last executing test programs: 11.489653399s ago: executing program 1 (id=1530): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x42}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = dup(r0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000240)=ANY=[], 0x138) 11.4402355s ago: executing program 2 (id=1531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x44, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x5e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 11.151659704s ago: executing program 1 (id=1532): socket(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000007c0)=ANY=[@ANYBLOB='nodots,errors=continue,uid=', @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYBLOB="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", @ANYBLOB=',,nodots\'\x00'/23], 0x1, 0x267, &(0x7f0000000c00)="$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") syz_read_part_table(0x5e4, &(0x7f0000000000)="$eJzs3D2LXFUYB/D/uXfeFiLrBxBcSCMKRrETF2Oha7og2gnaWqxILMRCdgcVwZcPYCtaGIUQawUFCWKsrERYYiFib2GacGTuy0xAsZlFCfx+xZznnHue57mXe9sz4c5Wd5Nakuvd7KO2GybNw33wW/L2NFm+8EQy7xOmQ2JJ8tzlJ5+6sHexzNdrq9Xj4ep802U2jJPsDdGXk3xw+eCdLj5OyVGGMNPPZ5ms9tY+78O/3/TNkrbbw/9s8nXtX8QsP+aLJIelXb38ebLMJ8ndWXT7ziVpa63daz5OdpJ2/VVs4cr+teXjQ7yT4Uub9rOjd0t9aLg2Ta21Njk6O2a2yT2Pnbv0T0W7/GX3eONSrXV6ZsxtNhcOb80mw+yR7345ynKxrp7abEqe7CSvnDzzYHcnpa8x3f7xAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Zfe9ev83zTg53/2Wdfz0p2k2W49z7zreW5xS/yv713bffOtSk9f3X/rp5Td+Pfg9fyRp2xycSebrfS/2w9X3umEyrLZb9z+81cw++/jbnfXCULok35/9+WYdO5wM42uP3pa832zdHwAAAAAAAAAAAAAAAAAAAFau5sLexSbPfnWj5PlsjvvXLJJSxukiqbXWP2tnPPz/w3gOP9dvpKySUsvt1c8nu3cldf7+A93fCvSJtdZJ16L8J4/Iv/grAAD//x/vY/E=") pipe2$9p(0x0, 0x800) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) listen(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 10.962419307s ago: executing program 1 (id=1534): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r3, 0x1) 9.941474402s ago: executing program 2 (id=1538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 9.192129094s ago: executing program 3 (id=1539): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0xfffffffffffffde9, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff3}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101"], 0x30}}, 0x80) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) 8.797159269s ago: executing program 0 (id=1540): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x2200020, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x85ffffff}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x90) 7.690356266s ago: executing program 2 (id=1541): setgid(0xee00) r0 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000400)='stat\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r3, 0x407, 0x0) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x2000000) pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 7.544164278s ago: executing program 0 (id=1542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 7.543993288s ago: executing program 1 (id=1543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) shutdown(r3, 0x1) 7.543690928s ago: executing program 3 (id=1544): sched_setscheduler(0x0, 0x2, 0x0) r0 = io_uring_setup(0x2688, &(0x7f0000000300)={0x0, 0x600, 0x400, 0x8001002, 0x3d7}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r3}, 0x20) recvmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 7.181179253s ago: executing program 3 (id=1545): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001b40)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0xd0, 0xd0, 0x2d8, 0x1b8, 0x0, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xffffffff, 0xffffffff, 0x0, 0xff], [0xff000000, 0x0, 0xff, 0xffffffff], 'veth0_macvtap\x00', 'ipvlan0\x00', {}, {0x1fe}, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [0xff], [], 'syzkaller1\x00', 'ip6tnl0\x00', {}, {}, 0x2b, 0x0, 0x4, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@ipv6={@mcast2, @loopback, [], [0x0, 0x0, 0xffffffff], 'veth0_to_team\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x7f}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x7f}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) 3.796593084s ago: executing program 0 (id=1546): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000000e80)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x50}}, 0x0) 3.748153605s ago: executing program 2 (id=1547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa7f0e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x200000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000003980)=0x1, 0x4) 3.42983498s ago: executing program 3 (id=1548): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) close(0x3) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000b0000000000000000000000180100005e6c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 2.502307953s ago: executing program 1 (id=1549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 2.468169204s ago: executing program 3 (id=1550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) 2.458167414s ago: executing program 2 (id=1551): sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) io_setup(0x4, &(0x7f0000000400)=0x0) io_destroy(r0) io_destroy(r0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x800) mprotect(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x48040) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000001080)={0x6}) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x94}, 0x4c855) 2.437468984s ago: executing program 0 (id=1552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0xe, &(0x7f0000000280)="02", 0x1) 200.020957ms ago: executing program 0 (id=1553): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000200)={0x0, 0x2710}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc)=0x102, 0x16) write(r1, &(0x7f0000000000)='\"', 0xfdef) 197.792128ms ago: executing program 1 (id=1554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r1, 0xffffffffffffffff, 0x33, 0x0, @void}, 0x10) r2 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20}}, 0x18}}, 0x800) r4 = epoll_create1(0x0) r5 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000002c0)={0xa002a014}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000104010200000000000000000100000108000440000000070500010001"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4c000) 114.640479ms ago: executing program 3 (id=1555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 84.104629ms ago: executing program 0 (id=1556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000400)}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={'sha3-224\x00'}}) 0s ago: executing program 2 (id=1557): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f00000000c0)=0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7, 0x141000) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000206030000000300686173683a69000000000100000000000900020073797a311b000097cc26afc28057001400078008001340000017e508001240000000090000000000"], 0x48}}, 0x4080) socket(0x1, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x17, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x4, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x100000000, 0x100, 0x4, 0x2, 0x4bf, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x9, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0xb, 0xfffffffffffffffc, 0x2, 0x5, 0x7, 0x7, 0x3, 0x6}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x48000, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x1000, 0xffff8000) kernel console output (not intermixed with test programs): Bluetooth: hci3: command tx timeout [ 82.170491][ T5789] Bluetooth: hci2: command tx timeout [ 82.176074][ T5783] Bluetooth: hci1: command tx timeout [ 82.240115][ T5867] overlayfs: statfs failed on './file0' [ 82.293021][ T5869] binder: 5868:5869 ioctl c0306201 200000000080 returned -14 [ 82.329898][ T5869] binder: 5868:5869 ioctl c0306201 2000000003c0 returned -14 [ 82.484559][ T5876] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 82.495185][ T5876] ref_ctr increment failed for inode: 0x1c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888072c76880 [ 82.588722][ T5873] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 82.604344][ T5873] ref_ctr decrement failed for inode: 0x1c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888072c76880 [ 82.835486][ T5887] syz.3.17[5887]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.876897][ T5887] loop3: detected capacity change from 0 to 136 [ 82.970950][ T5764] tipc: Node number set to 2886997162 [ 83.514839][ T5897] Bluetooth: MGMT ver 1.22 [ 83.888771][ T5905] process 'syz.1.23' launched './file0' with NULL argv: empty string added [ 83.964552][ T5911] binder: 5909:5911 unknown command 0 [ 84.003632][ T5911] binder: 5909:5911 ioctl c0306201 200000000080 returned -22 [ 84.424399][ T5086] Bluetooth: hci1: command tx timeout [ 84.424450][ T5789] Bluetooth: hci0: command tx timeout [ 84.435466][ T5783] Bluetooth: hci2: command tx timeout [ 84.440967][ T5789] Bluetooth: hci3: command tx timeout [ 84.816556][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 86.156428][ T5943] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.560437][ T5955] tipc: Failed to remove unknown binding: 66,1,1/0:3906904937/3906904939 [ 86.607391][ T5955] tipc: Failed to remove unknown binding: 66,1,1/0:3906904937/3906904939 [ 86.631969][ T5955] tipc: Failed to remove unknown binding: 66,1,1/0:3906904937/3906904939 [ 86.823635][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.41'. [ 86.844764][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.42'. [ 86.960018][ T175] cfg80211: failed to load regulatory.db [ 87.397415][ T175] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.857219][ T175] usb 2-1: Using ep0 maxpacket: 32 [ 87.916871][ T175] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02 [ 87.936918][ T175] usb 2-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25 [ 87.952969][ T175] usb 2-1: Product: syz [ 87.966299][ T175] usb 2-1: Manufacturer: syz [ 87.984284][ T175] usb 2-1: SerialNumber: syz [ 88.018678][ T175] usb 2-1: config 0 descriptor?? [ 88.053804][ T175] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 88.088771][ T175] ftdi_sio ttyUSB0: unknown device type: 0x302 [ 88.611164][ T23] usb 2-1: USB disconnect, device number 2 [ 88.639345][ T23] ftdi_sio 2-1:0.0: device disconnected [ 88.699143][ T6025] netlink: 'syz.3.46': attribute type 1 has an invalid length. [ 88.872241][ T6028] loop2: detected capacity change from 0 to 128 [ 88.931666][ T6025] netlink: 14 bytes leftover after parsing attributes in process `syz.3.46'. [ 88.962790][ T6028] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.986554][ T6028] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.256757][ T6028] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 89.305987][ T6032] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 89.332701][ T28] audit: type=1326 audit(1782427182.453:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.3.48" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50a6b9ce59 code=0x0 [ 89.408692][ T5774] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.484159][ T28] audit: type=1326 audit(1782427182.603:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.3.48" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 89.576929][ T28] audit: type=1326 audit(1782427182.643:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.3.48" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 89.605963][ T28] audit: type=1326 audit(1782427182.643:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.3.48" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 89.630169][ T28] audit: type=1326 audit(1782427182.643:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.3.48" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 89.654737][ T28] audit: type=1326 audit(1782427182.693:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.3.48" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f50a6b5d68e code=0x7ffc0000 [ 89.718082][ T28] audit: type=1326 audit(1782427182.693:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.3.48" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f50a6b5d68e code=0x7ffc0000 [ 89.869154][ T28] audit: type=1326 audit(1782427182.693:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.3.48" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f50a6b5d68e code=0x7ffc0000 [ 89.894080][ T28] audit: type=1326 audit(1782427182.723:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.3.48" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f50a6b5d68e code=0x7ffc0000 [ 89.937360][ T28] audit: type=1326 audit(1782427182.723:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.3.48" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f50a6b5d68e code=0x7ffc0000 [ 90.150922][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.159531][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.319176][ T6056] loop3: detected capacity change from 0 to 1024 [ 90.935974][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.023961][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.580685][ T6040] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.589877][ T6040] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.599649][ T6040] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.610974][ T6040] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.846794][ T6060] netlink: 'syz.2.54': attribute type 1 has an invalid length. [ 91.978455][ T6063] netlink: 'syz.2.54': attribute type 10 has an invalid length. [ 92.008634][ T6063] netlink: 40 bytes leftover after parsing attributes in process `syz.2.54'. [ 92.018892][ T6063] dummy0: entered promiscuous mode [ 92.211714][ T6066] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.628023][ T6066] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.860897][ T6066] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.982010][ T6066] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.103352][ T6066] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.144929][ T6066] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.166537][ T6066] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.186837][ T6066] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.686317][ T6101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.67'. [ 93.696794][ T6101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.776335][ T6103] tipc: Enabled bearer , priority 0 [ 93.858100][ T6103] syzkaller0: entered promiscuous mode [ 93.863774][ T6103] syzkaller0: entered allmulticast mode [ 93.875087][ T6103] tipc: Resetting bearer [ 94.165531][ T6111] input: syz1 as /devices/virtual/input/input5 [ 94.378818][ T6102] tipc: Resetting bearer [ 94.801640][ T28] kauditd_printk_skb: 128 callbacks suppressed [ 94.801654][ T28] audit: type=1326 audit(1782427187.923:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.1.73" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b5f9ce59 code=0x7ffc0000 [ 94.832399][ T28] audit: type=1326 audit(1782427187.933:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.1.73" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b5f9ce59 code=0x7ffc0000 [ 94.856544][ T28] audit: type=1326 audit(1782427187.933:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.1.73" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f56b5f9ce59 code=0x7ffc0000 [ 94.880597][ T28] audit: type=1326 audit(1782427187.933:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.1.73" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b5f9ce59 code=0x7ffc0000 [ 94.911091][ T28] audit: type=1326 audit(1782427187.933:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.1.73" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b5f9ce59 code=0x7ffc0000 [ 94.939425][ T28] audit: type=1326 audit(1782427187.933:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.1.73" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f56b5f9ce59 code=0x7ffc0000 [ 94.963246][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.970115][ T28] audit: type=1326 audit(1782427187.933:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.1.73" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b5f9ce59 code=0x7ffc0000 [ 94.993934][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.000909][ T28] audit: type=1326 audit(1782427187.933:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.1.73" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f56b5f9ce59 code=0x7ffc0000 [ 95.024622][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.030978][ T28] audit: type=1326 audit(1782427187.933:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.1.73" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b5f9ce59 code=0x7ffc0000 [ 95.054939][ T28] audit: type=1326 audit(1782427187.933:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.1.73" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b5f9ce59 code=0x7ffc0000 [ 95.078730][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.133886][ T6102] tipc: Disabling bearer [ 96.252312][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'. [ 96.371823][ T6131] binder: BINDER_SET_CONTEXT_MGR already set [ 96.382630][ T6131] binder: 6130:6131 ioctl 4018620d 200000000040 returned -16 [ 96.657187][ T6142] netlink: 'syz.3.82': attribute type 1 has an invalid length. [ 96.699647][ T6142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.769711][ T6144] bond1: (slave veth3): Enslaving as an active interface with a down link [ 96.822117][ T6148] ======================================================= [ 96.822117][ T6148] WARNING: The mand mount option has been deprecated and [ 96.822117][ T6148] and is ignored by this kernel. Remove the mand [ 96.822117][ T6148] option from the mount to silence this warning. [ 96.822117][ T6148] ======================================================= [ 96.857000][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.888356][ T6148] overlayfs: upper fs does not support file handles, falling back to index=off. [ 96.901192][ T6142] veth0_virt_wifi: entered promiscuous mode [ 96.935431][ T6142] bond1: (slave veth0_virt_wifi): making interface the new active one [ 96.959931][ T6142] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 96.996618][ T6144] bond1: (slave veth0_virt_wifi): Releasing active interface [ 97.013941][ T6144] veth0_virt_wifi: left promiscuous mode [ 97.131000][ T6152] netlink: 24 bytes leftover after parsing attributes in process `syz.0.86'. [ 97.158581][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.86'. [ 98.220787][ T6187] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.160472][ T6209] ref_ctr increment failed for inode: 0x9e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802d5a2600 [ 99.527901][ T5789] Bluetooth: hci1: command tx timeout [ 99.569716][ T6220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.112'. [ 99.656798][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'. [ 100.656406][ T6253] Bluetooth: MGMT ver 1.22 [ 100.857722][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 100.857736][ T28] audit: type=1326 audit(1782427193.983:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6258 comm="syz.2.126" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a40d9ce59 code=0x7fc00000 [ 100.949646][ T28] audit: type=1326 audit(1782427194.013:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6258 comm="syz.2.126" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4a40d9ce59 code=0x7fc00000 [ 101.301086][ T6269] ref_ctr increment failed for inode: 0x96 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888073312f80 [ 101.448379][ T5855] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.647167][ T5855] usb 4-1: Using ep0 maxpacket: 32 [ 101.659700][ T5855] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 101.692211][ T5855] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 101.728965][ T5855] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 101.760278][ T5855] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 101.787730][ T5855] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.799137][ T5855] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 101.808436][ T5855] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 101.816896][ T5855] usb 4-1: Product: syz [ 101.821853][ T5855] usb 4-1: Manufacturer: syz [ 101.826485][ T5855] usb 4-1: SerialNumber: syz [ 101.869004][ T5855] usb 4-1: config 0 descriptor?? [ 101.890221][ T5855] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 101.940819][ T5855] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 102.250724][ T5815] usb 4-1: USB disconnect, device number 2 [ 102.250908][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 102.290337][ T6267] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 102.308452][ T6295] ldusb: No device or device unplugged -19 [ 102.317273][ T5815] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 102.644955][ T6302] loop1: detected capacity change from 0 to 4096 [ 102.648730][ T6308] sctp: [Deprecated]: syz.3.142 (pid 6308) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.648730][ T6308] Use struct sctp_sack_info instead [ 102.689784][ T6302] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 102.752882][ T6302] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 102.811760][ T6302] ntfs3: loop1: Inode r=b is not in use! [ 102.825840][ T6302] ntfs3: loop1: Failed to load $Extend (-116). [ 102.838207][ T6302] ntfs3: loop1: Failed to initialize $Extend. [ 103.207609][ T2134] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.264463][ T6319] syzkaller0: entered promiscuous mode [ 103.284735][ T6319] syzkaller0: entered allmulticast mode [ 103.404167][ T2134] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.437202][ T2134] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.471586][ T2134] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 103.501392][ T2134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.548347][ T2134] usb 1-1: config 0 descriptor?? [ 104.223514][ T2134] usb 1-1: USB disconnect, device number 2 [ 104.544550][ T6332] loop1: detected capacity change from 0 to 1024 [ 104.554032][ T6332] EXT4-fs: Ignoring removed bh option [ 104.580062][ T6332] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.618967][ T6332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.711224][ T6332] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 104.907845][ T6332] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.150: Invalid inode table block 0 in block_group 0 [ 104.950498][ T6332] EXT4-fs (loop1): Remounting filesystem read-only [ 105.062407][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.408109][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.153'. [ 105.448447][ T6345] loop3: detected capacity change from 0 to 512 [ 105.510633][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'. [ 105.524168][ T6345] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 105.555020][ T6347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.155'. [ 105.593846][ T6347] bridge1: port 1(vlan2) entered blocking state [ 105.601364][ T6347] bridge1: port 1(vlan2) entered disabled state [ 105.608610][ T6347] vlan2: entered allmulticast mode [ 105.610294][ T6345] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #13: comm syz.3.154: iget: bad i_size value: 12154757448730 [ 105.613962][ T6347] bridge1: entered allmulticast mode [ 105.649138][ T6347] vlan2: left allmulticast mode [ 105.671189][ T6347] bridge1: left allmulticast mode [ 105.711684][ T6345] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.154: couldn't read orphan inode 13 (err -117) [ 105.749787][ T6345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.950682][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.973383][ T6358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.159'. [ 106.077413][ T5815] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.175911][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'. [ 106.272497][ T5815] usb 2-1: config 0 has no interfaces? [ 106.284029][ T5815] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.305881][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.334515][ T5815] usb 2-1: config 0 descriptor?? [ 106.577883][ T5815] usb 2-1: USB disconnect, device number 3 [ 106.592911][ T28] audit: type=1326 audit(1782427199.713:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.0.163" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x0 [ 108.622561][ T6405] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 110.138788][ T6428] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 110.332465][ T6428] bond1: entered allmulticast mode [ 110.402703][ T6430] ip6gretap1: entered promiscuous mode [ 110.450329][ T6430] ip6gretap1: entered allmulticast mode [ 110.456331][ T6430] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 110.767017][ C0] hrtimer: interrupt took 67574 ns [ 111.187196][ T6067] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.334425][ T6456] Illegal XDP return value 4292419584 on prog (id 28) dev syz_tun, expect packet loss! [ 111.427125][ T6067] usb 1-1: Using ep0 maxpacket: 32 [ 111.448266][ T6067] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 111.459212][ T6067] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 111.472932][ T6067] usb 1-1: config 2 has no interface number 0 [ 111.485468][ T6067] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 111.498428][ T6067] usb 1-1: config 2 interface 88 altsetting 25 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.528945][ T6067] usb 1-1: config 2 interface 88 has no altsetting 0 [ 111.554397][ T6067] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 111.566435][ T6067] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 111.622988][ T6067] usb 1-1: Product: syz [ 111.630463][ T6067] usb 1-1: Manufacturer: syz [ 111.636185][ T6067] usb 1-1: SerialNumber: syz [ 111.657449][ T6445] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 111.672933][ T28] audit: type=1326 audit(1782427204.793:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.2.195" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a40d9ce59 code=0x7ffc0000 [ 111.703310][ T6067] asix: probe of 1-1:2.88 failed with error -22 [ 111.716203][ T6464] loop2: detected capacity change from 0 to 1024 [ 111.722842][ T28] audit: type=1326 audit(1782427204.793:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.2.195" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a40d9ce59 code=0x7ffc0000 [ 111.722937][ T28] audit: type=1326 audit(1782427204.793:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.2.195" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a40d9ce59 code=0x7ffc0000 [ 111.789523][ T28] audit: type=1326 audit(1782427204.793:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.2.195" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a40d9ce59 code=0x7ffc0000 [ 111.827954][ T6464] EXT4-fs: Mount option(s) incompatible with ext3 [ 111.835180][ T28] audit: type=1326 audit(1782427204.803:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.2.195" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a40d9ce59 code=0x7ffc0000 [ 111.835228][ T28] audit: type=1326 audit(1782427204.803:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.2.195" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a40d9ce59 code=0x7ffc0000 [ 111.835265][ T28] audit: type=1326 audit(1782427204.803:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.2.195" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a40d9ce59 code=0x7ffc0000 [ 111.835304][ T28] audit: type=1326 audit(1782427204.803:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.2.195" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4a40d9ce59 code=0x7ffc0000 [ 111.835340][ T28] audit: type=1326 audit(1782427204.803:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.2.195" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4a40d9cbc2 code=0x7ffc0000 [ 111.835376][ T28] audit: type=1326 audit(1782427204.823:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6463 comm="syz.2.195" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4a40d5d68e code=0x7ffc0000 [ 112.119674][ T5815] usb 1-1: USB disconnect, device number 3 [ 112.235249][ T6464] loop2: detected capacity change from 0 to 1024 [ 112.646882][ T6472] loop2: detected capacity change from 0 to 164 [ 112.692903][ T6472] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 112.716259][ T6472] isofs_fill_super: root inode is not a directory. Corrupted media? [ 113.249612][ T6485] loop0: detected capacity change from 0 to 64 [ 113.998931][ T6501] capability: warning: `syz.1.210' uses 32-bit capabilities (legacy support in use) [ 114.615438][ T6497] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.047007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 115.310637][ T6497] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.377322][ T6515] sctp: [Deprecated]: syz.1.216 (pid 6515) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.377322][ T6515] Use struct sctp_sack_info instead [ 115.410408][ T6514] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 115.538279][ T6497] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.691495][ T6497] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.879842][ T6524] loop1: detected capacity change from 0 to 2048 [ 116.862089][ T6524] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 116.887581][ T6524] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 116.938435][ T6524] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.292733][ T6521] loop3: detected capacity change from 0 to 256 [ 117.360964][ T6521] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 117.385816][ T6497] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.502608][ T6497] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.565896][ T6497] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.630753][ T6497] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.276436][ T6539] netlink: 'syz.1.226': attribute type 1 has an invalid length. [ 118.638474][ T6539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.746226][ T6540] bond1: (slave veth3): Enslaving as an active interface with a down link [ 118.819933][ T6544] bond1: (slave dummy0): making interface the new active one [ 118.835088][ T6544] dummy0: entered promiscuous mode [ 118.844752][ T6544] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 118.863285][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.227'. [ 120.207486][ T6592] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.218405][ T6583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.278936][ T6594] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.307216][ T6594] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.316707][ T6594] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.325953][ T6594] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.351832][ T6594] bond2: (slave geneve1): Enslaving as a backup interface with an up link [ 120.408610][ T1311] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 120.570582][ T6000] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 120.605258][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 120.605272][ T28] audit: type=1326 audit(1782427213.723:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.0.248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 120.716751][ T28] audit: type=1326 audit(1782427213.733:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.0.248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 120.807066][ T28] audit: type=1326 audit(1782427213.783:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.0.248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 120.892708][ T28] audit: type=1326 audit(1782427213.783:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.0.248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 121.017441][ T28] audit: type=1326 audit(1782427213.783:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.0.248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 121.118760][ T28] audit: type=1326 audit(1782427213.783:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.0.248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 121.223652][ T28] audit: type=1326 audit(1782427213.783:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.0.248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 121.272178][ T28] audit: type=1326 audit(1782427213.783:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.0.248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 121.316463][ T6616] bond2: entered allmulticast mode [ 121.363495][ T6620] macvlan2: entered promiscuous mode [ 121.371991][ T28] audit: type=1326 audit(1782427213.793:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.0.248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 121.420621][ T28] audit: type=1326 audit(1782427213.793:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.0.248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 121.449804][ T6620] macvlan2: entered allmulticast mode [ 121.460796][ T6620] bond2: entered promiscuous mode [ 121.476650][ T6620] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 121.492480][ T6620] bond2: left promiscuous mode [ 122.444564][ T6638] ceph: No mds server is up or the cluster is laggy [ 122.470485][ T2134] libceph: connect (1)[c::]:6789 error -101 [ 122.869334][ T2134] libceph: mon0 (1)[c::]:6789 connect error [ 123.297502][ T5845] libceph: connect (1)[c::]:6789 error -101 [ 123.303659][ T5845] libceph: mon0 (1)[c::]:6789 connect error [ 123.576326][ T5845] libceph: connect (1)[c::]:6789 error -101 [ 123.591410][ T5845] libceph: mon0 (1)[c::]:6789 connect error [ 123.654108][ T6651] ceph: No mds server is up or the cluster is laggy [ 124.043478][ T6665] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.141559][ T6668] bond3: (slave ip6gretap1): making interface the new active one [ 124.213879][ T6668] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 124.595369][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 125.635065][ T6696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.278'. [ 125.688425][ T6696] ip6gre1: entered promiscuous mode [ 125.715885][ T6696] ip6gre1: entered allmulticast mode [ 125.827419][ T6696] netlink: 'syz.1.278': attribute type 6 has an invalid length. [ 125.852361][ T6696] netlink: 72 bytes leftover after parsing attributes in process `syz.1.278'. [ 126.447297][ T6702] netlink: 168 bytes leftover after parsing attributes in process `syz.1.281'. [ 126.756872][ T6711] io-wq is not configured for unbound workers [ 127.174778][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'. [ 127.220766][ T6724] bond0: option arp_all_targets: invalid value (8) [ 128.169372][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 128.169423][ T28] audit: type=1326 audit(1782427221.283:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.2.285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a40d9ce59 code=0x0 [ 129.174436][ T6764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.300'. [ 129.949820][ T6778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.306'. [ 130.138850][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.306'. [ 130.948055][ T5999] dummy0: left promiscuous mode [ 131.233785][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 131.293701][ T6803] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.303326][ T6803] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.312316][ T6803] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.321105][ T6803] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.400631][ T28] audit: type=1326 audit(1782427224.513:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6804 comm="syz.2.316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a40d9ce59 code=0x7ffc0000 [ 131.438630][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 131.495851][ T28] audit: type=1326 audit(1782427224.513:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6804 comm="syz.2.316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a40d9ce59 code=0x7ffc0000 [ 131.541751][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 131.561897][ T28] audit: type=1326 audit(1782427224.513:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6804 comm="syz.2.316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a40d9ce59 code=0x7ffc0000 [ 131.599340][ T6805] Zero length message leads to an empty skb [ 131.645675][ T28] audit: type=1326 audit(1782427224.523:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6804 comm="syz.2.316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4a40d9ce59 code=0x7ffc0000 [ 131.802676][ T28] audit: type=1326 audit(1782427224.523:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6804 comm="syz.2.316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a40d9ce59 code=0x7ffc0000 [ 131.946543][ T28] audit: type=1326 audit(1782427224.583:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6804 comm="syz.2.316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a40d9ce59 code=0x7ffc0000 [ 131.977616][ T28] audit: type=1326 audit(1782427224.583:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6804 comm="syz.2.316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4a40d5d68e code=0x7ffc0000 [ 132.005873][ T28] audit: type=1326 audit(1782427224.583:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6804 comm="syz.2.316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4a40d5d68e code=0x7ffc0000 [ 132.037791][ T28] audit: type=1326 audit(1782427224.583:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6804 comm="syz.2.316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4a40d5d68e code=0x7ffc0000 [ 132.349868][ T6825] loop3: detected capacity change from 0 to 2048 [ 135.151058][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.168890][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.187199][ T6825] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 135.209547][ T6825] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 135.233381][ T6825] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.585653][ T6840] team0: Port device team_slave_0 removed [ 137.605449][ T5838] IPVS: starting estimator thread 0... [ 137.717182][ T6868] IPVS: using max 18 ests per chain, 43200 per kthread [ 137.859583][ T6873] loop1: detected capacity change from 0 to 128 [ 137.922868][ T6873] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.942844][ T6873] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.119728][ T6873] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 138.204126][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.438936][ T6852] loop2: detected capacity change from 0 to 32768 [ 138.447662][ T6852] xfs: Unknown parameter 'smackfstransmute' [ 138.491295][ T5769] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 139.264709][ T6852] trusted_key: syz.2.334 sent an empty control message without MSG_MORE. [ 141.282919][ T6911] netlink: 24 bytes leftover after parsing attributes in process `syz.3.353'. [ 143.352731][ T6931] warning: `syz.2.358' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 143.692084][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 145.650290][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 146.546277][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 146.743898][ T6974] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 146.898964][ T6974] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 147.493436][ T6990] netlink: 'syz.2.380': attribute type 10 has an invalid length. [ 147.541303][ T6990] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 148.036283][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'. [ 149.444173][ T7030] tipc: Failed to remove unknown binding: 66,0,0/0:3092646651/3092646653 [ 149.454413][ T7030] tipc: Failed to remove unknown binding: 66,0,0/0:3092646651/3092646652 [ 149.468585][ T7030] tipc: Failed to remove unknown binding: 66,0,0/0:3092646651/3092646653 [ 149.479587][ T7030] tipc: Failed to remove unknown binding: 66,0,0/0:3092646651/3092646652 [ 149.588386][ T7032] capability: warning: `syz.0.395' uses deprecated v2 capabilities in a way that may be insecure [ 150.863882][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'. [ 150.967237][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 150.967271][ T28] audit: type=1326 audit(1782427244.053:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 151.077684][ T28] audit: type=1326 audit(1782427244.053:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 151.131109][ T28] audit: type=1326 audit(1782427244.053:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 151.197892][ T28] audit: type=1326 audit(1782427244.053:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 151.236069][ T28] audit: type=1326 audit(1782427244.053:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 151.276054][ T28] audit: type=1326 audit(1782427244.093:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 151.327178][ T28] audit: type=1326 audit(1782427244.093:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 151.367111][ T28] audit: type=1326 audit(1782427244.183:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff247d5d68e code=0x7ffc0000 [ 151.415382][ T28] audit: type=1326 audit(1782427244.183:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff247d5d68e code=0x7ffc0000 [ 151.479288][ T28] audit: type=1326 audit(1782427244.183:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff247d5d68e code=0x7ffc0000 [ 152.322438][ T7072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.408'. [ 153.287768][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'. [ 154.156973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 154.276969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 154.980109][ T7091] Invalid ELF header magic: != ELF [ 155.212395][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'. [ 158.852749][ T7138] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 159.143129][ T7144] syz_tun: entered allmulticast mode [ 159.251853][ T7144] bond0: entered promiscuous mode [ 159.267857][ T7144] bond_slave_0: entered promiscuous mode [ 159.279905][ T7144] bond_slave_1: entered promiscuous mode [ 159.754860][ T7157] loop1: detected capacity change from 0 to 1024 [ 161.158626][ T7173] loop2: detected capacity change from 0 to 512 [ 161.171559][ T7173] EXT4-fs: Ignoring removed orlov option [ 161.219312][ T7173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.461986][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.866972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 167.670562][ T7259] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 169.890581][ T7284] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 170.016963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 171.553864][ T28] kauditd_printk_skb: 138 callbacks suppressed [ 171.553899][ T28] audit: type=1804 audit(1782427264.673:521): pid=7296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.482" name="bus" dev="ramfs" ino=12490 res=1 errno=0 [ 171.585484][ T28] audit: type=1804 audit(1782427264.683:522): pid=7296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.482" name="bus" dev="ramfs" ino=12490 res=1 errno=0 [ 177.276966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 177.456966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 177.516964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 183.043094][ T7421] loop1: detected capacity change from 0 to 512 [ 183.127969][ T7421] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 183.169128][ T7421] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 183.231022][ T7421] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.521: bad orphan inode 131083 [ 183.284743][ T7421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.136961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #86!!! [ 184.426967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 186.488106][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.328456][ T7530] netlink: 'syz.2.559': attribute type 1 has an invalid length. [ 192.414835][ T7530] bond1: entered promiscuous mode [ 192.421511][ T7530] bond1: entered allmulticast mode [ 192.429263][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 192.515487][ T7534] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 192.578292][ T7534] bond1: (slave bridge5): making interface the new active one [ 192.597857][ T7534] bridge5: entered promiscuous mode [ 192.603310][ T7534] bridge5: entered allmulticast mode [ 192.622490][ T7534] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 192.721942][ T7530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.559'. [ 192.749636][ T7530] bond1: left promiscuous mode [ 192.760802][ T7530] bridge5: left promiscuous mode [ 192.766946][ T7530] bond1: left allmulticast mode [ 192.773253][ T7530] bridge5: left allmulticast mode [ 192.782370][ T7530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.818624][ T7526] loop3: detected capacity change from 0 to 40427 [ 192.844442][ T7526] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 192.879018][ T7526] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 192.948851][ T7526] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 192.988658][ T7526] F2FS-fs (loop3): Found nat_bits in checkpoint [ 193.002179][ T7545] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 193.023719][ T7545] binder: 7544:7545 ioctl 4018620d 200000000100 returned -1 [ 193.054070][ T7545] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 193.080625][ T7545] binder: 7544:7545 ioctl 4018620d 200000004a80 returned -1 [ 193.204890][ T7526] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 193.214391][ T7526] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 194.482896][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.576544][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.122704][ T7581] fuse: Bad value for 'fd' [ 196.376609][ T28] audit: type=1326 audit(1782427289.493:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.0.578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x0 [ 197.164029][ T7601] netlink: 24 bytes leftover after parsing attributes in process `syz.2.581'. [ 197.366773][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.582'. [ 197.517894][ T7604] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.610821][ T7606] macvlan2: entered promiscuous mode [ 197.627091][ T7606] bond3: entered promiscuous mode [ 197.647163][ T7606] macvlan2: entered allmulticast mode [ 197.660296][ T7606] bond3: entered allmulticast mode [ 197.681798][ T7606] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 197.729363][ T7606] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 197.772585][ T7606] bond3: left allmulticast mode [ 197.778852][ T7606] bond3: left promiscuous mode [ 198.200942][ T7624] netlink: 'syz.1.588': attribute type 1 has an invalid length. [ 198.486496][ T7624] bond2: entered promiscuous mode [ 198.492107][ T7624] bond2: entered allmulticast mode [ 198.504360][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'. [ 198.574132][ T7627] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 198.603275][ T7627] bond2: (slave bridge3): making interface the new active one [ 198.631582][ T7627] bridge3: entered promiscuous mode [ 198.644177][ T7627] bridge3: entered allmulticast mode [ 198.666169][ T7627] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 198.740821][ T7624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.588'. [ 198.794301][ T7624] bond2: left promiscuous mode [ 198.816038][ T7624] bridge3: left promiscuous mode [ 198.867265][ T7624] bond2: left allmulticast mode [ 198.907223][ T7624] bridge3: left allmulticast mode [ 198.913613][ T7624] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.071140][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 203.080804][ T5789] Bluetooth: hci2: command 0x0406 tx timeout [ 203.081409][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 203.087856][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 203.333426][ T7673] netlink: 'syz.3.603': attribute type 1 has an invalid length. [ 203.392662][ T7673] bond4: entered promiscuous mode [ 203.398698][ T7673] bond4: entered allmulticast mode [ 203.406761][ T7675] veth0_macvtap: left promiscuous mode [ 203.626569][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.603'. [ 203.701653][ T7676] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 203.724464][ T7676] bond4: (slave bridge1): making interface the new active one [ 203.736549][ T7676] bridge1: entered promiscuous mode [ 203.749059][ T7676] bridge1: entered allmulticast mode [ 203.756272][ T7676] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 203.768621][ T7673] netlink: 28 bytes leftover after parsing attributes in process `syz.3.603'. [ 203.784578][ T7673] bond4: left promiscuous mode [ 203.792621][ T28] audit: type=1800 audit(1782427296.913:524): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.605" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 203.800465][ T7673] bridge1: left promiscuous mode [ 203.873484][ T7673] bond4: left allmulticast mode [ 203.929451][ T7673] bridge1: left allmulticast mode [ 203.957580][ T7673] 8021q: adding VLAN 0 to HW filter on device bond4 [ 205.465390][ T7729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.617'. [ 205.785475][ T7733] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.816813][ T7733] bond2: (slave bond3): Enslaving as an active interface with an up link [ 205.871917][ T7739] bond2 (unregistering): (slave bond3): Releasing backup interface [ 205.961313][ T7739] bond2 (unregistering): Released all slaves [ 206.063352][ T7740] netlink: 'syz.3.621': attribute type 2 has an invalid length. [ 206.093023][ T5436] veth0_macvtap: entered promiscuous mode [ 206.794269][ T7760] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.626'. [ 207.102409][ T7769] fuse: Bad value for 'fd' [ 207.355680][ T7775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.629'. [ 208.131823][ T5783] Bluetooth: hci0: Malformed Event: 0x02 [ 210.472921][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'. [ 211.041258][ T7848] team1: entered promiscuous mode [ 211.056513][ T7848] team1: entered allmulticast mode [ 211.078742][ T7848] 8021q: adding VLAN 0 to HW filter on device team1 [ 211.096150][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'. [ 211.153814][ T7853] team2: entered promiscuous mode [ 211.163292][ T7853] team2: entered allmulticast mode [ 211.182432][ T7853] 8021q: adding VLAN 0 to HW filter on device team2 [ 211.235673][ T7857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.653'. [ 212.470953][ T7875] team_slave_0: entered promiscuous mode [ 212.477632][ T7875] team_slave_1: entered promiscuous mode [ 212.506318][ T7875] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 212.651000][ T7875] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 212.745440][ T7876] bridge0: port 3(vlan2) entered blocking state [ 212.823688][ T7876] bridge0: port 3(vlan2) entered disabled state [ 212.845253][ T7876] vlan2: entered allmulticast mode [ 212.865284][ T7876] bond0: entered allmulticast mode [ 212.890082][ T7876] bond_slave_0: entered allmulticast mode [ 212.930406][ T7876] bond_slave_1: entered allmulticast mode [ 212.960087][ T7876] macvlan2: entered allmulticast mode [ 212.982370][ T7876] team0: entered allmulticast mode [ 213.025020][ T7876] team_slave_0: entered allmulticast mode [ 213.057870][ T7876] team_slave_1: entered allmulticast mode [ 213.088705][ T7876] vlan2: entered promiscuous mode [ 213.108964][ T7876] bond0: entered promiscuous mode [ 213.120037][ T7880] xt_TCPMSS: Only works on TCP SYN packets [ 213.137122][ T7876] bond_slave_0: entered promiscuous mode [ 213.155285][ T7876] bond_slave_1: entered promiscuous mode [ 213.175890][ T7876] macvlan2: entered promiscuous mode [ 213.196072][ T7876] team0: entered promiscuous mode [ 214.122876][ T7898] netlink: 40 bytes leftover after parsing attributes in process `syz.3.671'. [ 214.169970][ T7898] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 214.417178][ T7904] netlink: 40 bytes leftover after parsing attributes in process `syz.3.671'. [ 214.436575][ T7904] bond5: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 220.923729][ T7972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.687'. [ 221.085561][ T7972] bridge2: port 1(dummy0) entered blocking state [ 221.092608][ T7972] bridge2: port 1(dummy0) entered disabled state [ 221.104096][ T7972] dummy0: entered allmulticast mode [ 221.171208][ T7972] dummy0: entered promiscuous mode [ 221.195822][ T7978] netlink: 'syz.0.687': attribute type 10 has an invalid length. [ 221.208334][ T7978] netlink: 40 bytes leftover after parsing attributes in process `syz.0.687'. [ 221.240224][ T7978] bridge2: port 1(dummy0) entered blocking state [ 221.246775][ T7978] bridge2: port 1(dummy0) entered forwarding state [ 221.266129][ T7978] dummy0: left allmulticast mode [ 221.275702][ T7978] bridge2: port 1(dummy0) entered disabled state [ 221.299943][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.688'. [ 221.332657][ T7975] veth0_macvtap: left promiscuous mode [ 221.578463][ T7981] netlink: 'syz.0.690': attribute type 1 has an invalid length. [ 221.758837][ T7981] 8021q: adding VLAN 0 to HW filter on device bond4 [ 221.859663][ T7983] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 221.918883][ T7983] bond4: (slave batadv1): making interface the new active one [ 221.956420][ T7983] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 222.444471][ T7984] bond4 (unregistering): (slave batadv1): Releasing active interface [ 222.475008][ T7984] bond4 (unregistering): Released all slaves [ 222.552492][ T7988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.692'. [ 223.792098][ T8025] syz.1.703 (8025): attempted to duplicate a private mapping with mremap. This is not supported. [ 223.908463][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.704'. [ 226.039342][ T5855] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 226.276883][ T5855] usb 3-1: config 0 has no interfaces? [ 226.283456][ T5855] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.326896][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.379300][ T5855] usb 3-1: config 0 descriptor?? [ 226.681913][ T5855] usb 3-1: USB disconnect, device number 2 [ 227.136144][ T8090] netlink: 'syz.1.722': attribute type 4 has an invalid length. [ 227.221810][ T8092] netlink: 'syz.1.722': attribute type 4 has an invalid length. [ 227.484522][ T8095] loop2: detected capacity change from 0 to 128 [ 227.763809][ T8098] netlink: 35 bytes leftover after parsing attributes in process `syz.1.724'. [ 231.344460][ T8152] vlan2: entered promiscuous mode [ 231.377248][ T8152] bridge0: entered promiscuous mode [ 231.384421][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 231.411052][ T8152] vlan2: entered allmulticast mode [ 231.416232][ T8152] bridge0: entered allmulticast mode [ 231.492599][ T8159] : renamed from bond0 [ 231.808868][ T8154] bridge_slave_0: left allmulticast mode [ 231.851191][ T8154] bridge_slave_0: left promiscuous mode [ 231.858590][ T8154] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.042603][ T8163] sched: RT throttling activated [ 233.428456][ T8154] bridge_slave_1: left allmulticast mode [ 233.434814][ T8154] bridge_slave_1: left promiscuous mode [ 233.445743][ T8154] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.549162][ T8154] bond0: (slave bond_slave_0): Releasing backup interface [ 233.584578][ T8154] bond0: (slave bond_slave_1): Releasing backup interface [ 234.129883][ T8154] team0: Port device team_slave_1 removed [ 234.176622][ T8154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.196699][ T8154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.225156][ T8154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.273685][ T8154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.340458][ T8154] bond0: (slave wlan1): Releasing backup interface [ 234.378986][ T8154] bond1: (slave bridge5): Releasing active interface [ 236.419223][ T8199] netlink: 'syz.3.759': attribute type 1 has an invalid length. [ 236.623685][ T8199] 8021q: adding VLAN 0 to HW filter on device bond6 [ 236.923075][ T8200] bond6: (slave veth0_to_bond): making interface the new active one [ 236.949324][ T8200] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 236.976761][ T8202] bond6: entered promiscuous mode [ 236.982660][ T8202] veth0_to_bond: entered promiscuous mode [ 236.989200][ T8202] bond6: entered allmulticast mode [ 236.994606][ T8202] veth0_to_bond: entered allmulticast mode [ 237.211244][ T23] IPVS: starting estimator thread 0... [ 237.307145][ T8221] IPVS: using max 22 ests per chain, 52800 per kthread [ 238.039292][ T8233] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 238.727368][ T28] audit: type=1326 audit(1782427331.843:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.0.774" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7fc00000 [ 239.326751][ T28] audit: type=1326 audit(1782427332.433:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.0.774" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff247d3e1d9 code=0x7fc00000 [ 239.524705][ T8258] team0 (unregistering): left allmulticast mode [ 239.537305][ T8258] team_slave_0: left allmulticast mode [ 239.542838][ T8258] team_slave_1: left allmulticast mode [ 239.564237][ T8258] team0 (unregistering): left promiscuous mode [ 239.572310][ T8258] team_slave_0: left promiscuous mode [ 239.584829][ T8258] team_slave_1: left promiscuous mode [ 239.627561][ T8258] bond0: (slave macvlan2): Releasing backup interface [ 239.636102][ T8258] macvlan2 (unregistering): left promiscuous mode [ 239.655513][ T8258] macvlan2 (unregistering): left allmulticast mode [ 239.740822][ T8258] team0 (unregistering): Failed to send options change via netlink (err -105) [ 239.763299][ T8258] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 239.816580][ T8258] team0 (unregistering): Port device team_slave_0 removed [ 239.928560][ T8258] team0 (unregistering): Failed to send options change via netlink (err -105) [ 239.959582][ T8258] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 240.338500][ T8258] team0 (unregistering): Port device team_slave_1 removed [ 241.742342][ T8295] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 241.766440][ T8295] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 242.853712][ T8306] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 242.895123][ T8306] binder: 8305:8306 ioctl 4018620d 200000000100 returned -1 [ 242.923612][ T8306] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 242.942653][ T8306] binder: 8305:8306 ioctl 4018620d 2000000002c0 returned -1 [ 243.212758][ T8316] netlink: 'syz.1.799': attribute type 4 has an invalid length. [ 243.244954][ T8316] netlink: 'syz.1.799': attribute type 4 has an invalid length. [ 243.450258][ T5783] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 243.461233][ T5783] Bluetooth: hci2: Injecting HCI hardware error event [ 243.471458][ T5778] Bluetooth: hci2: hardware error 0x00 [ 243.489353][ T8322] bridge0: port 2(bridge_slave_1) entered listening state [ 243.534626][ T8322] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.723163][ T8341] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 245.627130][ T5778] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 246.681622][ T8357] loop1: detected capacity change from 0 to 256 [ 248.542259][ T8357] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 248.800726][ T5855] IPVS: starting estimator thread 0... [ 248.899284][ T8363] IPVS: using max 17 ests per chain, 40800 per kthread [ 249.188209][ T8373] netlink: 'syz.0.820': attribute type 1 has an invalid length. [ 249.252078][ T8373] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.391810][ T8379] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 249.542980][ T8373] bond4: entered promiscuous mode [ 249.557105][ T8373] bond4: entered allmulticast mode [ 249.843343][ T8378] loop1: detected capacity change from 0 to 32768 [ 250.062763][ T8378] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 250.826786][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 250.932074][ T8404] loop2: detected capacity change from 0 to 256 [ 251.056077][ T8404] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 254.047128][ T5855] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 254.252858][ T8425] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼ [ 254.319640][ T5855] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 254.378531][ T5855] usb 3-1: config 0 has no interfaces? [ 254.407467][ T5855] usb 3-1: config 0 has no interfaces? [ 254.429179][ T5855] usb 3-1: config 0 has no interfaces? [ 254.457132][ T5855] usb 3-1: config 0 has no interfaces? [ 254.465100][ T5855] usb 3-1: config 0 has no interfaces? [ 254.483119][ T5855] usb 3-1: config 0 has no interfaces? [ 254.492755][ T5855] usb 3-1: config 0 has no interfaces? [ 254.509378][ T5855] usb 3-1: config 0 has no interfaces? [ 254.515913][ T5855] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 254.529619][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.568285][ T5855] usb 3-1: config 0 descriptor?? [ 254.905185][ T8444] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 254.905185][ T8444] The task syz.1.837 (8444) triggered the difference, watch for misbehavior. [ 255.486258][ T2134] usb 3-1: USB disconnect, device number 3 [ 255.928159][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.934636][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.432186][ T8454] syz.1.845 (8454) used greatest stack depth: 19728 bytes left [ 258.454911][ T8460] dummy0: left promiscuous mode [ 260.214081][ T8460] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.223340][ T8460] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.236367][ T8460] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.245117][ T8460] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.348490][ T8460] vlan2: left promiscuous mode [ 260.358573][ T8460] bridge0: left promiscuous mode [ 260.363818][ T8460] vlan2: left allmulticast mode [ 260.369009][ T8460] bridge0: left allmulticast mode [ 260.386815][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.852'. [ 260.941458][ T8516] loop2: detected capacity change from 0 to 256 [ 262.800316][ T8516] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 263.596095][ T5845] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 263.789652][ T5845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.840096][ T5845] usb 2-1: New USB device found, idVendor=0a5c, idProduct=0bdc, bcdDevice=f0.66 [ 263.863999][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.896981][ T5845] usb 2-1: Product: syz [ 263.901226][ T5845] usb 2-1: Manufacturer: syz [ 263.905850][ T5845] usb 2-1: SerialNumber: syz [ 263.978359][ T5845] usb 2-1: config 0 descriptor?? [ 264.417415][ T8524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.426808][ T8524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.484323][ T8524] : renamed from veth0_to_bond (while UP) [ 264.525219][ T5845] usb 2-1: USB disconnect, device number 4 [ 265.223551][ T8545] lo speed is unknown, defaulting to 1000 [ 265.248376][ T8545] lo speed is unknown, defaulting to 1000 [ 265.254885][ T8545] lo speed is unknown, defaulting to 1000 [ 265.382770][ T8545] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 265.618986][ T8545] lo speed is unknown, defaulting to 1000 [ 265.678221][ T8545] lo speed is unknown, defaulting to 1000 [ 265.712325][ T8545] lo speed is unknown, defaulting to 1000 [ 265.752972][ T8545] lo speed is unknown, defaulting to 1000 [ 267.047393][ T8480] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 267.257160][ T8480] usb 2-1: Using ep0 maxpacket: 16 [ 267.268942][ T8480] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.301929][ T8480] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 267.353996][ T8480] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 267.407086][ T8480] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 267.447103][ T8480] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.481967][ T8480] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 267.501824][ T8480] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 267.519166][ T8480] usb 2-1: Manufacturer: syz [ 267.551803][ T8480] usb 2-1: config 0 descriptor?? [ 267.602407][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.879'. [ 268.225778][ T8480] rc_core: IR keymap rc-hauppauge not found [ 268.231827][ T8480] Registered IR keymap rc-empty [ 268.238980][ T8480] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 268.302272][ T8480] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 268.365007][ T8595] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 268.372161][ T8595] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 268.383650][ T8480] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 268.436334][ T8480] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 268.513725][ T8480] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 268.577848][ T8480] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 268.617086][ T8480] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 268.666516][ T8480] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 268.709480][ T8480] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 268.929123][ T8480] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 268.967142][ T8480] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 269.007304][ T8480] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 269.037458][ T8480] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 269.073902][ T8480] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 269.144367][ T8480] mceusb 2-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 269.218562][ T8480] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 269.372656][ T8480] usb 2-1: USB disconnect, device number 5 [ 270.164613][ T8619] bond1: (slave dummy0): Releasing active interface [ 270.200295][ T8619] bridge_slave_0: left allmulticast mode [ 270.206648][ T8619] bridge_slave_0: left promiscuous mode [ 270.215442][ T8619] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.242447][ T8619] bridge_slave_1: left promiscuous mode [ 270.255421][ T8619] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.302670][ T8619] : (slave bond_slave_0): Releasing backup interface [ 270.368568][ T8619] bond_slave_0: left promiscuous mode [ 270.486236][ T8619] : (slave bond_slave_1): Releasing backup interface [ 270.515590][ T8619] bond_slave_1: left promiscuous mode [ 270.592233][ T8619] team0: Port device team_slave_0 removed [ 270.632981][ T8619] team0: Port device team_slave_1 removed [ 270.660066][ T8619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.667957][ T8619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.680989][ T8619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.690274][ T8619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.716640][ T8619] bond1: (slave veth3): Releasing active interface [ 270.743674][ T8619] bond2: (slave bridge3): Releasing active interface [ 270.985267][ T8629] netlink: 'syz.0.894': attribute type 1 has an invalid length. [ 271.310164][ T8633] bond5: (slave veth3): Enslaving as an active interface with a down link [ 271.379768][ T8634] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 273.003997][ T8642] loop1: detected capacity change from 0 to 32768 [ 273.128779][ T8642] JBD2: Ignoring recovery information on journal [ 273.399597][ T8642] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 274.074056][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 274.496046][ T8685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.904'. [ 274.593680][ T8685] loop1: detected capacity change from 0 to 512 [ 274.610430][ T8685] EXT4-fs: Ignoring removed oldalloc option [ 274.674912][ T8685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.725244][ T8685] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 274.855276][ T8685] netlink: 16 bytes leftover after parsing attributes in process `syz.1.904'. [ 274.933328][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.271473][ T8717] lo speed is unknown, defaulting to 1000 [ 277.494177][ T8729] bridge_slave_0: left allmulticast mode [ 277.502716][ T8729] bridge_slave_0: left promiscuous mode [ 277.511286][ T8729] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.525123][ T8729] bridge_slave_1: left allmulticast mode [ 277.537718][ T8729] bridge_slave_1: left promiscuous mode [ 277.558417][ T8729] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.582407][ T8729] bond6: (slave veth0_to_bond): Releasing active interface [ 277.589897][ T8729] veth0_to_bond: left promiscuous mode [ 277.595704][ T8729] veth0_to_bond: left allmulticast mode [ 277.613619][ T8729] bond0: (slave bond_slave_0): Releasing backup interface [ 277.624700][ T8729] bond_slave_0: left promiscuous mode [ 277.633033][ T8729] bond_slave_0: left allmulticast mode [ 277.653768][ T8729] bond0: (slave bond_slave_1): Releasing backup interface [ 277.684482][ T8729] bond_slave_1: left promiscuous mode [ 277.693592][ T8729] bond_slave_1: left allmulticast mode [ 277.718471][ T8729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.730062][ T8729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.752911][ T8729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.771156][ T8729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.819166][ T8729] bond1: (slave veth3): Releasing active interface [ 277.842710][ T8729] bond3: (slave ip6gretap1): Releasing active interface [ 277.866429][ T8729] bond4: (slave bridge1): Releasing active interface [ 277.881206][ T8729] vlan2: left allmulticast mode [ 277.886124][ T8729] bond0: left allmulticast mode [ 277.893204][ T8729] vlan2: left promiscuous mode [ 277.899260][ T8729] bond0: left promiscuous mode [ 277.905540][ T8729] bridge0: port 3(vlan2) entered disabled state [ 279.195786][ T8759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.929'. [ 279.539970][ T8756] netlink: 36 bytes leftover after parsing attributes in process `syz.0.928'. [ 280.112432][ T28] audit: type=1326 audit(1782427373.233:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8781 comm="syz.3.937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 280.205276][ T28] audit: type=1326 audit(1782427373.233:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8781 comm="syz.3.937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 280.293290][ T28] audit: type=1326 audit(1782427373.233:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8781 comm="syz.3.937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 280.343980][ T28] audit: type=1326 audit(1782427373.233:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8781 comm="syz.3.937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 280.373440][ T28] audit: type=1326 audit(1782427373.263:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8781 comm="syz.3.937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 280.401559][ T28] audit: type=1326 audit(1782427373.283:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8781 comm="syz.3.937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 280.462264][ T28] audit: type=1326 audit(1782427373.353:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8781 comm="syz.3.937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f50a6b5d68e code=0x7ffc0000 [ 280.676169][ T28] audit: type=1326 audit(1782427373.353:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8781 comm="syz.3.937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f50a6b5d68e code=0x7ffc0000 [ 280.893766][ T28] audit: type=1326 audit(1782427373.363:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8781 comm="syz.3.937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f50a6b5d68e code=0x7ffc0000 [ 280.997172][ T28] audit: type=1326 audit(1782427373.363:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8781 comm="syz.3.937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f50a6b5d68e code=0x7ffc0000 [ 281.029180][ T8791] Device name cannot be null; rc = [-22] [ 281.035660][ T8792] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 283.024779][ T8824] netlink: 'syz.2.953': attribute type 1 has an invalid length. [ 283.343792][ T8830] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 283.539940][ T8824] 8021q: adding VLAN 0 to HW filter on device bond2 [ 283.955187][ T8828] bond2: (slave veth7): Enslaving as an active interface with a down link [ 284.004360][ T8831] bond2: (slave dummy0): making interface the new active one [ 284.046554][ T8831] dummy0: entered promiscuous mode [ 284.066816][ T8831] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 284.093670][ T8832] netlink: 'syz.2.953': attribute type 10 has an invalid length. [ 284.113157][ T8832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.953'. [ 284.148270][ T8832] bond2: (slave dummy0): Releasing active interface [ 285.895107][ T8856] netlink: 'syz.3.963': attribute type 7 has an invalid length. [ 285.939986][ T8856] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.948697][ T8856] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.957117][ T8856] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.965325][ T8856] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.999122][ T8856] netlink: 'syz.3.963': attribute type 7 has an invalid length. [ 286.068170][ T8856] netlink: 'syz.3.963': attribute type 7 has an invalid length. [ 287.361384][ T8890] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 287.722819][ T8895] xt_policy: output policy not valid in PREROUTING and INPUT [ 290.058398][ T8903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.979'. [ 290.128957][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.981'. [ 290.509390][ T8921] netlink: 'syz.2.985': attribute type 10 has an invalid length. [ 290.639790][ T8921] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 290.693545][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.987'. [ 292.082651][ T8933] xt_cgroup: invalid path, errno=-2 [ 294.641027][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 294.641041][ T28] audit: type=1326 audit(1782427387.763:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.0.999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 294.682930][ T8966] syz.0.999 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 294.754461][ T28] audit: type=1326 audit(1782427387.793:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.0.999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 294.819816][ T28] audit: type=1326 audit(1782427387.793:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.0.999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 294.885179][ T28] audit: type=1326 audit(1782427387.793:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.0.999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 294.954424][ T28] audit: type=1326 audit(1782427387.803:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.0.999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 295.027003][ T28] audit: type=1326 audit(1782427387.803:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.0.999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 295.087088][ T28] audit: type=1326 audit(1782427387.803:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.0.999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 295.155856][ T28] audit: type=1326 audit(1782427387.803:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.0.999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 295.221678][ T28] audit: type=1326 audit(1782427387.803:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.0.999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 295.284375][ T28] audit: type=1326 audit(1782427387.833:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.0.999" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 296.864789][ T8979] all: renamed from lo [ 297.182592][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1008'. [ 300.344796][ T9020] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.1020'. [ 306.796167][ T9093] syz.1.1038 uses obsolete (PF_INET,SOCK_PACKET) [ 308.992564][ T9087] tipc: Resetting bearer [ 309.104501][ T9087] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.127214][ T9087] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.140623][ T9087] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.150885][ T9087] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.404411][ T9087] bond2: left allmulticast mode [ 309.441132][ T9087] bond6: left promiscuous mode [ 309.445976][ T9087] bond6: left allmulticast mode [ 309.483737][ T9087] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.492629][ T9087] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.501212][ T9087] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.509719][ T9087] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.583105][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1044'. [ 309.609038][ T9117] bridge0: entered promiscuous mode [ 309.615122][ T9117] vlan3: entered promiscuous mode [ 312.454218][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 315.293872][ T9150] netlink: 'syz.0.1057': attribute type 4 has an invalid length. [ 316.215070][ T9151] : left promiscuous mode [ 317.231345][ T9151] bridge_slave_1: left allmulticast mode [ 317.398979][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.406596][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.396181][ T9151] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.405894][ T9151] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.415404][ T9151] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.424503][ T9151] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.572803][ T9151] ip6gre1: left promiscuous mode [ 318.578050][ T9151] ip6gre1: left allmulticast mode [ 318.692439][ T9159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1059'. [ 320.357180][ T9195] xt_HMARK: spi-set and port-set can't be combined [ 321.191579][ T9205] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1072'. [ 322.434115][ T9231] syz_tun: entered allmulticast mode [ 322.481175][ T9229] syz_tun: left allmulticast mode [ 325.802696][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 325.802710][ T28] audit: type=1326 audit(1782427418.923:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.2.1090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a40d9ce59 code=0x7fc00000 [ 325.915415][ T28] audit: type=1326 audit(1782427418.973:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.2.1090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4a40d9ce59 code=0x7fc00000 [ 328.240686][ T9311] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 328.387038][ T2134] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 328.577555][ T2134] usb 2-1: Using ep0 maxpacket: 16 [ 328.589078][ T2134] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 328.650520][ T2134] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 328.700625][ T2134] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 328.779867][ T2134] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 328.821928][ T2134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 328.861899][ T9318] bond6: entered allmulticast mode [ 328.870985][ T2134] usb 2-1: SerialNumber: syz [ 328.905610][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1100'. [ 328.926085][ T9301] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 329.078200][ T9322] bridge3: entered allmulticast mode [ 329.137474][ T9322] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 329.165474][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1100'. [ 329.241759][ T9301] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 329.278330][ T9326] bridge4: entered allmulticast mode [ 329.308390][ T9326] bond6: (slave bridge4): Enslaving as an active interface with a down link [ 330.281682][ T2134] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 330.415803][ T2134] usb 2-1: USB disconnect, device number 6 [ 330.862594][ T9352] lo speed is unknown, defaulting to 1000 [ 333.245809][ T9370] tipc: Started in network mode [ 333.266682][ T9370] tipc: Node identity ac1414aa, cluster identity 4711 [ 333.285067][ T9370] tipc: Enabled bearer , priority 10 [ 333.347100][ T9370] tipc: Enabled bearer , priority 0 [ 333.496312][ T9380] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 333.531141][ T9379] macvtap0: entered promiscuous mode [ 333.548095][ T9379] macvtap0: entered allmulticast mode [ 333.554180][ T9379] veth1_vlan: entered allmulticast mode [ 333.579369][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'. [ 333.595927][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'. [ 333.633174][ T9383] macvtap1: entered promiscuous mode [ 333.651041][ T9383] macvtap1: entered allmulticast mode [ 333.672069][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'. [ 333.895637][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'. [ 333.930306][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'. [ 334.749355][ T5814] tipc: Node number set to 2886997162 [ 336.120685][ T9406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 336.224215][ T9406] bridge7: port 1(veth9) entered blocking state [ 336.257285][ T9406] bridge7: port 1(veth9) entered disabled state [ 336.265062][ T9406] veth9: entered allmulticast mode [ 336.268972][ T28] audit: type=1326 audit(1782427429.393:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.3.1125" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 336.275131][ T9406] veth9: entered promiscuous mode [ 336.309937][ T28] audit: type=1326 audit(1782427429.413:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.3.1125" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 336.343827][ T9409] bridge7: port 2(veth0_to_bond) entered blocking state [ 336.364642][ T28] audit: type=1326 audit(1782427429.423:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.3.1125" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 336.432981][ T28] audit: type=1326 audit(1782427429.423:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.3.1125" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 336.477385][ T9409] bridge7: port 2(veth0_to_bond) entered disabled state [ 336.508857][ T9409] veth0_to_bond: entered allmulticast mode [ 336.548044][ T9409] veth0_to_bond: entered promiscuous mode [ 336.556019][ T28] audit: type=1326 audit(1782427429.423:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.3.1125" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 336.653707][ T28] audit: type=1326 audit(1782427429.433:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.3.1125" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 336.753322][ T28] audit: type=1326 audit(1782427429.483:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.3.1125" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f50a6b5d68e code=0x7ffc0000 [ 336.826347][ T28] audit: type=1326 audit(1782427429.513:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.3.1125" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f50a6b5d68e code=0x7ffc0000 [ 336.853367][ T28] audit: type=1326 audit(1782427429.513:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.3.1125" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f50a6b5d68e code=0x7ffc0000 [ 336.881677][ T28] audit: type=1326 audit(1782427429.523:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.3.1125" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f50a6b5d68e code=0x7ffc0000 [ 337.087776][ T9418] lo: Caught tx_queue_len zero misconfig [ 337.335520][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1132'. [ 337.360427][ T9427] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1132'. [ 337.627200][ T2134] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 338.253789][ T2134] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 338.387839][ T2134] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 338.426993][ T2134] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 338.436037][ T2134] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 338.497075][ T2134] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 338.521084][ T2134] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 338.548871][ T2134] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 338.576964][ T2134] usb 2-1: Product: syz [ 338.581268][ T2134] usb 2-1: Manufacturer: syz [ 338.596125][ T2134] cdc_wdm 2-1:1.0: skipping garbage [ 338.617112][ T2134] cdc_wdm 2-1:1.0: skipping garbage [ 338.632242][ T2134] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 338.660751][ T2134] cdc_wdm 2-1:1.0: Unknown control protocol [ 339.925241][ T2134] usb 2-1: USB disconnect, device number 7 [ 340.870133][ T9469] batman_adv: batadv0: Adding interface: macvtap0 [ 340.897202][ T9469] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.969988][ T9469] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 341.192380][ T9470] batman_adv: batadv0: Removing interface: macvtap0 [ 342.884829][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'. [ 342.897661][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'. [ 342.914406][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'. [ 344.812350][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 344.918463][ T9507] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.926779][ T9507] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.935225][ T9507] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.943850][ T9507] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.046319][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 345.167671][ T9513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1159'. [ 345.408284][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1160'. [ 345.512512][ T9522] netlink: 'syz.3.1161': attribute type 4 has an invalid length. [ 345.634304][ T9522] netlink: 'syz.3.1161': attribute type 4 has an invalid length. [ 347.859415][ T9546] can: request_module (can-proto-0) failed. [ 347.973494][ T9554] netlink: 'syz.0.1169': attribute type 4 has an invalid length. [ 348.001174][ T9554] netlink: 'syz.0.1169': attribute type 4 has an invalid length. [ 348.676553][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 348.676645][ T28] audit: type=1326 audit(1782427441.793:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.1178" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 348.711827][ T28] audit: type=1326 audit(1782427441.793:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.1178" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 348.742223][ T28] audit: type=1326 audit(1782427441.803:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.1178" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 348.772228][ T28] audit: type=1326 audit(1782427441.803:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.1178" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff247d9bcc7 code=0x7ffc0000 [ 348.801142][ T28] audit: type=1326 audit(1782427441.803:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.1178" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 348.830422][ T28] audit: type=1326 audit(1782427441.803:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.1178" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 348.860469][ T28] audit: type=1326 audit(1782427441.803:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.1178" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 348.890848][ T28] audit: type=1326 audit(1782427441.803:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.1178" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 348.920160][ T28] audit: type=1326 audit(1782427441.803:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.1178" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 348.946409][ T28] audit: type=1326 audit(1782427441.803:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.1178" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247d9ce59 code=0x7ffc0000 [ 349.173602][ T9583] netlink: 'syz.1.1180': attribute type 1 has an invalid length. [ 349.263093][ T9586] bond0: (slave bridge4): making interface the new active one [ 349.272214][ T9586] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 350.182026][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1183'. [ 350.520426][ T9598] loop1: detected capacity change from 0 to 512 [ 350.578207][ T9598] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1181: invalid indirect mapped block 2 (level 1) [ 350.602227][ T9598] EXT4-fs (loop1): 1 truncate cleaned up [ 350.609443][ T9598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.084167][ T9604] xt_nat: multiple ranges no longer supported [ 351.498993][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.829152][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1186'. [ 351.878395][ T9616] autofs4:pid:9616:autofs_fill_super: called with bogus options [ 351.912299][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1187'. [ 352.024804][ T9613] 8021q: adding VLAN 0 to HW filter on device bond7 [ 352.101722][ T9621] macvlan2: entered promiscuous mode [ 352.127566][ T9621] macvlan2: entered allmulticast mode [ 352.154794][ T9621] bond7: entered promiscuous mode [ 352.188284][ T9621] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 352.206612][ T9621] bond7: left promiscuous mode [ 352.301413][ T9623] vxcan2: entered allmulticast mode [ 352.452106][ T9629] syzkaller0: entered promiscuous mode [ 352.468315][ T9629] syzkaller0: entered allmulticast mode [ 352.723939][ T9634] 8021q: adding VLAN 0 to HW filter on device bond4 [ 352.755186][ T9637] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 352.859387][ T9637] 8021q: adding VLAN 0 to HW filter on device bond4 [ 352.914469][ T9637] bond4: (slave lo): making interface the new active one [ 352.943606][ T9637] bond4: (slave lo): Enslaving as an active interface with an up link [ 352.955967][ T9637] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 352.979434][ T9639] syz_tun: entered allmulticast mode [ 352.985431][ T8470] lo speed is unknown, defaulting to 1000 [ 353.005719][ T23] lo speed is unknown, defaulting to 1000 [ 353.012085][ T8475] lo speed is unknown, defaulting to 1000 [ 353.022730][ T8469] lo speed is unknown, defaulting to 1000 [ 353.028757][ T2134] lo speed is unknown, defaulting to 1000 [ 353.036226][ T9640] syz_tun: left allmulticast mode [ 353.190634][ T9646] tipc: Resetting bearer [ 353.458847][ T9650] tipc: Can't bind to reserved service type 1 [ 353.905026][ T9659] batman_adv: batadv0: Adding interface: dummy0 [ 353.943111][ T9659] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.055138][ T9659] batman_adv: batadv0: Interface activated: dummy0 [ 354.113568][ T9661] batadv0: mtu less than device minimum [ 354.156461][ T9661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 354.170484][ T9661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 354.182963][ T9661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 354.195428][ T9661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 354.207989][ T9661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 354.220450][ T9661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 354.232905][ T9661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 354.245347][ T9661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 355.267634][ T9673] SET target dimension over the limit! [ 355.397444][ T9675] 8021q: adding VLAN 0 to HW filter on device bond3 [ 355.449961][ T9675] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 355.526138][ T9675] 8021q: adding VLAN 0 to HW filter on device bond3 [ 355.550481][ T9675] bond3: (slave lo): making interface the new active one [ 355.574532][ T9675] bond3: (slave lo): Enslaving as an active interface with an up link [ 357.369265][ T9697] batman_adv: batadv0: Interface deactivated: dummy0 [ 357.377998][ T9697] batman_adv: batadv0: Removing interface: dummy0 [ 357.624519][ T9697] bridge_slave_0: left allmulticast mode [ 357.696558][ T9697] bridge_slave_0: left promiscuous mode [ 357.771718][ T9697] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.015598][ T9697] bridge_slave_1: left allmulticast mode [ 358.059923][ T9697] bridge_slave_1: left promiscuous mode [ 358.084810][ T9697] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.129456][ T9697] bond4: (slave veth0_to_bond): Releasing active interface [ 358.202447][ T9697] bond0: (slave bond_slave_0): Releasing backup interface [ 358.245814][ T9697] bond0: (slave bond_slave_1): Releasing backup interface [ 358.345875][ T9697] team0: Port device team_slave_0 removed [ 358.364799][ T9697] team0: Port device team_slave_1 removed [ 358.375786][ T9697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.394025][ T9697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.405737][ T9697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.421176][ T9697] bond1: (slave ip6gretap1): Releasing backup interface [ 358.431546][ T9697] ip6gretap1: left allmulticast mode [ 359.873466][ T9697] bond2: (slave geneve1): Removing an active aggregator [ 359.906721][ T9697] bond2: (slave geneve1): Releasing backup interface [ 359.921322][ T9697] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.954530][ T9697] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.007557][ T9697] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.020196][ T9697] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.091504][ T9697] bond5: (slave veth3): Releasing active interface [ 360.149378][ T9697] bond6: (slave bridge3): Releasing backup interface [ 360.157888][ T9697] bond6: (slave bridge3): the permanent HWaddr of slave - c2:49:19:0e:b2:25 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 360.177946][ T9697] bridge3: left allmulticast mode [ 360.394519][ T9697] bond6: (slave bridge4): Releasing backup interface [ 360.402941][ T9697] bridge4: left allmulticast mode [ 360.418647][ T9699] team0: Mode changed to "activebackup" [ 360.450322][ T9715] syz_tun: entered allmulticast mode [ 360.467771][ T9713] syz_tun: left allmulticast mode [ 361.079069][ T9723] mmap: syz.1.1220 (9723) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 362.158888][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1223'. [ 364.247199][ T9759] bond2: option mode: unable to set because the bond device is up [ 364.358421][ T9759] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 364.398311][ T9759] net_ratelimit: 12 callbacks suppressed [ 364.398433][ T9759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.861433][ T9787] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.1242'. [ 366.215837][ T9792] 8021q: adding VLAN 0 to HW filter on device bond4 [ 366.398748][ T9792] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 366.468410][ T9792] 8021q: adding VLAN 0 to HW filter on device bond4 [ 366.508981][ T9792] bond4: (slave lo): making interface the new active one [ 366.536641][ T9792] bond4: (slave lo): Enslaving as an active interface with an up link [ 366.560143][ T9792] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 366.739002][ T9805] bond3: (slave lo): Releasing active interface [ 366.759986][ T9805] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 368.591981][ T9832] virtio-fs: tag not found [ 374.619605][ T9856] tipc: Enabling of bearer rejected, failed to enable media [ 375.143794][ T9859] lo speed is unknown, defaulting to 1000 [ 379.164957][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.171658][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.696596][ T9895] can: request_module (can-proto-0) failed. [ 379.731708][ T9900] batman_adv: batadv0: Adding interface: dummy0 [ 379.761510][ T9900] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.818330][ T9900] batman_adv: batadv0: Interface activated: dummy0 [ 379.865268][ T9895] batadv0: mtu less than device minimum [ 379.899314][ T9895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.911820][ T9895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.924281][ T9895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.936775][ T9895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.949286][ T9895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.961753][ T9895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.974121][ T9895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.974780][ T9897] /dev/loop0: Can't lookup blockdev [ 379.986587][ T9895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 380.003933][ T9895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 380.083509][ T9904] vlan5: entered promiscuous mode [ 380.104671][ T9904] bridge0: entered promiscuous mode [ 380.526572][ T9920] tipc: Enabling of bearer rejected, failed to enable media [ 380.862878][ T9925] xt_policy: output policy not valid in PREROUTING and INPUT [ 383.079932][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1283'. [ 383.122152][ T9946] 8021q: adding VLAN 0 to HW filter on device bond5 [ 383.351263][ T9946] macvlan2: entered promiscuous mode [ 383.356686][ T9946] macvlan2: entered allmulticast mode [ 383.367777][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1287'. [ 383.381335][ T9946] bond5: entered promiscuous mode [ 383.387464][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1287'. [ 383.395195][ T9946] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 383.432924][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1287'. [ 383.463722][ T9946] bond5: left promiscuous mode [ 383.517839][ T9955] tipc: Enabling of bearer rejected, failed to enable media [ 385.642644][ T9974] netlink: 'syz.1.1293': attribute type 4 has an invalid length. [ 385.702897][ T9974] netlink: 'syz.1.1293': attribute type 4 has an invalid length. [ 388.538370][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1295'. [ 388.549284][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1295'. [ 388.563418][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1295'. [ 388.584021][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1295'. [ 388.597342][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1295'. [ 388.684976][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 388.703291][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 388.769827][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 388.800484][ T9997] tipc: Enabling of bearer rejected, failed to enable media [ 392.749175][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1311'. [ 392.839690][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1311'. [ 393.547698][T10032] __nla_validate_parse: 2 callbacks suppressed [ 393.547748][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 393.811816][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 393.832932][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 393.844868][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 397.688421][T10055] netlink: 'syz.2.1316': attribute type 1 has an invalid length. [ 397.953098][T10055] 8021q: adding VLAN 0 to HW filter on device bond5 [ 398.045336][T10058] bond5: (slave syz_tun): Enslaving as a backup interface with an up link [ 398.502848][T10060] bond5 (unregistering): (slave syz_tun): Removing an active aggregator [ 398.512294][T10060] bond5 (unregistering): (slave syz_tun): Releasing backup interface [ 398.533916][T10060] bond5 (unregistering): Released all slaves [ 398.600651][T10064] lo speed is unknown, defaulting to 1000 [ 403.548976][T10087] netlink: 'syz.2.1323': attribute type 11 has an invalid length. [ 403.695204][T10093] xt_CONNSECMARK: invalid mode: 0 [ 406.326660][T10105] lo speed is unknown, defaulting to 1000 [ 406.721116][T10112] syz_tun: entered allmulticast mode [ 406.746413][T10111] syz_tun: left allmulticast mode [ 408.679588][T10133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1347'. [ 409.181590][T10119] loop1: detected capacity change from 0 to 32768 [ 409.203443][T10119] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1333 (10119) [ 409.269352][T10142] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 409.370786][T10142] net_ratelimit: 10 callbacks suppressed [ 409.370824][T10142] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 410.364072][T10149] lo speed is unknown, defaulting to 1000 [ 410.596115][T10119] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 410.643714][T10119] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 410.675872][T10119] BTRFS info (device loop1): enabling disk space caching [ 410.684034][T10119] BTRFS info (device loop1): force clearing of disk cache [ 410.692239][T10119] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 410.703876][T10119] BTRFS info (device loop1): use zstd compression, level 3 [ 410.711308][T10119] BTRFS info (device loop1): disk space caching is enabled [ 410.725426][T10119] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 410.737672][T10119] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 410.779217][T10119] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 410.809217][T10119] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 410.866283][T10119] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 410.876342][T10119] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 410.900378][T10119] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 410.911529][T10119] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 410.938655][T10119] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 410.950687][T10119] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 410.997152][T10119] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 411.037893][T10119] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 411.119681][T10119] BTRFS error (device loop1): open_ctree failed: -12 [ 412.343639][T10174] lo speed is unknown, defaulting to 1000 [ 415.024409][T10203] netlink: 'syz.0.1358': attribute type 1 has an invalid length. [ 415.188096][T10203] 8021q: adding VLAN 0 to HW filter on device bond8 [ 415.203836][T10203] bond7: (slave bond8): making interface the new active one [ 415.213584][T10203] bond7: (slave bond8): Enslaving as an active interface with an up link [ 415.270053][T10207] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 415.301648][T10203] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1358'. [ 415.315205][T10203] 8021q: adding VLAN 0 to HW filter on device bond7 [ 415.461976][T10215] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 416.813713][T10238] loop1: detected capacity change from 0 to 2048 [ 416.861450][T10238] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 417.037420][T10238] pimreg: entered allmulticast mode [ 417.637874][T10248] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1372'. [ 417.649802][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1372'. [ 417.925715][T10248] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1372'. [ 418.446439][T10256] netlink: 'syz.1.1374': attribute type 1 has an invalid length. [ 418.481221][T10258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1375'. [ 418.626223][T10258] bond5: entered promiscuous mode [ 418.632419][T10258] bond5: entered allmulticast mode [ 420.120094][T10275] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 420.139191][T10275] batman_adv: batadv0: Adding interface: gretap2 [ 420.145576][T10275] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.688701][T10275] batman_adv: batadv0: Interface activated: gretap2 [ 421.378758][T10284] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 423.660525][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1386'. [ 423.670400][T10298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1386'. [ 423.702591][T10298] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.713049][T10298] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.723329][T10298] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.733604][T10298] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.820690][T10299] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.852517][T10308] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 424.083592][T10304] macvtap1: entered promiscuous mode [ 424.099987][T10304] macvtap1: entered allmulticast mode [ 424.106443][T10304] veth1_vlan: entered allmulticast mode [ 424.967625][T10306] macvtap2: entered promiscuous mode [ 424.972986][T10306] macvtap2: entered allmulticast mode [ 425.900091][T10320] loop1: detected capacity change from 0 to 128 [ 425.933835][T10320] ufs: Invalid option: "" or missing value [ 425.941232][T10320] ufs: wrong mount options [ 426.042170][T10088] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 427.908462][T10355] Invalid option length (1045252) for dns_resolver key [ 429.622257][T10371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1408'. [ 429.631509][T10371] netlink: 'syz.1.1408': attribute type 3 has an invalid length. [ 429.639433][T10371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1408'. [ 429.648946][T10371] netlink: 'syz.1.1408': attribute type 3 has an invalid length. [ 431.286300][T10383] lo speed is unknown, defaulting to 1000 [ 432.060103][T10398] Invalid option length (1045252) for dns_resolver key [ 435.155615][T10426] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10426] [ 435.637422][T10428] xt_TPROXY: Can be used only with -p tcp or -p udp [ 440.669118][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.675658][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.329229][T10446] loop1: detected capacity change from 0 to 16 [ 441.358042][T10446] erofs: (device loop1): mounted with root inode @ nid 36. [ 441.679109][ T6067] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 442.235033][ T6067] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.422374][T10455] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.477109][T10455] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.486998][ T6067] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 442.526922][T10455] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.547087][ T6067] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 442.576574][T10455] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.604928][ T6067] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.623181][T10455] geneve2: entered promiscuous mode [ 442.688843][ T6067] usb 2-1: config 0 descriptor?? [ 442.928530][ T6067] usb 2-1: USB disconnect, device number 8 [ 442.959434][T10478] netlink: 'syz.3.1435': attribute type 11 has an invalid length. [ 443.086543][T10483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1437'. [ 443.214984][T10483] veth7: entered allmulticast mode [ 443.674443][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1443'. [ 443.978186][T10499] Option '2 O€ÉÇ—Wz [ 443.978186][T10499] ­ f:ó–ã5úÉùÔAŠÀ- [ 443.978186][T10499] ¶ÉØ)‰dÁÕ::ûÞl]GYï;ŸÌmÁ~Rã N+o¸ý{j\°' to dns_resolver key: bad/missing value [ 445.665237][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 445.665252][ T28] audit: type=1326 audit(1782427538.783:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.3.1445" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 446.062481][ T28] audit: type=1326 audit(1782427538.783:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.3.1445" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 446.100105][ T28] audit: type=1326 audit(1782427538.783:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.3.1445" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 446.148340][ T28] audit: type=1326 audit(1782427538.783:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.3.1445" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 446.183044][ T28] audit: type=1326 audit(1782427538.783:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.3.1445" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 446.216282][ T28] audit: type=1326 audit(1782427539.183:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.3.1445" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 446.270182][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1448'. [ 446.282232][ T28] audit: type=1326 audit(1782427539.183:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.3.1445" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 446.306672][T10517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1448'. [ 446.334780][T10517] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.343172][T10517] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.351609][T10517] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.359894][T10517] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.396159][ T28] audit: type=1326 audit(1782427539.183:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.3.1445" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 446.452168][ T28] audit: type=1326 audit(1782427539.183:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.3.1445" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 446.482088][ T28] audit: type=1326 audit(1782427539.183:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.3.1445" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a6b9ce59 code=0x7ffc0000 [ 447.492950][T10531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1452'. [ 448.245464][T10560] bridge0: entered promiscuous mode [ 448.286971][T10560] bridge0: entered allmulticast mode [ 449.269949][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1462'. [ 449.298064][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1462'. [ 452.794598][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 452.815144][T10616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1475'. [ 454.584938][T10620] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.612748][T10622] bond4: option mode: unable to set because the bond device has slaves [ 454.635448][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1477'. [ 454.661415][T10623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1477'. [ 454.688953][T10624] netlink: 'syz.1.1477': attribute type 4 has an invalid length. [ 454.714539][T10624] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1477'. [ 454.743696][T10624] .`: renamed from  [ 454.901934][T10635] ªªªªªª: renamed from lo [ 455.486902][T10648] Option '2 O€ÉÇ—Wz [ 455.486902][T10648] ­ f:ó–ã5úÉùÔAŠÀ- [ 455.486902][T10648] ¶ÉØ)‰dÁÕ::ûÞl]GYï;ŸÌmÁ~Rã N+o¸ý{j\°' to dns_resolver key: bad/missing value [ 459.238720][T10685] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 459.272158][T10685] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 459.360371][T10693] Option '2 O€ÉÇ—Wz [ 459.360371][T10693] ­ f:ó–ã5úÉùÔAŠÀ- [ 459.360371][T10693] ¶ÉØ)‰dÁÕ::ûÞl]GYï;ŸÌmÁ~Rã N+o¸ý{j\°' to dns_resolver key: bad/missing value [ 465.966455][T10745] Option '2 O€ÉÇ—Wz [ 465.966455][T10745] ­ f:ó–ã5úÉùÔAŠÀ- [ 465.966455][T10745] ¶ÉØ)‰dÁÕ::ûÞl]GYï;ŸÌmÁ~Rã N+o¸ý{j\°' to dns_resolver key: bad/missing value [ 467.385332][T10776] netlink: 'syz.1.1522': attribute type 1 has an invalid length. [ 467.491577][T10776] 8021q: adding VLAN 0 to HW filter on device bond6 [ 467.525879][T10778] bond6: entered allmulticast mode [ 467.561256][T10776] bond6: (slave ip6gretap1): making interface the new active one [ 467.572842][T10776] ip6gretap1: entered allmulticast mode [ 467.580439][T10776] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 476.882553][T10855] xt_TPROXY: Can be used only with -p tcp or -p udp [ 481.154888][T10886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1554'. [ 586.516783][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 586.523795][ C1] rcu: 0-...!: (0 ticks this GP) idle=f184/1/0x4000000000000000 softirq=32899/32899 fqs=1 [ 586.535326][ C1] rcu: (detected by 1, t=10502 jiffies, g=46665, q=110 ncpus=2) [ 586.543076][ C1] Sending NMI from CPU 1 to CPUs 0: [ 586.548297][ C0] NMI backtrace for cpu 0 [ 586.548320][ C0] CPU: 0 PID: 10886 Comm: syz.1.1554 Not tainted syzkaller #0 [ 586.548400][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 586.548417][ C0] RIP: 0010:__lock_acquire+0x268/0x7d80 [ 586.548543][ C0] Code: 00 00 41 83 fd 31 0f 83 56 18 00 00 4b 8d 44 ad 00 48 8b 4c 24 28 48 8d bc c1 d8 0a 00 00 48 89 fb 48 c1 eb 03 42 0f b6 04 03 <84> c0 0f 85 5a 18 00 00 48 83 7d 10 00 0f 84 e1 00 00 00 44 8b 3f [ 586.548587][ C0] RSP: 0018:ffffc90000007880 EFLAGS: 00000806 [ 586.548632][ C0] RAX: 0000000000000000 RBX: 1ffff1100b0a9caa RCX: ffff88805854da00 [ 586.548647][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff88805854e550 [ 586.548656][ C0] RBP: ffffc90000007ac8 R08: dffffc0000000000 R09: 0000000000000001 [ 586.548666][ C0] R10: dffffc0000000000 R11: fffffbfff1d15cbe R12: 0000000000000000 [ 586.548676][ C0] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000001 [ 586.548685][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 586.548698][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 586.548708][ C0] CR2: 00007fffd5f7ce58 CR3: 000000007d818000 CR4: 00000000003506f0 [ 586.548721][ C0] Call Trace: [ 586.548756][ C0] [ 586.548795][ C0] ? mark_lock+0x94/0x320 [ 586.548842][ C0] ? verify_lock_unused+0x140/0x140 [ 586.548859][ C0] ? __lock_acquire+0x1336/0x7d80 [ 586.548879][ C0] ? verify_lock_unused+0x140/0x140 [ 586.548901][ C0] ? debug_objects_fill_pool+0x8b/0x790 [ 586.548945][ C0] lock_acquire+0x19e/0x420 [ 586.548959][ C0] ? debug_object_activate+0x6c/0x500 [ 586.548982][ C0] ? debug_objects_fill_pool+0xcc/0x790 [ 586.549001][ C0] ? read_lock_is_recursive+0x20/0x20 [ 586.549018][ C0] ? debug_object_activate+0x500/0x500 [ 586.549039][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 586.549124][ C0] ? debug_object_activate+0x6c/0x500 [ 586.549144][ C0] ? _raw_spin_lock+0x40/0x40 [ 586.549162][ C0] ? advance_sched+0x9d7/0xc70 [ 586.549264][ C0] debug_object_activate+0x6c/0x500 [ 586.549283][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 586.549304][ C0] enqueue_hrtimer+0x34/0x380 [ 586.549321][ C0] ? __hrtimer_run_queues+0x620/0xc10 [ 586.549338][ C0] __hrtimer_run_queues+0x62f/0xc10 [ 586.549352][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 586.549369][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 586.549393][ C0] ? hrtimer_interrupt+0x980/0x980 [ 586.549407][ C0] ? read_tsc+0x9/0x20 [ 586.549437][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 586.549457][ C0] hrtimer_interrupt+0x39d/0x980 [ 586.549481][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 586.549501][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 586.549548][ C0] [ 586.549552][ C0] [ 586.549585][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 586.549671][ C0] RIP: 0010:__sanitizer_cov_trace_cmp8+0x30/0x80 [ 586.549695][ C0] Code: 04 24 65 48 8b 0d d0 d0 7c 7e 65 8b 15 d1 d0 7c 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 1c 16 00 00 00 74 4e <8b> 91 f8 15 00 00 83 fa 03 75 43 48 8b 91 00 16 00 00 44 8b 89 fc [ 586.549706][ C0] RSP: 0018:ffffc9000546f1f0 EFLAGS: 00000246 [ 586.549719][ C0] RAX: ffffffff813b2598 RBX: ffffffff81000000 RCX: ffff88805854da00 [ 586.549729][ C0] RDX: 0000000000000000 RSI: ffffffff81000000 RDI: ffffffff8173a47f [ 586.549739][ C0] RBP: ffffc9000546f318 R08: ffffc9000546f390 R09: 000000000000000c [ 586.549749][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc9000546fed0 [ 586.549758][ C0] R13: ffffc9000546f2c8 R14: ffffffff8173a47f R15: 0000000000000001 [ 586.549769][ C0] ? exit_to_user_mode_loop+0x6f/0x110 [ 586.549789][ C0] ? 0xffffffff81000000 [ 586.549804][ C0] ? unwind_next_frame+0x1c8/0x2990 [ 586.549818][ C0] ? 0xffffffff81000000 [ 586.549827][ C0] ? exit_to_user_mode_loop+0x6f/0x110 [ 586.549847][ C0] unwind_next_frame+0x1c8/0x2990 [ 586.549865][ C0] ? exit_to_user_mode_loop+0x70/0x110 [ 586.549883][ C0] ? exit_to_user_mode_loop+0x70/0x110 [ 586.549901][ C0] ? stack_trace_save+0x100/0x100 [ 586.549918][ C0] arch_stack_walk+0x144/0x190 [ 586.549935][ C0] ? exit_to_user_mode_loop+0x70/0x110 [ 586.549955][ C0] stack_trace_save+0xaa/0x100 [ 586.549971][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 586.549991][ C0] save_stack+0x125/0x230 [ 586.550030][ C0] ? __reset_page_owner+0x190/0x190 [ 586.550049][ C0] ? free_unref_page_prepare+0x7d7/0x8f0 [ 586.550077][ C0] ? free_unref_page_list+0xbe/0x860 [ 586.550096][ C0] ? release_pages+0x208a/0x2300 [ 586.550117][ C0] ? tlb_flush_mmu+0x379/0x510 [ 586.550136][ C0] ? tlb_finish_mmu+0xf4/0x220 [ 586.550153][ C0] ? exit_mmap+0x428/0xb90 [ 586.550169][ C0] ? __mmput+0x118/0x3a0 [ 586.550187][ C0] ? exit_mm+0x23f/0x340 [ 586.550205][ C0] ? do_exit+0x909/0x2530 [ 586.550222][ C0] ? do_group_exit+0x22d/0x2f0 [ 586.550240][ C0] ? get_signal+0x12a6/0x1390 [ 586.550253][ C0] ? arch_do_signal_or_restart+0xc2/0x7b0 [ 586.550282][ C0] ? exit_to_user_mode_loop+0x70/0x110 [ 586.550302][ C0] ? page_ext_get+0x22/0x2b0 [ 586.550318][ C0] ? page_ext_get+0x1e2/0x2b0 [ 586.550335][ C0] __reset_page_owner+0x4e/0x190 [ 586.550354][ C0] ? rcu_is_watching+0x15/0xb0 [ 586.550375][ C0] free_unref_page_prepare+0x7d7/0x8f0 [ 586.550397][ C0] free_unref_page_list+0xbe/0x860 [ 586.550417][ C0] ? release_pages+0x358/0x2300 [ 586.550433][ C0] release_pages+0x208a/0x2300 [ 586.550449][ C0] ? clear_shadow_from_swap_cache+0x500/0x510 [ 586.550471][ C0] ? lru_cache_disable+0x30/0x30 [ 586.550486][ C0] ? free_swap_cache+0xe8/0x790 [ 586.550507][ C0] tlb_flush_mmu+0x379/0x510 [ 586.550528][ C0] tlb_finish_mmu+0xf4/0x220 [ 586.550548][ C0] exit_mmap+0x428/0xb90 [ 586.550565][ C0] ? exit_mm_release+0x1a/0x30 [ 586.550580][ C0] ? vm_brk+0x30/0x30 [ 586.550596][ C0] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 586.550624][ C0] ? uprobe_clear_state+0x278/0x290 [ 586.550642][ C0] __mmput+0x118/0x3a0 [ 586.550657][ C0] exit_mm+0x23f/0x340 [ 586.550677][ C0] ? do_exit+0x2530/0x2530 [ 586.550695][ C0] ? taskstats_exit+0x359/0x9e0 [ 586.550717][ C0] do_exit+0x909/0x2530 [ 586.550740][ C0] ? put_task_struct+0xc0/0xc0 [ 586.550760][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 586.550776][ C0] ? get_signal+0x100e/0x1390 [ 586.550790][ C0] ? lock_chain_count+0x20/0x20 [ 586.550805][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 586.550826][ C0] do_group_exit+0x22d/0x2f0 [ 586.550845][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 586.550864][ C0] get_signal+0x12a6/0x1390 [ 586.550886][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 586.550906][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 586.550922][ C0] ? get_sigframe_size+0x20/0x20 [ 586.550947][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 586.550967][ C0] exit_to_user_mode_loop+0x70/0x110 [ 586.550986][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 586.551005][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 586.551025][ C0] do_syscall_64+0x61/0xb0 [ 586.551041][ C0] ? clear_bhb_loop+0x40/0x90 [ 586.551054][ C0] ? clear_bhb_loop+0x40/0x90 [ 586.551068][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 586.551088][ C0] RIP: 0033:0x7f56b5f9ce59 [ 586.551103][ C0] Code: Unable to access opcode bytes at 0x7f56b5f9ce2f. [ 586.551137][ C0] RSP: 002b:00007f56b6e740e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 586.551152][ C0] RAX: fffffffffffffe00 RBX: 00007f56b6215fa8 RCX: 00007f56b5f9ce59 [ 586.551162][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f56b6215fa8 [ 586.551171][ C0] RBP: 00007f56b6215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 586.551180][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.551189][ C0] R13: 00007f56b6216038 R14: 00007ffd5293ac10 R15: 00007ffd5293acf8 [ 586.551206][ C0] [ 586.551292][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g46665 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 587.318187][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 587.328249][ C1] rcu: RCU grace-period kthread stack dump: [ 587.334139][ C1] task:rcu_preempt state:R running task stack:27848 pid:17 ppid:2 flags:0x00004000 [ 587.344930][ C1] Call Trace: [ 587.348215][ C1] [ 587.351159][ C1] __schedule+0x15ae/0x4660 [ 587.355690][ C1] ? lock_chain_count+0x20/0x20 [ 587.360560][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 587.366468][ C1] ? asan.module_dtor+0x20/0x20 [ 587.371326][ C1] ? rcu_is_watching+0x15/0xb0 [ 587.376119][ C1] schedule+0xbd/0x170 [ 587.380199][ C1] schedule_timeout+0x188/0x2d0 [ 587.385065][ C1] ? console_conditional_schedule+0x40/0x40 [ 587.390967][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 587.396875][ C1] ? update_process_times+0x1b0/0x1b0 [ 587.402262][ C1] ? prepare_to_swait_event+0x344/0x360 [ 587.407823][ C1] rcu_gp_fqs_loop+0x30d/0x1590 [ 587.412702][ C1] ? dump_blkd_tasks+0x820/0x820 [ 587.417647][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 587.422721][ C1] ? rcu_gp_init+0x1530/0x1530 [ 587.427487][ C1] ? rcu_gp_cleanup+0xade/0xc30 [ 587.432435][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 587.437646][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 587.442864][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 587.447490][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 587.452632][ C1] ? __kthread_parkme+0x71/0x1c0 [ 587.457592][ C1] ? __kthread_parkme+0x15b/0x1c0 [ 587.462628][ C1] kthread+0x2fa/0x390 [ 587.466712][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 587.472004][ C1] ? kthread_blkcg+0xd0/0xd0 [ 587.476601][ C1] ret_from_fork+0x48/0x80 [ 587.481033][ C1] ? kthread_blkcg+0xd0/0xd0 [ 587.485635][ C1] ret_from_fork_asm+0x11/0x20 [ 587.490456][ C1] [ 587.493488][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 587.499811][ C1] CPU: 1 PID: 3449 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 587.507367][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 587.517430][ C1] Workqueue: events_unbound toggle_allocation_gate [ 587.523952][ C1] RIP: 0010:smp_call_function_many_cond+0xd85/0x1190 [ 587.530639][ C1] Code: 45 8b 34 24 44 89 f6 83 e6 01 31 ff e8 34 f1 0a 00 41 83 e6 01 49 be 00 00 00 00 00 fc ff df 75 07 e8 6f ed 0a 00 eb 38 f3 90 <42> 0f b6 04 33 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 53 ed [ 587.550257][ C1] RSP: 0018:ffffc9000ca67780 EFLAGS: 00000293 [ 587.556334][ C1] RAX: ffffffff817bf7fd RBX: 1ffff110171c87a9 RCX: ffff88802e8e9e00 [ 587.564320][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 587.572306][ C1] RBP: ffffc9000ca67900 R08: ffffffff911bc507 R09: 1ffffffff22378a0 [ 587.580287][ C1] R10: dffffc0000000000 R11: fffffbfff22378a1 R12: ffff8880b8e43d48 [ 587.588264][ C1] R13: ffff8880b8f3d3c0 R14: dffffc0000000000 R15: 0000000000000000 [ 587.596241][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 587.605179][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 587.611769][ C1] CR2: 00007ff248017dac CR3: 000000000cf32000 CR4: 00000000003506e0 [ 587.619749][ C1] Call Trace: [ 587.623034][ C1] [ 587.625989][ C1] ? smp_call_function_many+0x40/0x40 [ 587.631377][ C1] ? text_poke+0xc0/0xc0 [ 587.635626][ C1] ? __mutex_trylock_common+0x160/0x270 [ 587.641182][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 587.647352][ C1] ? text_poke_sync+0x30/0x30 [ 587.652035][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 587.657156][ C1] ? kmem_cache_alloc_bulk+0x12a/0x5a0 [ 587.662625][ C1] text_poke_bp_batch+0x31e/0x980 [ 587.667667][ C1] ? text_poke_loc_init+0x7c0/0x7c0 [ 587.672872][ C1] ? mutex_lock_nested+0x20/0x20 [ 587.677825][ C1] ? text_poke_queue+0x134/0x190 [ 587.682770][ C1] ? arch_jump_label_transform_queue+0x93/0x100 [ 587.689028][ C1] ? __jump_label_update+0x39a/0x3c0 [ 587.694336][ C1] text_poke_finish+0x30/0x50 [ 587.699020][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 587.705018][ C1] static_key_enable_cpuslocked+0x123/0x240 [ 587.710921][ C1] static_key_enable+0x1a/0x20 [ 587.715778][ C1] ? process_scheduled_works+0x975/0x1600 [ 587.721507][ C1] toggle_allocation_gate+0xa8/0x260 [ 587.726805][ C1] ? show_object+0x70/0x70 [ 587.731243][ C1] ? read_lock_is_recursive+0x20/0x20 [ 587.736632][ C1] ? process_scheduled_works+0x975/0x1600 [ 587.742446][ C1] ? process_scheduled_works+0x975/0x1600 [ 587.748177][ C1] process_scheduled_works+0xa60/0x1600 [ 587.753759][ C1] ? worker_attach_to_pool+0x370/0x370 [ 587.759234][ C1] ? assign_work+0x3cc/0x5d0 [ 587.763852][ C1] worker_thread+0xa5e/0xfe0 [ 587.768474][ C1] kthread+0x2fa/0x390 [ 587.772557][ C1] ? pr_cont_work+0x550/0x550 [ 587.777255][ C1] ? kthread_blkcg+0xd0/0xd0 [ 587.781863][ C1] ret_from_fork+0x48/0x80 [ 587.786285][ C1] ? kthread_blkcg+0xd0/0xd0 [ 587.790888][ C1] ret_from_fork_asm+0x11/0x20 [ 587.795677][ C1]