 7*2048kB (ME) 240*4096kB (UM) = 1227548kB [ 644.578345][T13258] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 644.617769][T13258] Node 1 Normal: 241*4kB (UME) 54*8kB (UE) 42*16kB (UME) 37*32kB (UE) 16*64kB (UME) 7*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (UM) 3*2048kB (UME) 946*4096kB (M) = 3890228kB [ 644.632666][ T9] usb 2-1: device descriptor read/64, error -71 [ 644.686504][T13258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 644.776081][T13258] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 644.789880][T13258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 644.803945][T13258] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 644.818491][T13258] 86202 total pagecache pages [ 644.825902][T13258] 4 pages in swap cache [ 644.833651][T13258] Free swap = 124628kB [ 644.840460][T13258] Total swap = 124996kB [ 644.846880][T13258] 2097051 pages RAM [ 644.852954][T13258] 0 pages HighMem/MovableOnly [ 644.860359][T13258] 416955 pages reserved [ 644.866386][T13258] 0 pages cma reserved [ 644.927372][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 646.620915][T13297] vxcan2: entered allmulticast mode [ 646.735731][ T28] audit: type=1326 audit(1785425272.988:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.0.2309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 646.773809][ T28] audit: type=1326 audit(1785425272.988:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.0.2309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 646.814593][ T28] audit: type=1326 audit(1785425272.988:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.0.2309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 646.867435][ T28] audit: type=1326 audit(1785425272.998:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.0.2309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 646.906042][ T28] audit: type=1326 audit(1785425272.998:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.0.2309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 646.946459][ T28] audit: type=1326 audit(1785425272.998:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.0.2309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 646.983463][ T28] audit: type=1326 audit(1785425272.998:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.0.2309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 647.020882][ T28] audit: type=1326 audit(1785425272.998:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.0.2309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 647.060989][ T28] audit: type=1326 audit(1785425272.998:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.0.2309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 647.113014][ T28] audit: type=1326 audit(1785425272.998:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.0.2309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff1af39df99 code=0x7ffc0000 [ 647.373671][T13311] netlink: 'syz.4.2313': attribute type 1 has an invalid length. [ 647.437893][T13311] 8021q: adding VLAN 0 to HW filter on device bond10 [ 647.575083][T13311] macvlan2: entered promiscuous mode [ 647.593129][T13311] macvlan2: entered allmulticast mode [ 647.613978][T13311] bond10: entered promiscuous mode [ 647.631693][T13311] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 647.889042][T13311] bond10: left promiscuous mode [ 650.043227][T13319] netlink: 'syz.1.2314': attribute type 4 has an invalid length. [ 650.462284][ T5761] lo speed is unknown, defaulting to 1000 [ 650.477397][T13322] netlink: 'syz.1.2314': attribute type 4 has an invalid length. [ 650.491229][ T9] lo speed is unknown, defaulting to 1000 [ 651.109676][T13332] loop1: detected capacity change from 0 to 8 [ 651.226444][T13332] SQUASHFS error: zstd decompression failed, data probably corrupt [ 651.280874][T13332] SQUASHFS error: Failed to read block 0x4ec: -5 [ 651.321887][T13332] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 651.360391][T13332] SQUASHFS error: Unable to read inode 0x2011f [ 652.859547][T13349] syzkaller0: entered promiscuous mode [ 652.865089][T13349] syzkaller0: entered allmulticast mode [ 653.766454][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2330'. [ 653.816191][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2330'. [ 654.305103][T13383] netlink: 'syz.0.2335': attribute type 11 has an invalid length. [ 655.704618][T13396] loop1: detected capacity change from 0 to 512 [ 655.728369][T13398] tipc: Failed to remove unknown binding: 66,0,0/4:826877826/826877828 [ 655.751660][T13398] tipc: Failed to remove unknown binding: 66,0,0/4:826877826/826877827 [ 655.830477][T13396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.872451][T13396] ext4 filesystem being mounted at /557/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 656.454815][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.965562][T13424] loop1: detected capacity change from 0 to 2048 [ 657.016268][T13424] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 657.164563][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 657.164626][ T28] audit: type=1800 audit(1785425283.418:677): pid=13424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2347" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 663.094514][T13465] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 665.063515][T13488] loop4: detected capacity change from 0 to 1024 [ 667.782469][T12889] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 668.921672][T13518] loop1: detected capacity change from 0 to 128 [ 669.029587][T13517] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2374'. [ 669.056391][T13518] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 669.134639][T13518] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 669.256573][ T28] audit: type=1804 audit(1785425295.508:678): pid=13518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2375" name="/newroot/565/file1/bus" dev="loop1" ino=12 res=1 errno=0 [ 669.592553][T13529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2378'. [ 670.673619][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 678.041231][T13582] netlink: 'syz.4.2391': attribute type 1 has an invalid length. [ 678.055646][T13582] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 678.226233][T13584] veth11: entered promiscuous mode [ 678.253850][T13584] veth11: entered allmulticast mode [ 678.317311][T13599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2394'. [ 680.603875][T13628] loop4: detected capacity change from 0 to 512 [ 680.736381][T13628] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.2404: bg 0: block 5: invalid block bitmap [ 680.780328][T13628] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 680.801597][T13628] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2404: invalid indirect mapped block 3 (level 2) [ 680.820709][T13630] netlink: 'syz.2.2405': attribute type 1 has an invalid length. [ 680.853696][T13628] EXT4-fs (loop4): 1 orphan inode deleted [ 680.867300][T13628] EXT4-fs (loop4): 1 truncate cleaned up [ 680.876818][T13628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.930862][T13630] 8021q: adding VLAN 0 to HW filter on device bond12 [ 681.006584][T13634] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 681.084608][T13628] netlink: 'syz.4.2404': attribute type 12 has an invalid length. [ 681.478438][T13630] macvlan2: entered promiscuous mode [ 681.483792][T13630] macvlan2: entered allmulticast mode [ 681.516838][T13630] bond12: entered promiscuous mode [ 681.961987][T13630] veth0_to_bond: entered promiscuous mode [ 682.024643][T13630] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 682.058664][ T7482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.090105][T13630] bond12: left promiscuous mode [ 682.112517][T13630] veth0_to_bond: left promiscuous mode [ 682.893528][T13647] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 683.843331][T13656] bond12: (slave veth0_to_bond): Releasing backup interface [ 683.899775][T13656] bond10: (slave bridge4): Releasing backup interface [ 683.954271][T13656] bond11: (slave bridge5): Releasing backup interface [ 686.038410][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.044931][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.755910][T13697] syzkaller0: entered promiscuous mode [ 687.783003][T13697] syzkaller0: entered allmulticast mode [ 693.065558][T13734] netlink: 'syz.0.2433': attribute type 1 has an invalid length. [ 693.283785][T13734] macvlan4: entered promiscuous mode [ 693.340828][T13734] macvlan4: entered allmulticast mode [ 693.363386][T13734] bond13: entered promiscuous mode [ 693.402201][T13734] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 693.469423][T13734] bond13: left promiscuous mode [ 693.604751][T13741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2434'. [ 693.623737][T13741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2434'. [ 693.646318][T13741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2434'. [ 693.696835][T13740] syzkaller0: entered promiscuous mode [ 693.714952][T13740] syzkaller0: entered allmulticast mode [ 694.805853][T13760] lo speed is unknown, defaulting to 1000 [ 694.849936][T13764] loop1: detected capacity change from 0 to 512 [ 694.881210][T13764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 694.930703][T13764] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2445: iget: bad i_size value: 38620345925642 [ 694.985403][T13764] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2445: couldn't read orphan inode 15 (err -117) [ 695.030295][T13764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.285752][T13766] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 695.312086][ T28] audit: type=1800 audit(1785425321.558:679): pid=13764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2445" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 695.580484][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.570820][T13790] loop4: detected capacity change from 0 to 512 [ 697.633776][T13790] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 697.681720][T13790] System zones: 0-2, 18-18, 34-35 [ 697.713493][T13790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 697.756620][T13790] ext4 filesystem being mounted at /457/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 698.692803][T13806] syzkaller0: entered promiscuous mode [ 698.744233][ T7482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.754228][T13806] syzkaller0: entered allmulticast mode [ 699.106162][T13812] loop4: detected capacity change from 0 to 256 [ 699.399172][T13812] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 699.932784][T13812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2456'. [ 700.079904][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2462'. [ 700.145065][T13824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2462'. [ 700.213008][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2462'. [ 702.127719][T13839] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 703.123580][T13848] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2469'. [ 705.731311][T13870] loop4: detected capacity change from 0 to 512 [ 705.993170][T13870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.064685][T13870] ext4 filesystem being mounted at /464/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 706.374129][T13879] netlink: 'syz.2.2478': attribute type 1 has an invalid length. [ 708.355299][ T7482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.384109][T13879] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 708.504091][T13879] macvlan2: entered promiscuous mode [ 708.533299][T13879] macvlan2: entered allmulticast mode [ 708.568334][T13879] bond13: entered promiscuous mode [ 708.603548][T13879] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 708.680809][T13879] bond13: left promiscuous mode [ 709.275881][T13899] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2484'. [ 709.298325][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2484'. [ 709.337285][T13899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2484'. [ 709.476572][T13903] bond0: (slave bridge0): Releasing backup interface [ 709.526996][T13903] bond8: (slave bond9): Releasing backup interface [ 709.646870][T13903] team0: Mode changed to "activebackup" [ 712.618444][T13924] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 716.332854][T13986] smc: net device lo applied user defined pnetid SYZ0 [ 718.371833][T14019] tipc: Enabled bearer , priority 0 [ 718.421952][T14019] syzkaller0: entered promiscuous mode [ 718.458151][T14019] syzkaller0: entered allmulticast mode [ 718.603880][T14019] tipc: Resetting bearer [ 718.654011][T14017] tipc: Resetting bearer [ 718.824627][T14017] tipc: Disabling bearer [ 720.394586][ T5929] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 721.397866][ T5929] usb 5-1: config 4 has an invalid interface number: 122 but max is 0 [ 721.537303][ T5929] usb 5-1: config 4 has no interface number 0 [ 721.543474][ T5929] usb 5-1: config 4 interface 122 has no altsetting 0 [ 721.596410][ T5929] usb 5-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice= 2.6d [ 721.628261][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.636321][ T5929] usb 5-1: Product: syz [ 721.677469][ T5929] usb 5-1: Manufacturer: syz [ 721.692174][ T5929] usb 5-1: SerialNumber: syz [ 721.768171][T14052] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 721.785657][ T9845] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 722.027044][ T5929] gspca_main: mars-2.14.0 probing 093a:050f [ 722.124167][ T5929] usb 5-1: USB disconnect, device number 10 [ 722.824838][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 725.556155][T14087] loop4: detected capacity change from 0 to 512 [ 725.564668][T14087] EXT4-fs: Ignoring removed i_version option [ 726.177344][T14087] EXT4-fs: Ignoring removed oldalloc option [ 726.328910][T14087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 726.385022][T14095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2534'. [ 726.767736][T14102] netlink: 'syz.1.2536': attribute type 1 has an invalid length. [ 727.387928][ T7482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.629950][T14124] bridge0: entered promiscuous mode [ 729.672743][T14124] bridge0: entered allmulticast mode [ 730.195825][T14127] netlink: 'syz.2.2550': attribute type 4 has an invalid length. [ 735.406868][T14148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2546'. [ 735.596951][T14147] syzkaller0: entered promiscuous mode [ 735.628002][T14147] syzkaller0: entered allmulticast mode [ 735.640289][T14148] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2546'. [ 735.678089][T14148] veth11: entered promiscuous mode [ 735.699828][T14148] veth11: entered allmulticast mode [ 735.788273][T14155] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 742.531089][T14179] netlink: 'syz.0.2553': attribute type 1 has an invalid length. [ 742.684832][T14181] loop4: detected capacity change from 0 to 2048 [ 743.369985][T14181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 743.675103][T14191] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 743.945403][ T7482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.172693][T14180] bond15: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 744.274675][T14180] bond15 (unregistering): Released all slaves [ 748.540625][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.814997][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.071457][T14185] bridge8: entered promiscuous mode [ 750.149520][T14185] bond14: (slave bridge8): making interface the new active one [ 750.233904][T14185] bond14: (slave bridge8): Enslaving as an active interface with an up link [ 750.282824][T14201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2558'. [ 750.362074][T14213] loop4: detected capacity change from 0 to 512 [ 750.381038][T14201] bond9: (slave syz_tun): Releasing backup interface [ 750.414244][T14213] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 750.640525][T14213] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.2561: iget: bad i_size value: 38620345925642 [ 750.693106][T14213] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2561: couldn't read orphan inode 15 (err -117) [ 750.753804][T14213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.137277][ T6928] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm kworker/u4:15: bg 0: block 5: invalid block bitmap [ 752.227809][ T6928] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 65 with error 28 [ 752.283482][ T6928] EXT4-fs (loop4): This should not happen!! Data will be lost [ 752.283482][ T6928] [ 752.325214][ T6928] EXT4-fs (loop4): Total free blocks count 0 [ 752.351664][ T6928] EXT4-fs (loop4): Free/Dirty block details [ 752.360282][ T6928] EXT4-fs (loop4): free_blocks=0 [ 752.367486][ T6928] EXT4-fs (loop4): dirty_blocks=65 [ 752.374780][ T6928] EXT4-fs (loop4): Block reservation details [ 752.383256][ T6928] EXT4-fs (loop4): i_reserved_data_blocks=65 [ 752.530308][ T7482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.415487][T14263] netlink: 'syz.4.2574': attribute type 1 has an invalid length. [ 755.672258][T14265] veth13: entered allmulticast mode [ 755.705524][T14265] bond11: (slave veth13): Enslaving as an active interface with a down link [ 756.551484][T14277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2577'. [ 757.046216][T14282] netlink: 'syz.1.2579': attribute type 9 has an invalid length. [ 758.858830][T14304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.200787][T14305] ip6erspan0: entered allmulticast mode [ 759.869345][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.274221][T14314] loop1: detected capacity change from 0 to 128 [ 760.313014][T14314] hpfs: Bad magic ... probably not HPFS [ 760.907203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.692177][T14304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.707429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.298870][T14324] hub 2-0:1.0: USB hub found [ 764.343402][T14324] hub 2-0:1.0: 1 port detected [ 764.747324][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.381880][T14350] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2598'. [ 767.963686][T14367] loop4: detected capacity change from 0 to 128 [ 769.726967][T14367] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 769.856206][T14367] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 770.038487][ T28] audit: type=1804 audit(1785425396.298:680): pid=14367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2601" name="/newroot/496/file1/bus" dev="loop4" ino=12 res=1 errno=0 [ 771.414087][ T7482] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 771.704764][T14401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2610'. [ 771.910576][T14401] netlink: 'syz.4.2610': attribute type 5 has an invalid length. [ 771.942641][T14401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2610'. [ 775.789327][T14435] netlink: 'syz.2.2619': attribute type 5 has an invalid length. [ 775.797758][ T28] audit: type=1326 audit(1785425402.058:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.4.2618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ccd99df99 code=0x7ffc0000 [ 775.798352][ T28] audit: type=1326 audit(1785425402.058:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.4.2618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ccd99df99 code=0x7ffc0000 [ 775.806742][ T28] audit: type=1326 audit(1785425402.058:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.4.2618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ccd99df99 code=0x7ffc0000 [ 777.507733][ T28] audit: type=1326 audit(1785425402.088:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.4.2618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0ccd99df99 code=0x7ffc0000 [ 779.216639][ T28] audit: type=1326 audit(1785425402.128:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.4.2618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ccd99df99 code=0x7ffc0000 [ 780.180762][T14456] netlink: 'syz.4.2628': attribute type 11 has an invalid length. [ 780.364099][T14456] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 782.591784][T14485] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14486] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[14485] [ 785.278683][T14493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2641'. [ 790.180909][T14522] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 790.198471][T14522] udc dummy_udc.0: failed to start g1: -19 [ 790.251155][T14522] UDC core: g1: couldn't find an available UDC or it's busy [ 792.801708][T14536] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2650'. [ 794.541161][T14549] overlayfs: failed to resolve './bus': -2 [ 797.162189][T14578] loop1: detected capacity change from 0 to 2048 [ 797.248492][T14578] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #2: comm syz.1.2663: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2727(2727) [ 797.471328][T14578] EXT4-fs (loop1): get root inode failed [ 797.756287][T14578] EXT4-fs (loop1): mount failed [ 803.623781][T14594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 807.440921][T14625] BUG: unable to handle page fault for address: fffffffffffffbc8 [ 807.448699][T14625] #PF: supervisor read access in kernel mode [ 807.454696][T14625] #PF: error_code(0x0000) - not-present page [ 807.460707][T14625] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 [ 807.466733][T14625] Oops: 0000 [#1] PREEMPT SMP KASAN [ 807.472256][T14625] CPU: 0 PID: 14625 Comm: syz.4.2676 Not tainted syzkaller #0 [ 807.479734][T14625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 807.489804][T14625] RIP: 0010:strlen+0x39/0x70 [ 807.494495][T14625] Code: ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 <42> 80 7c 3f 01 00 75 de eb 19 89 d9 80 e1 07 38 c1 7c e6 49 89 fc [ 807.514124][T14625] RSP: 0018:ffffc9000be86b18 EFLAGS: 00010286 [ 807.520218][T14625] RAX: 0000000000000000 RBX: fffffffffffffbc9 RCX: 0000000000080000 [ 807.528297][T14625] RDX: ffffc90004c89000 RSI: 0000000000000fa5 RDI: fffffffffffffbc8 [ 807.536382][T14625] RBP: ffffc9000be86c48 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 807.544366][T14625] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: dffffc0000000000 [ 807.552361][T14625] R13: ffff888018666680 R14: dffffc0000000000 R15: ffffffffffffffff [ 807.560355][T14625] FS: 00007f0cce8f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 807.569309][T14625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 807.575910][T14625] CR2: fffffffffffffbc8 CR3: 0000000064e43000 CR4: 00000000003506f0 [ 807.583914][T14625] Call Trace: [ 807.587213][T14625] [ 807.590181][T14625] trace_event_raw_event_drv_net_setup_tc+0x109/0x4d0 [ 807.597126][T14625] ? perf_trace_drv_twt_teardown_request+0x480/0x480 [ 807.603841][T14625] ieee80211_netdev_setup_tc+0x2c2/0x320 [ 807.609592][T14625] tcf_block_offload_cmd+0x235/0x3a0 [ 807.615015][T14625] ? net_generic+0x240/0x240 [ 807.619653][T14625] ? down_read_killable+0x340/0x340 [ 807.624985][T14625] tcf_block_get_ext+0xdf2/0x13d0 [ 807.630129][T14625] tcf_block_get+0x68/0xa0 [ 807.634591][T14625] ? tcf_block_get+0xa0/0xa0 [ 807.639218][T14625] cake_init+0x269/0xb30 [ 807.643563][T14625] ? qdisc_peek_dequeued+0x1f0/0x1f0 [ 807.648879][T14625] ? qdisc_alloc+0x77d/0xa40 [ 807.653510][T14625] ? qdisc_peek_dequeued+0x1f0/0x1f0 [ 807.658813][T14625] qdisc_create+0x90f/0x1060 [ 807.663427][T14625] ? qdisc_notify+0x370/0x370 [ 807.668127][T14625] ? lockdep_rtnl_is_held+0x26/0x30 [ 807.673440][T14625] ? qdisc_lookup+0x361/0x6c0 [ 807.678133][T14625] tc_modify_qdisc+0xb47/0x1de0 [ 807.683016][T14625] ? qdisc_offload_query_caps+0x150/0x150 [ 807.688766][T14625] ? qdisc_offload_query_caps+0x150/0x150 [ 807.694504][T14625] rtnetlink_rcv_msg+0x843/0xf90 [ 807.699466][T14625] ? rtnetlink_rcv_msg+0x220/0xf90 [ 807.704599][T14625] ? rtnetlink_bind+0x80/0x80 [ 807.709297][T14625] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 807.715418][T14625] ? lock_chain_count+0x20/0x20 [ 807.720288][T14625] ? __local_bh_enable_ip+0x13a/0x1c0 [ 807.725767][T14625] ? lockdep_hardirqs_on+0x98/0x150 [ 807.730998][T14625] ? __local_bh_enable_ip+0x13a/0x1c0 [ 807.736382][T14625] ? _local_bh_enable+0xa0/0xa0 [ 807.741248][T14625] ? __dev_queue_xmit+0x275/0x3630 [ 807.746453][T14625] ? __dev_queue_xmit+0x1bc2/0x3630 [ 807.751668][T14625] ? __dev_queue_xmit+0x275/0x3630 [ 807.756807][T14625] ? ref_tracker_free+0x686/0x830 [ 807.761944][T14625] netlink_rcv_skb+0x235/0x4c0 [ 807.766790][T14625] ? rtnetlink_bind+0x80/0x80 [ 807.771484][T14625] ? netlink_ack+0x1160/0x1160 [ 807.776271][T14625] ? __lock_acquire+0x7d80/0x7d80 [ 807.781315][T14625] ? netlink_deliver_tap+0x2e/0x1b0 [ 807.786562][T14625] netlink_unicast+0x7b1/0x930 [ 807.791352][T14625] netlink_sendmsg+0x8d0/0xbf0 [ 807.796141][T14625] ? netlink_getsockopt+0x590/0x590 [ 807.801362][T14625] ? apparmor_socket_sendmsg+0x8e/0x330 [ 807.807030][T14625] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 807.812421][T14625] ? security_socket_sendmsg+0x80/0xa0 [ 807.817953][T14625] ? netlink_getsockopt+0x590/0x590 [ 807.823171][T14625] ____sys_sendmsg+0x61b/0x980 [ 807.828073][T14625] ? __asan_memset+0x22/0x40 [ 807.832815][T14625] ? __sys_sendmsg_sock+0x30/0x30 [ 807.837870][T14625] ? __import_iovec+0x5f2/0x850 [ 807.842822][T14625] ? import_iovec+0x73/0xa0 [ 807.847345][T14625] ___sys_sendmsg+0x2a6/0x360 [ 807.852039][T14625] ? __sys_sendmsg+0x2b0/0x2b0 [ 807.856836][T14625] __se_sys_sendmsg+0x1d0/0x2c0 [ 807.861732][T14625] ? __x64_sys_sendmsg+0x80/0x80 [ 807.866698][T14625] ? lockdep_hardirqs_on+0x98/0x150 [ 807.871913][T14625] do_syscall_64+0x55/0xb0 [ 807.876428][T14625] ? clear_bhb_loop+0x40/0x90 [ 807.881142][T14625] ? clear_bhb_loop+0x40/0x90 [ 807.885856][T14625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 807.891765][T14625] RIP: 0033:0x7f0ccd99df99 [ 807.896190][T14625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.915816][T14625] RSP: 002b:00007f0cce8f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.924248][T14625] RAX: ffffffffffffffda RBX: 00007f0ccdc25fa0 RCX: 00007f0ccd99df99 [ 807.932236][T14625] RDX: 0000000000004890 RSI: 00002000000003c0 RDI: 0000000000000004 [ 807.940244][T14625] RBP: 00007f0ccda34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 807.948231][T14625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 807.956221][T14625] R13: 00007f0ccdc26038 R14: 00007f0ccdc25fa0 R15: 00007ffc103a6258 [ 807.964215][T14625] [ 807.967252][T14625] Modules linked in: [ 807.971166][T14625] CR2: fffffffffffffbc8 [ 807.975412][T14625] ---[ end trace 0000000000000000 ]--- [ 807.980870][T14625] RIP: 0010:strlen+0x39/0x70 [ 807.985479][T14625] Code: ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 <42> 80 7c 3f 01 00 75 de eb 19 89 d9 80 e1 07 38 c1 7c e6 49 89 fc [ 808.005101][T14625] RSP: 0018:ffffc9000be86b18 EFLAGS: 00010286 [ 808.011180][T14625] RAX: 0000000000000000 RBX: fffffffffffffbc9 RCX: 0000000000080000 [ 808.019162][T14625] RDX: ffffc90004c89000 RSI: 0000000000000fa5 RDI: fffffffffffffbc8 [ 808.027232][T14625] RBP: ffffc9000be86c48 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 808.035223][T14625] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: dffffc0000000000 [ 808.043225][T14625] R13: ffff888018666680 R14: dffffc0000000000 R15: ffffffffffffffff [ 808.051214][T14625] FS: 00007f0cce8f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 808.060165][T14625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 808.066759][T14625] CR2: fffffffffffffbc8 CR3: 0000000064e43000 CR4: 00000000003506f0 [ 808.074823][T14625] Kernel panic - not syncing: Fatal exception [ 808.081169][T14625] Kernel Offset: disabled [ 808.085510][T14625] Rebooting in 86400 seconds..