last executing test programs: 8m8.13866778s ago: executing program 1 (id=270): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x5}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffde5, 0x0}, 0x20004040) 8m7.459443477s ago: executing program 1 (id=273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) 8m5.646554901s ago: executing program 1 (id=275): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4, 0x3, 'lblcr\x00', 0x1a, 0x80005, 0x43}, 0x2c) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x70}, 0x1, 0x7}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x7f, 0x2d7, 0x7d, 0x8000000000000000, 0x5, 0x0, 0x9, 0x401, 0x2, 0x2, 0x8d], 0xeeee8000, 0x201e87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m3.17117209s ago: executing program 1 (id=283): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x6a0, 0x5, 0x408, 0x160, 0x0, 0xfeffffff, 0x160, 0x370, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@uncond, 0x3e7, 0x70, 0xb8, 0xe000000}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote, @gre_key}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key}}}}, {{@ip={@dev, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'ipvlan1\x00'}, 0x0, 0x130, 0x168, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@empty, [], @ipv4=@dev, [], @ipv6=@mcast1, [], @ipv4=@local}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @loopback}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0x8, 0x8, "000000000000000000000042d8663000"}) r1 = syz_open_pts(0xffffffffffffffff, 0x2000) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffe) ioctl$TIOCSTI(r1, 0x5412, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 8m2.901289487s ago: executing program 1 (id=286): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 8m0.32926222s ago: executing program 1 (id=298): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) munlock(&(0x7f00000ae000/0x4000)=nil, 0x4000) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400c0a2) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) pwritev(r0, &(0x7f00000011c0), 0x0, 0x7, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mlock2(&(0x7f0000a2b000/0x1000)=nil, 0x1000, 0x1) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 8m0.001289248s ago: executing program 32 (id=298): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) munlock(&(0x7f00000ae000/0x4000)=nil, 0x4000) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400c0a2) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) pwritev(r0, &(0x7f00000011c0), 0x0, 0x7, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mlock2(&(0x7f0000a2b000/0x1000)=nil, 0x1000, 0x1) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 13.823331274s ago: executing program 2 (id=1688): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x1, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r8, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 13.504997252s ago: executing program 2 (id=1690): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 11.721282625s ago: executing program 2 (id=1694): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) syz_open_procfs(0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) 10.384625268s ago: executing program 2 (id=1697): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) fanotify_mark(0xffffffffffffffff, 0x4, 0x8000010, 0xffffffffffffffff, &(0x7f0000000040)='./sys/file0\x00') 9.959856127s ago: executing program 2 (id=1700): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r3 = gettid() tkill(r3, 0x14) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x800]}, 0x8}) 8.520433893s ago: executing program 3 (id=1704): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0), 0x0) socket$key(0xf, 0x3, 0x2) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 6.668217918s ago: executing program 3 (id=1709): r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) read$FUSE(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) setsockopt$inet_udp_int(r4, 0x11, 0xb, &(0x7f0000000140)=0x1, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x80, 0x3}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3ab691b91872400"}}}}}}}, 0x0) 3.478644735s ago: executing program 2 (id=1711): unshare(0x6a060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x200) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$tun(r0, 0x0, 0x33) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x40000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x8, 0x5, 0x9, 0x8b, 0xc]}, &(0x7f0000000100)=0x54) 3.25608235s ago: executing program 3 (id=1712): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40) pwrite64(r0, &(0x7f0000000140)="10", 0xda0443d9, 0xfff) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x68081, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x8001) ioctl$TCSETSF(r1, 0x5453, &(0x7f0000000040)={0xffffffff, 0xc9a, 0x80080000, 0x5, 0x6, "dce4f0020100000000001b347d5c00010200"}) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x3a424bc, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x1, 0x0, &(0x7f0000000140)) socket(0xc, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)=""/188, 0xbc}, {&(0x7f0000000480)=""/142, 0x8e}, {&(0x7f0000000540)=""/49, 0x31}, {&(0x7f00000005c0)=""/39, 0x27}], 0x4, &(0x7f0000000640)=""/209, 0xd1}, 0x2003) 2.831973031s ago: executing program 4 (id=1714): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') pread64(r0, 0x0, 0x0, 0xe0) symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') 2.644140615s ago: executing program 4 (id=1715): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) 2.369808562s ago: executing program 4 (id=1716): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r1 = fsopen(&(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r5, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.145620108s ago: executing program 4 (id=1718): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setfsgid(0xee01) setfsgid(0xee01) ioprio_set$pid(0x1, r0, 0x6003) socket$nl_route(0x10, 0x3, 0x0) 1.040582915s ago: executing program 4 (id=1719): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, 0x0}, 0x24040801) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60) 892.024798ms ago: executing program 3 (id=1720): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$uac1(0x69a90eab3db9c902, 0x87, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x4, 0xa0, 0x6}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x4b63, 0x3) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x1}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 853.984359ms ago: executing program 4 (id=1721): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cea000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000257000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) 637.164404ms ago: executing program 0 (id=1722): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x100, 0x0) getdents64(r3, &(0x7f00000005c0)=""/4096, 0x1000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) 532.175207ms ago: executing program 0 (id=1723): mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r0) close_range(r6, 0xffffffffffffffff, 0x0) 381.03428ms ago: executing program 0 (id=1724): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_io_uring_setup(0x117, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x9f) keyctl$chown(0x4, r1, 0x0, 0xee01) 214.076404ms ago: executing program 0 (id=1725): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x1, 0x1, 0x0, 0x0, 0x0, 0x3332f000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 107.523837ms ago: executing program 0 (id=1726): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0xe, 0x7fff0000}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x74, 0x43, 0x2}, 0x50) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x8, 0x7d, 0xfffffffffffffffd, 0x5, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x40000000000006, 0xae07, 0x9, 0x4, 0x12, 0x80000006, 0x6}, 0x0, 0x0) 106.730067ms ago: executing program 3 (id=1727): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) gettid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_setup(0x2751, &(0x7f0000000000)={0x0, 0x4627, 0x0, 0x0, 0x2eb}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 0s ago: executing program 0 (id=1728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x84}, {0x5, 0x7, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfc4, 0x1, 0x5}, {0xc, 0x0, 0x2, 0x1, 0x4, 0x0, 0x2}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002300)="81", 0x5dc}], 0x1}, 0x4) kernel console output (not intermixed with test programs): .184" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed8335e84e code=0x7ffc0000 [ 133.144202][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.151082][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.116478][ T6502] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.143516][ T6502] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.284310][ T6504] netlink: 'syz.0.197': attribute type 16 has an invalid length. [ 138.305336][ T6504] netlink: 'syz.0.197': attribute type 17 has an invalid length. [ 138.374410][ T6509] loop1: detected capacity change from 0 to 1024 [ 138.392002][ T6509] EXT4-fs: Ignoring removed orlov option [ 138.446925][ T6509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.487259][ T6504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.753355][ T6517] loop2: detected capacity change from 0 to 128 [ 138.842873][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.919018][ T6522] syzkaller0: entered promiscuous mode [ 138.936286][ T6522] syzkaller0: entered allmulticast mode [ 139.879990][ T6533] Device name cannot be null; rc = [-22] [ 140.439590][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 140.780842][ T6546] loop2: detected capacity change from 0 to 512 [ 140.838941][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.892082][ T23] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 140.933037][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.026330][ T23] usb 2-1: config 0 descriptor?? [ 141.179580][ T6546] EXT4-fs (loop2): 1 truncate cleaned up [ 141.367747][ T6546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.646481][ T23] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 141.688278][ T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input6 [ 141.916058][ T6551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.213'. [ 142.079387][ T23] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 142.166257][ T23] usb 2-1: USB disconnect, device number 4 [ 142.194678][ T6551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.276676][ T6553] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 142.462156][ T6555] fido_id[6555]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 143.832421][ T6570] loop0: detected capacity change from 0 to 256 [ 143.855396][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'. [ 143.890251][ T6570] exFAT-fs (loop0): bogus data start sector [ 143.910448][ T6570] exFAT-fs (loop0): failed to read boot sector [ 143.916701][ T6570] exFAT-fs (loop0): failed to recognize exfat type [ 144.123601][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.390951][ T6577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.221'. [ 146.180171][ C0] sched: RT throttling activated [ 146.283282][ T6596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.821984][ T6613] loop0: detected capacity change from 0 to 1024 [ 147.848164][ T6613] ext4: Unknown parameter 'no' [ 147.854876][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'. [ 147.924044][ T6611] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.165295][ T6611] bridge2: entered allmulticast mode [ 148.191278][ T6611] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 148.225070][ T6617] bond2: entered promiscuous mode [ 148.233702][ T6617] bridge2: entered promiscuous mode [ 148.253350][ T6617] bond2: entered allmulticast mode [ 151.000402][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 151.231091][ T6649] netlink: 'syz.1.245': attribute type 1 has an invalid length. [ 151.233246][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 151.256221][ T23] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 151.311064][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.361663][ T23] usb 4-1: Product: syz [ 151.365926][ T23] usb 4-1: Manufacturer: syz [ 151.420089][ T23] usb 4-1: SerialNumber: syz [ 151.431636][ T6649] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.443330][ T23] r8152-cfgselector 4-1: config 0 descriptor?? [ 151.507707][ T6652] bond1: (slave gretap1): making interface the new active one [ 151.563891][ T6652] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 151.646189][ T6652] syz.1.245 (6652) used greatest stack depth: 18608 bytes left [ 151.951746][ T23] r8152-cfgselector 4-1: Unknown version 0x0000 [ 151.971870][ T23] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 153.238713][ T6671] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer. [ 154.787587][ T6678] netlink: 'syz.3.253': attribute type 16 has an invalid length. [ 154.817807][ T6678] netlink: 'syz.3.253': attribute type 17 has an invalid length. [ 154.909214][ T6678] dummy0: left promiscuous mode [ 154.919681][ T6678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.153497][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.265'. [ 157.246930][ T6711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.263'. [ 157.579178][ T6717] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.615171][ T6717] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.734433][ T6718] netlink: 'syz.2.268': attribute type 16 has an invalid length. [ 157.755184][ T6718] netlink: 'syz.2.268': attribute type 17 has an invalid length. [ 157.856547][ T6718] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.212379][ T6723] bond2: entered allmulticast mode [ 158.219962][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.270'. [ 158.306846][ T6725] bridge1: entered allmulticast mode [ 158.324617][ T6725] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 158.393128][ T6727] netlink: 52 bytes leftover after parsing attributes in process `syz.2.271'. [ 158.467924][ T6728] netlink: 76 bytes leftover after parsing attributes in process `syz.2.271'. [ 158.487952][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.270'. [ 158.516738][ T6723] bridge2: entered allmulticast mode [ 158.523943][ T6723] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 158.536819][ T6728] netlink: 52 bytes leftover after parsing attributes in process `syz.2.271'. [ 158.991925][ T6737] loop0: detected capacity change from 0 to 16 [ 160.505380][ T6737] erofs: (device loop0): mounted with root inode @ nid 36. [ 160.645795][ T6737] syz.0.282: attempt to access beyond end of device [ 160.645795][ T6737] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 160.679625][ T6743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.353467][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.285'. [ 165.312340][ T6800] netlink: 52 bytes leftover after parsing attributes in process `syz.3.293'. [ 165.406385][ T6803] netlink: 76 bytes leftover after parsing attributes in process `syz.3.293'. [ 165.464701][ T6803] netlink: 52 bytes leftover after parsing attributes in process `syz.3.293'. [ 165.767138][ T6809] netlink: 'syz.3.297': attribute type 1 has an invalid length. [ 165.898028][ T6809] bond2: (slave bridge3): Enslaving as a backup interface with an up link [ 165.935848][ T6809] macvlan2: entered promiscuous mode [ 165.941738][ T6809] macvlan2: entered allmulticast mode [ 165.948174][ T6809] bond2: entered promiscuous mode [ 165.953914][ T6809] bridge3: entered promiscuous mode [ 165.959875][ T6809] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 165.969806][ T6809] bond2: left promiscuous mode [ 165.974961][ T6809] bridge3: left promiscuous mode [ 166.300572][ T6814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.307'. [ 166.351687][ T6817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.646977][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.657361][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.670464][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.683589][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.691634][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 166.699049][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.726947][ T6827] bond2: entered allmulticast mode [ 166.776773][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 166.794953][ T6827] bridge1: entered allmulticast mode [ 166.800867][ T6827] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 166.837411][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 166.856273][ T6827] bridge2: entered allmulticast mode [ 166.862329][ T6827] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 167.099056][ T6824] chnl_net:caif_netlink_parms(): no params data found [ 167.382034][ T6824] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.404280][ T6824] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.430432][ T6824] bridge_slave_0: entered allmulticast mode [ 167.439325][ T6824] bridge_slave_0: entered promiscuous mode [ 167.448960][ T6824] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.456394][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.464368][ T6824] bridge_slave_1: entered allmulticast mode [ 167.477605][ T6824] bridge_slave_1: entered promiscuous mode [ 167.540955][ T6824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.565836][ T6824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.687683][ T6846] loop2: detected capacity change from 0 to 16 [ 167.701652][ T6846] erofs: (device loop2): mounted with root inode @ nid 36. [ 167.732836][ T6824] team0: Port device team_slave_0 added [ 167.745375][ T6824] team0: Port device team_slave_1 added [ 167.829701][ T6824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.838674][ T6824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.867265][ T6824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.911253][ T6824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.928962][ T6824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.969113][ T6824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.134782][ T6849] netlink: 'syz.0.308': attribute type 10 has an invalid length. [ 168.196966][ T6853] loop2: detected capacity change from 0 to 512 [ 168.208433][ T6849] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 168.249694][ T6853] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 168.279272][ T6824] hsr_slave_0: entered promiscuous mode [ 168.280424][ T6853] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 168.318991][ T6824] hsr_slave_1: entered promiscuous mode [ 168.340688][ T6853] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 168.354797][ T6824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.385416][ T6853] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 168.386792][ T6824] Cannot create hsr debugfs directory [ 168.657783][ T6853] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 168.687255][ T6853] System zones: 0-2, 18-18, 34-35 [ 168.711808][ T6853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.745975][ T5085] Bluetooth: hci1: command tx timeout [ 168.817218][ T6853] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 168.914332][ T6853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.277504][ T6865] bond3: entered allmulticast mode [ 169.320126][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 169.476790][ T6867] bridge3: entered allmulticast mode [ 169.495425][ T6867] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 169.545591][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 169.634500][ T6865] bridge4: entered allmulticast mode [ 169.640121][ T6865] bond3: (slave bridge4): Enslaving as an active interface with a down link [ 170.676047][ T6824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 170.806126][ T6824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 170.840246][ T5085] Bluetooth: hci1: command tx timeout [ 171.061766][ T6824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.096297][ T6824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 171.452734][ T6824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.490573][ T6824] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.621528][ T6886] loop2: detected capacity change from 0 to 1024 [ 172.266033][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.273388][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.336903][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.345067][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.901542][ T5085] Bluetooth: hci1: command tx timeout [ 172.959296][ T6824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.125443][ T6908] usb usb7: usbfs: interface 0 claimed by hub while 'syz.2.325' sets config #3 [ 173.244072][ T6916] loop2: detected capacity change from 0 to 256 [ 173.326920][ T6910] bond3: entered allmulticast mode [ 173.345898][ T6916] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 173.415064][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 173.483570][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 173.506614][ T6917] bridge4: entered allmulticast mode [ 173.536754][ T6917] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 173.576393][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 173.605545][ T6910] bridge5: entered allmulticast mode [ 173.612384][ T6910] bond3: (slave bridge5): Enslaving as an active interface with a down link [ 173.730758][ T6824] veth0_vlan: entered promiscuous mode [ 173.752777][ T6824] veth1_vlan: entered promiscuous mode [ 173.841218][ T6824] veth0_macvtap: entered promiscuous mode [ 173.854085][ T6824] veth1_macvtap: entered promiscuous mode [ 173.873495][ T6824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.884322][ T6824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.895086][ T6824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.905815][ T6824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.917540][ T6824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.946966][ T6824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.964177][ T6824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.976473][ T6824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.994057][ T6824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.006616][ T6824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.033834][ T6824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.044837][ T6824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.053820][ T6824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.063843][ T6824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.161886][ T5931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.169754][ T5931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.210086][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.218221][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.325803][ T6927] netlink: 52 bytes leftover after parsing attributes in process `syz.0.335'. [ 174.383081][ T6927] netlink: 76 bytes leftover after parsing attributes in process `syz.0.335'. [ 174.397714][ T6927] netlink: 52 bytes leftover after parsing attributes in process `syz.0.335'. [ 174.487978][ T6933] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 174.983997][ T5085] Bluetooth: hci1: command tx timeout [ 175.678598][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.336'. [ 175.711017][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 176.716385][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.336'. [ 177.140832][ T6968] netlink: 52 bytes leftover after parsing attributes in process `syz.4.342'. [ 177.166108][ T6968] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.173698][ T6968] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.219182][ T6969] netlink: 76 bytes leftover after parsing attributes in process `syz.4.342'. [ 177.229968][ T6969] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.237365][ T6969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.245112][ T6969] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.252372][ T6969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.262917][ T6967] syzkaller0: entered promiscuous mode [ 177.268463][ T6967] syzkaller0: entered allmulticast mode [ 177.276419][ T6969] netlink: 52 bytes leftover after parsing attributes in process `syz.4.342'. [ 177.293002][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.300379][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.496780][ T6974] netlink: 'syz.0.346': attribute type 1 has an invalid length. [ 177.821141][ T6974] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.049714][ T6974] macvlan2: entered promiscuous mode [ 179.089557][ T6974] macvlan2: entered allmulticast mode [ 179.198705][ T6974] bond3: entered promiscuous mode [ 179.213096][ T6992] loop4: detected capacity change from 0 to 512 [ 179.234740][ T6974] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 179.313526][ T6974] bond3: left promiscuous mode [ 179.319897][ T6992] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 179.336452][ T6992] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 179.347669][ T6992] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 179.569203][ T6992] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 179.633674][ T6992] System zones: 0-2, 18-18, 34-35 [ 179.793989][ T6992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.062944][ T6992] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 180.180104][ T6992] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.306956][ T7007] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 180.434904][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.354'. [ 181.228017][ T7004] loop2: detected capacity change from 0 to 32768 [ 181.273708][ T7004] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 181.298810][ T7032] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 181.313339][ T7032] batman_adv: batadv0: Adding interface: gretap1 [ 181.334668][ T7032] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.362490][ T7032] batman_adv: batadv0: Interface activated: gretap1 [ 181.788205][ T7004] XFS (loop2): Ending clean mount [ 181.907100][ T7049] tipc: Started in network mode [ 181.929050][ T7049] tipc: Node identity 7f000001, cluster identity 4711 [ 181.976025][ T7049] tipc: Enabled bearer , priority 10 [ 182.269243][ T7052] loop3: detected capacity change from 0 to 512 [ 182.561751][ T7052] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 182.622720][ T7052] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 182.703754][ T7052] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 182.761078][ T7052] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 182.769232][ T7052] System zones: 0-2, 18-18, 34-35 [ 182.846212][ T7052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.020249][ T7052] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 183.058404][ T7062] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 183.128101][ T5842] tipc: Node number set to 2130706433 [ 183.171516][ T7052] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.320675][ T5779] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 183.418743][ T7066] loop3: detected capacity change from 0 to 512 [ 183.510417][ T7066] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 183.544976][ T7066] System zones: 0-2, 18-18, 34-35 [ 183.568969][ T7066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.604078][ T7066] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.783136][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.592223][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.370'. [ 185.997236][ T7093] loop2: detected capacity change from 0 to 512 [ 186.047095][ T7093] EXT4-fs: Ignoring removed i_version option [ 186.075884][ T7093] EXT4-fs: Ignoring removed bh option [ 186.173248][ T7096] netlink: 'syz.4.374': attribute type 1 has an invalid length. [ 186.201788][ T7093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.217553][ T7093] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.307661][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.374675][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 186.374689][ T28] audit: type=1326 audit(1785447079.143:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.0.384" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 186.458474][ T28] audit: type=1326 audit(1785447079.183:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.0.384" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 186.505544][ T7104] netlink: 36 bytes leftover after parsing attributes in process `syz.2.385'. [ 186.516286][ T28] audit: type=1326 audit(1785447079.183:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.0.384" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 186.636277][ T28] audit: type=1326 audit(1785447079.183:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.0.384" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 186.689788][ T28] audit: type=1326 audit(1785447079.193:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.0.384" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 186.752227][ T28] audit: type=1326 audit(1785447079.193:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.0.384" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 186.777082][ T28] audit: type=1326 audit(1785447079.193:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.0.384" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 186.802228][ T28] audit: type=1326 audit(1785447079.193:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.0.384" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 186.839104][ T28] audit: type=1326 audit(1785447079.193:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.0.384" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 186.907472][ T28] audit: type=1326 audit(1785447079.193:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.0.384" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 188.156292][ T7126] syzkaller0: entered promiscuous mode [ 188.167095][ T7126] syzkaller0: entered allmulticast mode [ 189.210308][ T7137] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.260793][ T7137] netlink: 'syz.0.386': attribute type 4 has an invalid length. [ 189.300469][ T7137] netlink: 'syz.0.386': attribute type 5 has an invalid length. [ 189.325322][ T7137] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.386'. [ 190.054578][ T7155] syzkaller0: entered promiscuous mode [ 190.070356][ T7155] syzkaller0: entered allmulticast mode [ 190.093373][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.529404][ T7164] netlink: 'syz.4.396': attribute type 11 has an invalid length. [ 190.666650][ T7163] syzkaller0: entered promiscuous mode [ 190.679065][ T7163] syzkaller0: entered allmulticast mode [ 191.640599][ T7183] loop3: detected capacity change from 0 to 512 [ 191.701472][ T7183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.273791][ T7204] syzkaller0: entered promiscuous mode [ 192.279475][ T7204] syzkaller0: entered allmulticast mode [ 192.302937][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.598764][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.788111][ T7209] configfs-gadget.g1 gadget.32: FS Playback: Req. wMaxPacketSize 1544 at bInterval 1 > max ISOC 1023, may drop data! [ 193.433789][ T7218] syzkaller0: entered promiscuous mode [ 193.439332][ T7218] syzkaller0: entered allmulticast mode [ 194.585641][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.592487][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.530274][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 198.760266][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 198.785253][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 198.824752][ T23] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 198.833690][ T23] usb 4-1: can't read configurations, error -71 [ 199.451519][ T7316] xt_nat: multiple ranges no longer supported [ 201.498455][ T7326] loop4: detected capacity change from 0 to 128 [ 201.606225][ T7326] capability: warning: `syz.4.447' uses deprecated v2 capabilities in a way that may be insecure [ 201.768441][ T7337] loop4: detected capacity change from 0 to 1024 [ 201.797612][ T7337] EXT4-fs: Ignoring removed orlov option [ 201.809007][ T7336] VFS: Mount too revealing [ 201.859127][ T7337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.916168][ T7337] netlink: 'syz.4.453': attribute type 4 has an invalid length. [ 202.055275][ T7337] netlink: 'syz.4.453': attribute type 4 has an invalid length. [ 202.234462][ T6824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.543963][ T7355] Driver unsupported XDP return value 0 on prog (id 58) dev N/A, expect packet loss! [ 202.745250][ T7363] syzkaller0: entered promiscuous mode [ 202.759539][ T7363] syzkaller0: entered allmulticast mode [ 204.012442][ T7374] netlink: 'syz.4.464': attribute type 10 has an invalid length. [ 205.108802][ T7374] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.152915][ T7374] bond0: (slave team0): Enslaving as an active interface with an up link [ 206.566934][ T7400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.472'. [ 206.641482][ T7400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.472'. [ 207.608139][ T7410] loop4: detected capacity change from 0 to 512 [ 207.683627][ T7410] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.477: corrupted in-inode xattr: invalid ea_ino [ 207.778317][ T7410] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.477: couldn't read orphan inode 15 (err -117) [ 207.859502][ T7410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.154215][ T6824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.318527][ T7423] fuse: Bad value for 'fd' [ 209.518422][ T7423] 9pnet_fd: Insufficient options for proto=fd [ 209.637835][ T7429] syzkaller0: entered promiscuous mode [ 209.643542][ T7429] syzkaller0: entered allmulticast mode [ 209.657853][ T7429] tipc: Started in network mode [ 209.679119][ T7429] tipc: Node identity ba696618474f, cluster identity 4711 [ 209.716824][ T7429] tipc: Enabled bearer , priority 0 [ 209.734914][ T7428] tipc: Resetting bearer [ 209.852037][ T7428] tipc: Disabling bearer [ 210.340518][ C0] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967292. macoff=76 [ 210.377961][ T7449] team0: No ports can be present during mode change [ 210.431187][ T7447] bond1: (slave syz_tun): Releasing backup interface [ 210.524900][ T7447] bond0: (slave bridge0): Releasing backup interface [ 210.627799][ T7447] bridge_slave_0: left allmulticast mode [ 210.639271][ T7447] bridge_slave_0: left promiscuous mode [ 210.647075][ T7447] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.672651][ T7447] bridge_slave_1: left allmulticast mode [ 210.706149][ T7447] bridge_slave_1: left promiscuous mode [ 210.737252][ T7447] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.803206][ T7447] bond0: (slave bond_slave_0): Releasing backup interface [ 210.886685][ T7447] bond0: (slave bond_slave_1): Releasing backup interface [ 210.993841][ T7447] team0: Port device team_slave_0 removed [ 211.049827][ T7447] team0: Port device team_slave_1 removed [ 211.074287][ T7447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.085896][ T7447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.105179][ T7447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.116909][ T7447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.139986][ T7447] bond2: (slave bridge1): Releasing backup interface [ 211.147652][ T7447] bond2: (slave bridge1): the permanent HWaddr of slave - 9e:87:2e:e2:c5:bf - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 211.173259][ T7447] bridge1: left allmulticast mode [ 211.193019][ T7447] bond2: (slave bridge2): Releasing backup interface [ 211.201202][ T7447] bridge2: left allmulticast mode [ 211.217717][ T7447] batman_adv: batadv0: Interface deactivated: gretap1 [ 211.225204][ T7447] batman_adv: batadv0: Removing interface: gretap1 [ 211.325880][ T7459] netlink: 'syz.0.495': attribute type 1 has an invalid length. [ 211.416913][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 211.426625][ T7462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.496'. [ 211.443619][ T7462] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.452968][ T7462] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.461911][ T7462] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.471025][ T7462] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.533498][ T7459] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 211.575916][ T7463] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.600624][ T7463] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.637764][ T7459] macvlan2: entered promiscuous mode [ 211.657918][ T7459] macvlan2: entered allmulticast mode [ 211.679239][ T7459] bond4: entered promiscuous mode [ 211.709175][ T7459] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 211.767438][ T7459] bond4: left promiscuous mode [ 212.033460][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 212.040341][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 212.046439][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 212.186520][ T7477] Cannot find add_set index 0 as target [ 213.139912][ T7488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.505'. [ 213.732450][ T7499] bond4 (unregistering): Released all slaves [ 214.528256][ T7504] loop4: detected capacity change from 0 to 256 [ 215.738915][ T7504] exfat: Unknown parameter 'ÿÿ' [ 215.849883][ T7018] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 215.924135][ T7513] xt_hashlimit: size too large, truncated to 1048576 [ 216.619328][ T7523] loop4: detected capacity change from 0 to 128 [ 217.009734][ T7524] loop3: detected capacity change from 0 to 128 [ 217.112707][ T7523] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 217.182197][ T7523] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 217.466174][ T6824] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.695883][ T7534] loop2: detected capacity change from 0 to 256 [ 218.328470][ T7534] FAT-fs (loop2): Directory bread(block 64) failed [ 218.370285][ T7534] FAT-fs (loop2): Directory bread(block 65) failed [ 218.377036][ T7534] FAT-fs (loop2): Directory bread(block 66) failed [ 218.454385][ T7534] FAT-fs (loop2): Directory bread(block 67) failed [ 218.484891][ T7534] FAT-fs (loop2): Directory bread(block 68) failed [ 218.531336][ T7534] FAT-fs (loop2): Directory bread(block 69) failed [ 218.560453][ T7534] FAT-fs (loop2): Directory bread(block 70) failed [ 218.600331][ T7534] FAT-fs (loop2): Directory bread(block 71) failed [ 218.607068][ T7534] FAT-fs (loop2): Directory bread(block 72) failed [ 218.705921][ T7534] FAT-fs (loop2): Directory bread(block 73) failed [ 220.344583][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.524'. [ 221.485506][ T7561] loop2: detected capacity change from 0 to 256 [ 222.552972][ T7561] loop2: detected capacity change from 0 to 40427 [ 222.575031][ T7561] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 222.603817][ T7561] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 222.624949][ T7561] F2FS-fs (loop2): Image doesn't support compression [ 222.650844][ T7561] F2FS-fs (loop2): Image doesn't support compression [ 222.667112][ T7561] F2FS-fs (loop2): invalid crc value [ 222.795887][ T7561] F2FS-fs (loop2): Start checkpoint disabled! [ 222.846618][ T7561] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 222.854355][ T7561] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 223.016107][ T7586] netlink: 'syz.3.534': attribute type 1 has an invalid length. [ 223.212946][ T7586] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 223.248234][ T7593] tipc: Enabling of bearer rejected, failed to enable media [ 223.320380][ T7586] macvlan2: entered promiscuous mode [ 223.326471][ T7586] macvlan2: entered allmulticast mode [ 223.350608][ T7586] bond4: entered promiscuous mode [ 223.361737][ T7586] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 223.406807][ T7586] bond4: left promiscuous mode [ 223.467756][ T11] kworker/u4:0: attempt to access beyond end of device [ 223.467756][ T11] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 223.505200][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 223.645112][ T7599] lo: Caught tx_queue_len zero misconfig [ 223.654657][ T7599] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 226.367596][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'. [ 226.390309][ T5790] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 226.427664][ T7639] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.436604][ T7639] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.445503][ T7639] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.454302][ T7639] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.500630][ T7644] fuse: Bad value for 'fd' [ 226.516714][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'. [ 226.590227][ T5790] usb 5-1: Using ep0 maxpacket: 16 [ 226.604581][ T5790] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 226.635878][ T5790] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 226.670305][ T5790] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 226.707474][ T5790] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.740434][ T5790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 226.748530][ T5790] usb 5-1: SerialNumber: syz [ 226.801185][ T7625] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 227.091024][ T7625] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 228.796138][ T5790] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 228.807002][ T5790] usb 5-1: USB disconnect, device number 2 [ 228.926505][ T7662] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 229.929338][ T7671] loop3: detected capacity change from 0 to 512 [ 230.184673][ T7671] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.559: bg 0: block 5: invalid block bitmap [ 230.221344][ T7671] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 230.230681][ T7671] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.559: invalid indirect mapped block 3 (level 2) [ 230.246189][ T7671] EXT4-fs (loop3): 1 orphan inode deleted [ 230.252546][ T7671] EXT4-fs (loop3): 1 truncate cleaned up [ 230.266422][ T7671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.502807][ T7671] netlink: 'syz.3.559': attribute type 12 has an invalid length. [ 230.989656][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.009850][ T7679] loop2: detected capacity change from 0 to 128 [ 231.295252][ T7679] syz.2.561: attempt to access beyond end of device [ 231.295252][ T7679] loop2: rw=2049, sector=145, nr_sectors = 79 limit=128 [ 232.441339][ T7678] syz.2.561: attempt to access beyond end of device [ 232.441339][ T7678] loop2: rw=524288, sector=145, nr_sectors = 40 limit=128 [ 232.495062][ T7678] syz.2.561: attempt to access beyond end of device [ 232.495062][ T7678] loop2: rw=524288, sector=193, nr_sectors = 31 limit=128 [ 232.526398][ T7679] syz.2.561: attempt to access beyond end of device [ 232.526398][ T7679] loop2: rw=524288, sector=185, nr_sectors = 8 limit=128 [ 232.551748][ T7679] syz.2.561: attempt to access beyond end of device [ 232.551748][ T7679] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 232.575030][ T7679] syz.2.561: attempt to access beyond end of device [ 232.575030][ T7679] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 232.594036][ T7701] loop3: detected capacity change from 0 to 256 [ 232.619386][ T7679] syz.2.561: attempt to access beyond end of device [ 232.619386][ T7679] loop2: rw=0, sector=151, nr_sectors = 1 limit=128 [ 232.634725][ T7701] exfat: Deprecated parameter 'utf8' [ 232.658126][ T7701] exfat: Deprecated parameter 'utf8' [ 232.697925][ T7701] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 233.166141][ T7275] IPVS: starting estimator thread 0... [ 233.462907][ T7713] IPVS: using max 16 ests per chain, 38400 per kthread [ 233.967503][ T7720] loop2: detected capacity change from 0 to 4096 [ 234.057847][ T7720] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.162935][ T7720] EXT4-fs (loop2): Test dummy encryption mode enabled [ 234.524279][ T7720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.792131][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.060515][ T7754] mmap: syz.0.580 (7754) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 238.088217][ T7763] loop3: detected capacity change from 0 to 256 [ 238.158997][ T7765] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 238.205438][ T7763] FAT-fs (loop3): Directory bread(block 64) failed [ 238.230420][ T7763] FAT-fs (loop3): Directory bread(block 65) failed [ 238.273980][ T7763] FAT-fs (loop3): Directory bread(block 66) failed [ 238.283953][ T7765] CIFS: Attempting to mount //127.0.0.1/share [ 238.302122][ T7763] FAT-fs (loop3): Directory bread(block 67) failed [ 238.331145][ T7763] FAT-fs (loop3): Directory bread(block 68) failed [ 238.362831][ T7763] FAT-fs (loop3): Directory bread(block 69) failed [ 238.385233][ T7763] FAT-fs (loop3): Directory bread(block 70) failed [ 238.418170][ T7763] FAT-fs (loop3): Directory bread(block 71) failed [ 238.455239][ T7763] FAT-fs (loop3): Directory bread(block 72) failed [ 238.466105][ T7763] FAT-fs (loop3): Directory bread(block 73) failed [ 238.510045][ T7772] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3307313091/3307313093 [ 238.525053][ T7772] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3307313091/3307313092 [ 238.536399][ T7772] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3307313091/3307313093 [ 238.546514][ T7772] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3307313091/3307313092 [ 238.979350][ T7765] CIFS: VFS: Error connecting to socket. Aborting operation. [ 238.988102][ T7765] CIFS: VFS: cifs_mount failed w/return code = -4 [ 239.932212][ T7794] netlink: 'syz.2.591': attribute type 1 has an invalid length. [ 239.975096][ T7794] netlink: 'syz.2.591': attribute type 4 has an invalid length. [ 239.983111][ T7794] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.591'. [ 240.198489][ T7797] loop4: detected capacity change from 0 to 4096 [ 240.236874][ T7797] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 240.324604][ T7797] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 240.346043][ T7797] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 240.504231][ T7797] vlan2: entered promiscuous mode [ 240.522944][ T7797] vlan2: entered allmulticast mode [ 240.528154][ T7797] hsr_slave_1: entered allmulticast mode [ 240.544411][ T7799] all: renamed from lo (while UP) [ 240.765537][ T7802] tipc: Failed to remove unknown binding: 66,0,0/0:2607180202/2607180204 [ 240.790585][ T7802] tipc: Failed to remove unknown binding: 66,0,0/0:2607180202/2607180203 [ 240.808115][ T7802] tipc: Failed to remove unknown binding: 66,0,0/0:2607180202/2607180204 [ 240.839500][ T7802] tipc: Failed to remove unknown binding: 66,0,0/0:2607180202/2607180203 [ 244.494076][ T7833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.605'. [ 244.961849][ T7838] loop4: detected capacity change from 0 to 1024 [ 245.850542][ T1194] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 246.109144][ T1194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 246.134280][ T1194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 246.149831][ T1194] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.196295][ T1194] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 246.240066][ T1194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.325897][ T1194] usb 3-1: Product: syz [ 246.373971][ T1194] usb 3-1: Manufacturer: syz [ 246.415073][ T1194] usb 3-1: SerialNumber: syz [ 246.684074][ T1194] usb 3-1: config 0 descriptor?? [ 246.806984][ T1194] adutux 3-1:0.0: interrupt endpoints not found [ 246.972636][ T7864] netlink: 'syz.3.616': attribute type 1 has an invalid length. [ 247.032478][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.615'. [ 247.036778][ T7864] bond5: entered promiscuous mode [ 247.056264][ T7864] 8021q: adding VLAN 0 to HW filter on device bond5 [ 247.077629][ T7869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.615'. [ 247.096300][ T1194] usb 3-1: USB disconnect, device number 4 [ 247.139148][ T7870] bridge6: entered promiscuous mode [ 247.155849][ T7870] bond5: (slave bridge6): Enslaving as a backup interface with an up link [ 247.167554][ T1141] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 247.299746][ T7864] veth7: entered promiscuous mode [ 247.319699][ T7864] veth7: entered allmulticast mode [ 247.332507][ T42] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 247.355160][ T7864] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 247.899330][ T7883] fuse: Bad value for 'fd' [ 249.098748][ T7900] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 253.207283][ T7939] netlink: 44 bytes leftover after parsing attributes in process `syz.4.636'. [ 253.251522][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 253.301332][ T7939] netlink: 16 bytes leftover after parsing attributes in process `syz.4.636'. [ 254.626568][ T7956] syzkaller0: entered promiscuous mode [ 254.637948][ T7956] syzkaller0: entered allmulticast mode [ 254.647278][ T7953] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 254.872000][ T5766] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 255.072965][ T7975] loop2: detected capacity change from 0 to 512 [ 255.080879][ T5766] usb 4-1: unable to get BOS descriptor or descriptor too short [ 255.092213][ T5766] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 255.113852][ T7975] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 255.125182][ T5766] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 255.149656][ T7975] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.649: iget: bad i_size value: 38620345925642 [ 255.160477][ T5766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.190282][ T7975] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.649: couldn't read orphan inode 15 (err -117) [ 255.203782][ T5766] usb 4-1: Product: syz [ 255.210524][ T5766] usb 4-1: Manufacturer: syz [ 255.218806][ T5766] usb 4-1: SerialNumber: syz [ 255.227277][ T7975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.309319][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 255.309371][ T28] audit: type=1800 audit(1785447148.073:163): pid=7975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.649" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 255.367872][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.515690][ T5766] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 255.533565][ T5766] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 255.551007][ T5766] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 255.562525][ T5766] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 255.576252][ T5766] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 255.587847][ T7982] loop2: detected capacity change from 0 to 4096 [ 255.596572][ T5766] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 255.609960][ T5766] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 255.616006][ T7982] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 255.634123][ T5766] usb 4-1: failed to enable PITCH for EP 0x82 [ 255.746728][ T7982] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 255.777038][ T7982] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 255.787389][ T5766] usb 4-1: USB disconnect, device number 5 [ 255.911874][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 256.024829][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.032641][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.386268][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.652'. [ 256.461881][ T7994] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 256.482327][ T7995] macvlan2: entered promiscuous mode [ 256.487838][ T7995] macvlan2: entered allmulticast mode [ 256.494205][ T7995] bond6: (slave macvlan2): Error -98 calling set_mac_address [ 256.882686][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 256.929654][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 256.953609][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 258.374048][ T8026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.660'. [ 258.632708][ T8029] loop4: detected capacity change from 0 to 164 [ 259.367765][ T8039] overlayfs: failed to clone upperpath [ 260.594054][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.668'. [ 260.747298][ T8031] loop3: detected capacity change from 0 to 40427 [ 260.809965][ T8031] F2FS-fs (loop3): Found nat_bits in checkpoint [ 261.046953][ T8031] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 261.559174][ T23] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 261.835885][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10241, setting to 64 [ 261.916732][ T23] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 261.948703][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.976876][ T23] usb 4-1: config 0 descriptor?? [ 262.417318][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 262.423465][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 262.433037][ T23] usb 4-1: USB disconnect, device number 6 [ 264.868390][ T8058] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 264.886637][ T8077] netlink: 24 bytes leftover after parsing attributes in process `syz.3.674'. [ 265.053406][ T8084] netlink: 'syz.0.678': attribute type 4 has an invalid length. [ 265.270574][ T8084] netlink: 'syz.0.678': attribute type 4 has an invalid length. [ 266.252343][ T8098] loop3: detected capacity change from 0 to 1024 [ 266.634746][ T8105] netlink: 'syz.2.683': attribute type 1 has an invalid length. [ 267.606495][ T8108] 8021q: adding VLAN 0 to HW filter on device bond5 [ 267.623978][ T8108] bond4: (slave bond5): making interface the new active one [ 267.653238][ T8108] bond4: (slave bond5): Enslaving as an active interface with an up link [ 267.711898][ T8110] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 267.968410][ T8105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.683'. [ 267.981578][ T8105] 8021q: adding VLAN 0 to HW filter on device bond4 [ 268.040178][ T8126] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 268.738940][ T8140] loop3: detected capacity change from 0 to 512 [ 268.819837][ T8140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.854400][ T8140] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.336609][ T8140] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 269.583385][ T8140] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2971: inode #15: comm syz.3.691: corrupted xattr block 33: invalid ea_ino [ 269.641738][ T8140] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 269.906643][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.909163][ T8163] tipc: Started in network mode [ 269.921642][ T8163] tipc: Node identity 4, cluster identity 4711 [ 269.927871][ T8163] tipc: Node number set to 4 [ 271.060494][ T8170] syzkaller0: entered promiscuous mode [ 271.066217][ T8170] syzkaller0: entered allmulticast mode [ 271.389255][ T8180] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 271.403759][ T8183] syzkaller0: entered promiscuous mode [ 271.409446][ T8183] syzkaller0: entered allmulticast mode [ 272.454576][ T8190] syzkaller0: entered promiscuous mode [ 272.474551][ T8190] syzkaller0: entered allmulticast mode [ 273.346152][ T8211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.375265][ T5790] wlan1: authenticate with 08:02:11:00:00:00 [ 273.398160][ T5790] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 273.418599][ T1074] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 273.432693][ T1074] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 273.459944][ T1074] wlan1: authentication with 08:02:11:00:00:00 timed out [ 275.215987][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 276.154443][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 276.168942][ T8] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 276.193651][ T8] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 276.210278][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.228780][ T8] usb 5-1: Product: syz [ 276.233363][ T8] usb 5-1: Manufacturer: syz [ 276.238000][ T8] usb 5-1: SerialNumber: syz [ 276.769440][ T8] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 276.862163][ T8] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 276.967598][ T8] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 277.120448][ T8] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 277.166254][ T8] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 277.205295][ T8] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 277.250192][ T8] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 277.330692][ T8] usb 5-1: failed to enable PITCH for EP 0x82 [ 277.420603][ T8] usb 5-1: USB disconnect, device number 3 [ 278.415637][ T7014] udevd[7014]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 278.456505][ T28] audit: type=1800 audit(1785447171.223:164): pid=8252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.722" name="bus" dev="ramfs" ino=15936 res=0 errno=0 [ 278.498268][ T8257] loop4: detected capacity change from 0 to 128 [ 278.651890][ T8257] bond0: (slave team0): Releasing backup interface [ 278.792800][ T8257] bridge_slave_0: left allmulticast mode [ 278.836074][ T8257] bridge_slave_0: left promiscuous mode [ 278.906969][ T8257] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.164604][ T8257] bridge_slave_1: left allmulticast mode [ 279.272943][ T8257] bridge_slave_1: left promiscuous mode [ 279.440375][ T8257] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.543451][ T8257] bond0: (slave bond_slave_0): Releasing backup interface [ 279.611975][ T8257] bond0: (slave bond_slave_1): Releasing backup interface [ 279.667844][ T8257] team0: Port device team_slave_0 removed [ 279.711866][ T8257] team0: Port device team_slave_1 removed [ 279.741109][ T8257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.757837][ T8257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.793835][ T8257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.808667][ T8257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.961666][ T8277] loop2: detected capacity change from 0 to 256 [ 280.812216][ T8292] loop4: detected capacity change from 0 to 1024 [ 280.827176][ T8292] EXT4-fs: inline encryption not supported [ 280.858135][ T8292] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 280.973907][ T8292] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #3: block 1: comm syz.4.735: lblock 1 mapped to illegal pblock 1 (length 1) [ 280.993476][ T8292] EXT4-fs (loop4): Remounting filesystem read-only [ 281.000234][ T8292] Quota error (device loop4): write_blk: dquota write failed [ 281.007969][ T8292] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 281.020746][ T8292] EXT4-fs (loop4): 1 orphan inode deleted [ 281.037194][ T8292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.489770][ T6824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.519908][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.738'. [ 283.571975][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.738'. [ 283.607285][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.738'. [ 283.820941][ T8316] bridge0: entered promiscuous mode [ 283.920321][ T8316] bridge0: entered allmulticast mode [ 284.057788][ T8319] loop3: detected capacity change from 0 to 256 [ 284.318233][ T8319] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 284.977078][ T8326] loop4: detected capacity change from 0 to 8192 [ 285.013356][ T8326] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 286.974372][ T8349] loop4: detected capacity change from 0 to 128 [ 287.011898][ T8349] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 287.161495][ T8349] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.335885][ T28] audit: type=1804 audit(1785447180.103:165): pid=8349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.752" name="/newroot/106/file1/bus" dev="loop4" ino=12 res=1 errno=0 [ 287.470823][ T8355] loop2: detected capacity change from 0 to 1024 [ 287.478492][ T8355] EXT4-fs: inline encryption not supported [ 287.504010][ T8355] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 287.542031][ T8355] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #3: block 1: comm syz.2.751: lblock 1 mapped to illegal pblock 1 (length 1) [ 287.557427][ T8355] EXT4-fs (loop2): Remounting filesystem read-only [ 287.564155][ T8355] Quota error (device loop2): write_blk: dquota write failed [ 287.571711][ T8355] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 287.582546][ T8355] EXT4-fs (loop2): 1 orphan inode deleted [ 287.589668][ T8355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.285376][ T6824] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 289.054228][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 290.753060][ T8392] netlink: 'syz.0.765': attribute type 1 has an invalid length. [ 290.776251][ T8389] loop4: detected capacity change from 0 to 4096 [ 291.042469][ T8392] 8021q: adding VLAN 0 to HW filter on device bond6 [ 291.084826][ T8392] bond5: (slave bond6): making interface the new active one [ 291.100691][ T8392] bond5: (slave bond6): Enslaving as an active interface with an up link [ 291.154454][ T8398] bond5: (slave gretap2): Enslaving as a backup interface with an up link [ 291.189616][ T8399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.765'. [ 291.274104][ T8399] 8021q: adding VLAN 0 to HW filter on device bond5 [ 295.174922][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.118861][ T8436] loop4: detected capacity change from 0 to 512 [ 297.183861][ T8436] EXT4-fs (loop4): can't mount with both data=journal and dax [ 297.567277][ T7006] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 300.492646][ T8462] loop2: detected capacity change from 0 to 128 [ 300.571774][ T8462] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 300.617935][ T8462] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.686934][ T28] audit: type=1804 audit(1785447193.453:166): pid=8462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.784" name="/newroot/188/file1/bus" dev="loop2" ino=12 res=1 errno=0 [ 304.774329][ T8484] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8485] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8484] [ 306.363790][ T5779] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 309.144512][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.799'. [ 309.251068][ T8511] bond7: entered promiscuous mode [ 309.256297][ T8511] bond7: entered allmulticast mode [ 309.516958][ T8524] loop4: detected capacity change from 0 to 256 [ 310.099846][ T8524] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 312.876290][ T8548] xfrm0: entered allmulticast mode [ 318.573778][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.800293][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.474198][ T8601] bond4: (slave veth0_to_bond): Releasing active interface [ 320.549726][ T8601] bond2: (slave bridge3): Releasing backup interface [ 320.596029][ T8601] bond3: (slave bridge4): Releasing backup interface [ 320.611951][ T8601] bond3: (slave bridge4): the permanent HWaddr of slave - 32:b2:89:d5:2c:ff - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 320.653745][ T8601] bridge4: left allmulticast mode [ 320.694189][ T8601] bond3: (slave bridge5): Releasing backup interface [ 320.706535][ T8601] bridge5: left allmulticast mode [ 320.787144][ T8601] bond5: (slave bridge6): Removing an active aggregator [ 320.807377][ T8601] bond5: (slave bridge6): Releasing backup interface [ 320.814535][ T8601] bond5: (slave bridge6): the permanent HWaddr of slave - de:0f:82:52:e1:3c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 320.837829][ T8610] loop2: detected capacity change from 0 to 256 [ 320.868805][ T8601] bridge6: left promiscuous mode [ 320.889075][ T8610] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 320.929112][ T8601] bond5: (slave veth7): Releasing backup interface [ 321.018832][ T8601] bond6: (slave bridge7): Releasing backup interface [ 323.630367][ T5766] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 323.820198][ T5766] usb 4-1: Using ep0 maxpacket: 8 [ 323.847168][ T5766] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.862193][ T5766] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 323.887276][ T5766] usb 4-1: config 1 has no interface number 0 [ 323.904729][ T5766] usb 4-1: config 1 interface 2 has no altsetting 1 [ 323.927491][ T5766] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 323.939829][ T5766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.968583][ T5766] usb 4-1: Product: syz [ 323.983073][ T5766] usb 4-1: Manufacturer: syz [ 323.987773][ T5766] usb 4-1: SerialNumber: syz [ 324.016807][ T8643] bond4: (slave veth0_to_bond): Releasing active interface [ 324.082549][ T8643] bond5: (slave bond6): Releasing backup interface [ 324.089351][ T8643] bond5: (slave bond6): the permanent HWaddr of slave - ba:79:fa:f7:19:cb - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 324.114094][ T8643] bond5: (slave gretap2): making interface the new active one [ 324.145387][ T8643] bond5: (slave gretap2): Releasing backup interface [ 324.264919][ T8643] syz.0.839 (8643) used greatest stack depth: 18160 bytes left [ 325.105666][ T5766] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 325.358205][ T5766] snd-usb-audio: probe of 4-1:1.2 failed with error -22 [ 325.398095][ T5766] usb 4-1: USB disconnect, device number 7 [ 325.462090][ T8654] Bluetooth: MGMT ver 1.22 [ 325.506044][ T7014] udevd[7014]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 328.593752][ T28] audit: type=1326 audit(1785447221.333:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.0.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 328.620171][ T28] audit: type=1326 audit(1785447221.363:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.0.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 328.684704][ T28] audit: type=1326 audit(1785447221.363:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.0.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 328.760277][ T28] audit: type=1326 audit(1785447221.363:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.0.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 328.815035][ T28] audit: type=1326 audit(1785447221.363:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.0.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 328.849150][ T8683] netlink: 'syz.0.851': attribute type 1 has an invalid length. [ 328.860552][ T28] audit: type=1326 audit(1785447221.363:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.0.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 329.032126][ T8683] veth5: entered allmulticast mode [ 329.052291][ T28] audit: type=1326 audit(1785447221.363:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.0.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 329.114627][ T8683] bond8: (slave veth5): Enslaving as an active interface with a down link [ 329.124453][ T28] audit: type=1326 audit(1785447221.383:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.0.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 329.792908][ T8685] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 329.871078][ T28] audit: type=1326 audit(1785447221.393:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.0.848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 332.700453][ T8701] bridge1: entered promiscuous mode [ 333.523181][ T8701] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 334.656274][ T8723] smc: net device lo applied user defined pnetid SYZ0 [ 337.042555][ T8743] syzkaller0: create flow: hash 3618914725 index 1 [ 337.401669][ T42] syzkaller0: tun_net_xmit 76 [ 337.424869][ T42] syzkaller0: tun_net_xmit 48 [ 337.434630][ T23] syzkaller0: tun_net_xmit 76 [ 337.722689][ T8740] syzkaller0: delete flow: hash 3618914725 index 1 [ 340.986755][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.871'. [ 341.003638][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.872'. [ 341.017700][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.872'. [ 341.029752][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.872'. [ 341.074527][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.872'. [ 341.083576][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.872'. [ 341.124221][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.872'. [ 341.133345][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.872'. [ 341.231845][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.872'. [ 341.240917][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.872'. [ 342.372012][ T8759] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.381094][ T8759] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.389996][ T8759] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.508973][ T8759] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.518179][ T8759] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.527406][ T8759] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.022881][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.032173][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.701408][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.721047][ T1194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.835986][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.845802][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.962287][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.007796][ T6924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.011168][ T8815] netlink: 'syz.2.889': attribute type 1 has an invalid length. [ 347.061908][ T6924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.175668][ T8815] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 347.187832][ T8815] bond7 (unregistering): Released all slaves [ 347.234822][ T8823] bridge5: entered promiscuous mode [ 347.255621][ T8823] bond6: (slave bridge5): making interface the new active one [ 347.269292][ T8823] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 348.180876][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.200723][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.461350][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.472104][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.481738][ T6924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.527381][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.646056][ T8860] syzkaller0: entered promiscuous mode [ 350.677562][ T8860] syzkaller0: entered allmulticast mode [ 350.760871][ T8866] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 352.965238][ T7275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.307705][ T1141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.419872][ T8896] __nla_validate_parse: 137 callbacks suppressed [ 353.419898][ T8896] netlink: 16 bytes leftover after parsing attributes in process `syz.4.911'. [ 353.436095][ T8896] netlink: 17 bytes leftover after parsing attributes in process `syz.4.911'. [ 353.582375][ T8896] tipc: Invalid UDP bearer configuration [ 353.583828][ T8896] tipc: Enabling of bearer rejected, failed to enable media [ 354.252588][ T8904] syzkaller0: entered promiscuous mode [ 354.258161][ T8904] syzkaller0: entered allmulticast mode [ 354.582691][ T1074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.124634][ T6924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.046376][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.165425][ T6924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.340800][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.397493][ T8955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.406776][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.459403][ T8955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.468377][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.477329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.504527][ T8958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.354417][ T7275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.549041][ T8978] syzkaller0: entered promiscuous mode [ 362.570410][ T8978] syzkaller0: entered allmulticast mode [ 362.622437][ T8983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.939'. [ 364.303696][ T6924] net_ratelimit: 2 callbacks suppressed [ 364.303796][ T6924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.179218][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.181790][ T9006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.946'. [ 365.301761][ T9004] netlink: 'syz.0.945': attribute type 8 has an invalid length. [ 365.409929][ T9009] netlink: zone id is out of range [ 365.422779][ T9009] netlink: zone id is out of range [ 365.435521][ T9009] netlink: zone id is out of range [ 365.445665][ T9009] netlink: zone id is out of range [ 365.459267][ T9009] netlink: zone id is out of range [ 365.471816][ T9009] netlink: zone id is out of range [ 365.480854][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.483920][ T9009] netlink: zone id is out of range [ 365.613874][ T9011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.949'. [ 365.623779][ T9011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.949'. [ 365.801240][ T9015] netlink: 'syz.4.951': attribute type 5 has an invalid length. [ 365.822461][ T9018] netlink: 'syz.2.952': attribute type 1 has an invalid length. [ 365.915295][ T9018] 8021q: adding VLAN 0 to HW filter on device bond7 [ 366.023923][ T9023] bond7: entered allmulticast mode [ 366.109000][ T9018] bond7: (slave ip6gretap1): making interface the new active one [ 366.119665][ T9018] ip6gretap1: entered allmulticast mode [ 366.127951][ T9018] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 366.810524][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.956'. [ 366.860490][ T9034] tipc: Started in network mode [ 366.865644][ T9034] tipc: Node identity 2007ff, cluster identity 4711 [ 366.883006][ T9034] tipc: Node number set to 2099199 [ 369.416763][ T9047] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 370.308654][ T9058] netlink: 'syz.4.961': attribute type 11 has an invalid length. [ 370.584778][ T61] net_ratelimit: 27 callbacks suppressed [ 370.584797][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.070589][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.143192][ T9063] overlayfs: unescaped trailing colons in lowerdir mount option. [ 372.471785][ T6924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.782203][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.890266][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.924166][ T9104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.940842][ T9104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.949290][ T9104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.002050][ T9109] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 378.867407][ T9141] fuse: Bad value for 'fd' [ 378.912864][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.919439][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.166192][ T9143] team0: Port device bridge0 added [ 379.216205][ T9144] bridge0: left promiscuous mode [ 379.449522][ T9144] bond2: left promiscuous mode [ 379.478738][ T9144] bridge2: left promiscuous mode [ 379.516458][ T9144] bridge5: left promiscuous mode [ 379.668717][ T9150] netlink: 'syz.4.987': attribute type 1 has an invalid length. [ 379.690438][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.980'. [ 379.733421][ T9150] 8021q: adding VLAN 0 to HW filter on device bond2 [ 379.804181][ T9150] bond2: (slave syz_tun): making interface the new active one [ 379.841724][ T9150] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 379.901818][ T9153] bond2: entered promiscuous mode [ 379.913803][ T9153] syz_tun: entered promiscuous mode [ 379.976782][ T9153] bond2: entered allmulticast mode [ 379.988022][ T9153] syz_tun: entered allmulticast mode [ 383.263888][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.999'. [ 384.507299][ T9205] syzkaller0: entered promiscuous mode [ 384.524791][ T9205] syzkaller0: entered allmulticast mode [ 385.905309][ T9219] team0: Port device bridge0 added [ 386.410337][ T9231] IPVS: Unknown mcast interface: vcan0 [ 387.967630][ T9259] ip6erspan0: entered allmulticast mode [ 388.896946][ T1194] IPVS: starting estimator thread 0... [ 389.124135][ T9277] IPVS: using max 18 ests per chain, 43200 per kthread [ 392.788865][ T9318] netlink: 'syz.2.1030': attribute type 9 has an invalid length. [ 393.043365][ T9328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1032'. [ 397.960871][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1047'. [ 398.666440][ T9393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1055'. [ 398.850242][ T9396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1055'. [ 398.907873][ T9396] veth3: entered promiscuous mode [ 399.221911][ T9396] veth3: entered allmulticast mode [ 400.516279][ T9419] overlayfs: failed to clone upperpath [ 400.797153][ T1194] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 400.886833][ T9424] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1064'. [ 401.010244][ T1194] usb 5-1: Using ep0 maxpacket: 32 [ 401.780352][ T1194] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 401.825511][ T1194] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 401.834746][ T1194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.842881][ T1194] usb 5-1: Product: syz [ 401.847092][ T1194] usb 5-1: Manufacturer: syz [ 401.861191][ T1194] usb 5-1: SerialNumber: syz [ 401.873613][ T1194] usb 5-1: config 0 descriptor?? [ 401.879695][ T9417] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 401.934129][ T1194] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 403.029281][ T1194] usb 5-1: USB disconnect, device number 4 [ 403.184382][ T9420] udevd[9420]: setting owner of /dev/bus/usb/005/004 to uid=0, gid=0 failed: No such file or directory [ 404.047229][ T9448] udevd[9448]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 404.648696][ T9455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1073'. [ 405.132728][ T9468] netlink: 'syz.0.1077': attribute type 1 has an invalid length. [ 405.258654][ T9468] 8021q: adding VLAN 0 to HW filter on device bond10 [ 406.415584][ T9472] bond10: (slave veth9): Enslaving as an active interface with a down link [ 406.556052][ T9468] bond10: (slave macvlan1): making interface the new active one [ 406.621658][ T9468] macvlan1: entered promiscuous mode [ 406.633049][ T9468] bond10: (slave macvlan1): Enslaving as an active interface with an up link [ 408.050272][ T5821] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 408.247177][ T5821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.264105][ T5821] usb 5-1: config 0 has no interfaces? [ 408.274258][ T5821] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 408.288543][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.298719][ T5821] usb 5-1: Product: syz [ 408.307602][ T5821] usb 5-1: Manufacturer: syz [ 409.286623][ T5821] usb 5-1: SerialNumber: syz [ 409.300946][ T5821] usb 5-1: config 0 descriptor?? [ 409.733288][ T5821] usb 5-1: USB disconnect, device number 5 [ 413.388826][ T9534] gretap3: entered promiscuous mode [ 418.679795][ T9598] netlink: 'syz.3.1115': attribute type 4 has an invalid length. [ 420.452652][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'. [ 420.484431][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'. [ 420.493825][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'. [ 420.507786][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'. [ 420.517839][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'. [ 421.000293][ T7275] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 421.982030][ T7275] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 422.020591][ T7275] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 422.101193][ T7275] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 422.116636][ T7275] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 422.127143][ T7275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 422.139048][ T7275] usb 4-1: SerialNumber: syz [ 422.325090][ T1074] macvlan1: left promiscuous mode [ 422.473318][ T7275] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 422.512537][ T7275] usb 4-1: USB disconnect, device number 8 [ 422.904844][ T28] audit: type=1326 audit(1785447315.670:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.2.1129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68fef9e019 code=0x0 [ 423.596008][ T9655] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 428.539568][ T9653] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.550196][ T9653] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.569900][ T9653] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.589581][ T9653] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.899248][ T9653] bond2: left allmulticast mode [ 429.319559][ T9653] bond7: left promiscuous mode [ 429.348572][ T9653] bond7: left allmulticast mode [ 429.358331][ T9653] veth5: left allmulticast mode [ 429.462605][ T9715] netlink: 'syz.2.1144': attribute type 1 has an invalid length. [ 429.691820][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1144'. [ 429.777931][ T9719] bridge6: entered promiscuous mode [ 429.812016][ T9719] bond8: (slave bridge6): making interface the new active one [ 429.834509][ T9719] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 429.857301][ T9721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1145'. [ 429.900810][ T9727] bond11: entered promiscuous mode [ 429.910475][ T9727] bond11: entered allmulticast mode [ 439.251383][ T9823] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1176'. [ 440.344340][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.350971][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.775104][ T28] audit: type=1326 audit(1785447339.540:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.2.1193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fef9e019 code=0x7ffc0000 [ 446.944003][ T28] audit: type=1326 audit(1785447339.540:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.2.1193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fef9e019 code=0x7ffc0000 [ 447.750386][ T28] audit: type=1326 audit(1785447339.540:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.2.1193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fef9e019 code=0x7ffc0000 [ 447.879542][ T28] audit: type=1326 audit(1785447339.570:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.2.1193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fef9e019 code=0x7ffc0000 [ 447.950629][ T28] audit: type=1326 audit(1785447339.570:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.2.1193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f68fef9e019 code=0x7ffc0000 [ 448.028174][ T28] audit: type=1326 audit(1785447340.170:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.2.1193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f68fef5e84e code=0x7ffc0000 [ 448.240464][ T28] audit: type=1326 audit(1785447340.170:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.2.1193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f68fef5e84e code=0x7ffc0000 [ 448.765869][ T28] audit: type=1326 audit(1785447340.170:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.2.1193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f68fef5e84e code=0x7ffc0000 [ 448.812807][ T28] audit: type=1326 audit(1785447340.170:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.2.1193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f68fef5e84e code=0x7ffc0000 [ 448.885457][ T28] audit: type=1326 audit(1785447340.170:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.2.1193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f68fef5e84e code=0x7ffc0000 [ 449.185567][ T9920] xt_hashlimit: max too large, truncated to 1048576 [ 451.497109][ T9954] netlink: 'syz.4.1220': attribute type 1 has an invalid length. [ 452.446076][ T9954] veth5: entered allmulticast mode [ 452.469298][ T9954] bond3: (slave veth5): Enslaving as an active interface with a down link [ 452.581303][ T9960] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 453.594356][ T9979] smc: net device lo applied user defined pnetid SYZ0 [ 453.885414][ T9993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1221'. [ 453.988674][ T9993] veth11: entered allmulticast mode [ 454.159226][ T9993] bond7: (slave veth11): Enslaving as an active interface with an up link [ 454.177427][ T9996] bond7 (unregistering): (slave veth11): Releasing backup interface [ 454.189515][ T9996] bond7 (unregistering): Released all slaves [ 455.175082][T10006] smc: net device lo applied user defined pnetid SYZ0 [ 456.436180][T10022] netlink: 'syz.0.1229': attribute type 322 has an invalid length. [ 462.110582][T10049] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1237'. [ 462.961786][T10055] bridge0: port 1(syz_tun) entered blocking state [ 462.968517][T10055] bridge0: port 1(syz_tun) entered disabled state [ 463.020443][T10055] syz_tun: entered allmulticast mode [ 463.027540][T10055] syz_tun: entered promiscuous mode [ 465.143683][ T6924] libceph: connect (1)[c::]:6789 error -101 [ 467.299456][ T6924] libceph: mon0 (1)[c::]:6789 connect error [ 467.313394][T10069] ceph: No mds server is up or the cluster is laggy [ 468.608127][T10113] xt_CONNSECMARK: invalid mode: 66 [ 469.343749][T10122] netlink: 'syz.0.1259': attribute type 1 has an invalid length. [ 469.578250][T10122] 8021q: adding VLAN 0 to HW filter on device bond12 [ 469.609130][T10122] bridge6: entered promiscuous mode [ 469.928908][T10122] bond12: (slave bridge6): making interface the new active one [ 470.117689][T10122] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 472.093307][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 472.093588][ T28] audit: type=1326 audit(1785447364.850:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10159 comm="syz.3.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 472.480225][ T28] audit: type=1326 audit(1785447364.890:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10159 comm="syz.3.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 472.563703][ T28] audit: type=1326 audit(1785447364.910:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10159 comm="syz.3.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 472.668750][ T28] audit: type=1326 audit(1785447364.950:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10159 comm="syz.3.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 472.938643][ T28] audit: type=1326 audit(1785447365.010:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10159 comm="syz.3.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 472.977977][ T28] audit: type=1326 audit(1785447365.020:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10159 comm="syz.3.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 473.003171][ T28] audit: type=1326 audit(1785447365.020:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10159 comm="syz.3.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 473.033537][ T28] audit: type=1326 audit(1785447365.020:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10159 comm="syz.3.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 473.435975][ T28] audit: type=1326 audit(1785447365.040:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10159 comm="syz.3.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 473.556213][ T28] audit: type=1326 audit(1785447365.040:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10159 comm="syz.3.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 473.919411][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 477.871041][T10202] bond_slave_0: entered promiscuous mode [ 477.877401][T10202] bond_slave_1: entered promiscuous mode [ 478.060599][T10202] vlan2: entered promiscuous mode [ 478.087817][T10202] bond0: entered promiscuous mode [ 481.429560][T10237] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1287'. [ 482.006970][T10269] Set syz1 is full, maxelem 2 reached [ 482.920271][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 482.920311][ T28] audit: type=1326 audit(1785447375.360:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.0.1295" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 483.399271][ T28] audit: type=1326 audit(1785447375.360:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.0.1295" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 483.424317][ T28] audit: type=1326 audit(1785447375.380:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.0.1295" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 483.457321][ T28] audit: type=1326 audit(1785447375.390:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.0.1295" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 483.499366][ T28] audit: type=1326 audit(1785447375.390:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.0.1295" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7f3919e019 code=0x7ffc0000 [ 483.702074][ T28] audit: type=1326 audit(1785447375.450:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.0.1295" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7f3915e84e code=0x7ffc0000 [ 483.788020][ T28] audit: type=1326 audit(1785447375.470:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.0.1295" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7f3915e84e code=0x7ffc0000 [ 483.820156][ T28] audit: type=1326 audit(1785447375.480:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.0.1295" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7f3915e84e code=0x7ffc0000 [ 483.890802][ T28] audit: type=1326 audit(1785447375.490:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.0.1295" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7f3915e84e code=0x7ffc0000 [ 483.954728][ T28] audit: type=1326 audit(1785447375.500:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.0.1295" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7f3915e84e code=0x7ffc0000 [ 484.818814][T10300] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 485.842639][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 485.857412][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 485.866657][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 485.923106][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 485.932368][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 485.993614][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 486.002947][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 486.054899][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 486.064114][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 486.462810][T10308] __nla_validate_parse: 14 callbacks suppressed [ 486.462830][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 486.478433][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 486.955323][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 486.964513][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 486.982253][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 486.991488][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 487.014661][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 487.023912][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 487.042531][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 487.051866][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 488.435567][T10308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.529519][T10308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.092006][T10308] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.101062][T10308] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.110074][T10308] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.119089][T10308] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.306306][T10308] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.315542][T10308] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.324681][T10308] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.333645][T10308] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.472861][T10308] __nla_validate_parse: 130 callbacks suppressed [ 491.472882][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 491.488416][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 491.497784][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 491.506962][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 491.531584][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 491.540869][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 491.549876][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 491.558957][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 491.584335][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 491.593600][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 492.878168][T10357] syzkaller0: entered promiscuous mode [ 492.908197][T10357] syzkaller0: entered allmulticast mode [ 493.819116][T10365] syzkaller0: entered promiscuous mode [ 493.824880][T10365] syzkaller0: entered allmulticast mode [ 501.982865][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.989262][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.499138][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 504.499157][ T28] audit: type=1326 audit(1785447397.260:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10434 comm="syz.4.1339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138159e019 code=0x7ffc0000 [ 504.559608][T10423] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 504.586802][T10423] ref_ctr increment failed for inode: 0x7c9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880259dd580 [ 504.600449][ T28] audit: type=1326 audit(1785447397.260:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10434 comm="syz.4.1339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f138159e019 code=0x7ffc0000 [ 504.652971][T10433] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 504.674990][ T28] audit: type=1326 audit(1785447397.260:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10434 comm="syz.4.1339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f138159dd82 code=0x7ffc0000 [ 504.712063][T10433] ref_ctr decrement failed for inode: 0x7c9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880259dd580 [ 504.739556][ T28] audit: type=1326 audit(1785447397.300:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10434 comm="syz.4.1339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f138155e84e code=0x7ffc0000 [ 504.810103][ T28] audit: type=1326 audit(1785447397.340:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10434 comm="syz.4.1339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f138159de47 code=0x7ffc0000 [ 504.876984][ T28] audit: type=1326 audit(1785447397.340:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10434 comm="syz.4.1339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f138155e84e code=0x7ffc0000 [ 504.930791][ T28] audit: type=1326 audit(1785447397.350:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10434 comm="syz.4.1339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f138155e84e code=0x7ffc0000 [ 504.984829][ T28] audit: type=1326 audit(1785447397.370:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10434 comm="syz.4.1339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138159e019 code=0x7ffc0000 [ 505.060158][ T28] audit: type=1326 audit(1785447397.390:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10434 comm="syz.4.1339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138159e019 code=0x7ffc0000 [ 505.129383][ T28] audit: type=1326 audit(1785447397.400:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10434 comm="syz.4.1339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f138159e019 code=0x7ffc0000 [ 506.312618][T10452] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 506.506286][T10452] bond10 (unregistering): Released all slaves [ 507.607076][T10471] (null): rxe_set_mtu: Set mtu to 4096 [ 507.639665][T10471] lo speed is unknown, defaulting to 1000 [ 508.281761][T10471] lo speed is unknown, defaulting to 1000 [ 508.356995][T10471] lo speed is unknown, defaulting to 1000 [ 509.413215][T10471] infiniband syz0: set down [ 509.421368][ T9712] lo speed is unknown, defaulting to 1000 [ 509.428644][T10471] infiniband syz0: added lo [ 509.437094][T10471] syz0: rxe_create_cq: returned err = -12 [ 509.443966][T10471] infiniband syz0: Couldn't create ib_mad CQ [ 509.450423][T10471] infiniband syz0: Couldn't open port 1 [ 509.571197][T10471] RDS/IB: syz0: added [ 509.576369][T10471] smc: adding ib device syz0 with port count 1 [ 509.611516][T10471] smc: ib device syz0 port 1 has pnetid [ 509.635127][ T5821] lo speed is unknown, defaulting to 1000 [ 509.845268][T10471] lo speed is unknown, defaulting to 1000 [ 509.864243][T10500] netlink: 'syz.3.1354': attribute type 1 has an invalid length. [ 510.912254][T10504] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 510.998162][T10504] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 511.069539][T10504] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 511.128690][T10504] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 511.164188][T10504] bond7: (slave geneve2): making interface the new active one [ 511.198647][T10504] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 511.229137][T10505] __nla_validate_parse: 15 callbacks suppressed [ 511.229161][T10505] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1354'. [ 511.250267][T10505] 8021q: adding VLAN 0 to HW filter on device bond7 [ 511.417257][T10471] lo speed is unknown, defaulting to 1000 [ 513.362014][T10471] lo speed is unknown, defaulting to 1000 [ 514.203578][T10471] lo speed is unknown, defaulting to 1000 [ 514.534269][T10471] lo speed is unknown, defaulting to 1000 [ 519.772867][T10606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1379'. [ 519.782239][T10606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1379'. [ 519.791555][T10606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1379'. [ 519.800589][T10606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1379'. [ 519.809573][T10606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1379'. [ 519.818874][T10606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1379'. [ 519.827944][T10606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1379'. [ 519.837014][T10606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1379'. [ 519.846073][T10606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1379'. [ 519.855102][T10606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1379'. [ 521.634860][T10613] IPv6: sit2: Disabled Multicast RS [ 521.676255][T10617] lo speed is unknown, defaulting to 1000 [ 521.901982][T10618] lo speed is unknown, defaulting to 1000 [ 524.432412][T10631] bridge7: port 1(veth7) entered blocking state [ 524.464251][T10631] bridge7: port 1(veth7) entered disabled state [ 524.500693][T10631] veth7: entered allmulticast mode [ 524.548683][T10631] veth7: entered promiscuous mode [ 524.600458][T10628] bridge7: port 2(veth0_to_bond) entered blocking state [ 524.635665][T10628] bridge7: port 2(veth0_to_bond) entered disabled state [ 524.655954][T10628] veth0_to_bond: entered allmulticast mode [ 524.695869][T10628] veth0_to_bond: entered promiscuous mode [ 525.310972][T10651] netlink: 'syz.0.1389': attribute type 11 has an invalid length. [ 525.888804][T10657] xt_connbytes: Forcing CT accounting to be enabled [ 525.895923][T10657] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 525.908447][T10657] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 526.459173][T10651] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 526.537343][T10651] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 526.837135][T10666] __nla_validate_parse: 208 callbacks suppressed [ 526.837181][T10666] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1391'. [ 531.698490][T10705] netlink: 'syz.2.1405': attribute type 1 has an invalid length. [ 531.791141][T10705] 8021q: adding VLAN 0 to HW filter on device bond10 [ 531.839496][T10708] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 531.858526][T10708] bond11: left promiscuous mode [ 531.876461][T10708] bridge6: left promiscuous mode [ 532.016428][T10709] 8021q: adding VLAN 0 to HW filter on device bond10 [ 532.030834][T10709] bond10: (slave ip6gre0): The slave device specified does not support setting the MAC address [ 532.049075][T10709] bond10: (slave ip6gre0): Error -95 calling set_mac_address [ 532.110286][T10705] bond10: entered promiscuous mode [ 532.135171][T10705] bond10: entered allmulticast mode [ 532.621036][T10718] netlink: 'syz.4.1403': attribute type 1 has an invalid length. [ 532.665086][T10718] 8021q: adding VLAN 0 to HW filter on device bond4 [ 532.916278][T10718] bond3: (slave veth0_to_bond): Releasing active interface [ 532.945309][T10718] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 536.402170][T10760] bridge0: port 1(syz_tun) entered blocking state [ 536.409289][T10760] bridge0: port 1(syz_tun) entered listening state [ 536.439961][T10760] team0: Port device bridge0 added [ 536.491024][T10760] bridge0: port 1(syz_tun) entered disabled state [ 536.571023][T10760] bond1: left promiscuous mode [ 536.583812][T10760] bond5: left promiscuous mode [ 536.590503][T10760] veth7: left promiscuous mode [ 537.015096][T10773] binder_alloc: 10772: pid 10772 spamming oneway? 2 buffers allocated for a total size of 5120 [ 537.032503][T10775] IPVS: Error joining to the multicast group [ 537.231200][T10773] binder_alloc: 10772: pid 10772 spamming oneway? 3 buffers allocated for a total size of 5128 [ 538.035456][T10784] netlink: 'syz.2.1427': attribute type 11 has an invalid length. [ 543.906251][T10847] netlink: 'syz.3.1446': attribute type 9 has an invalid length. [ 545.198466][T10855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1448'. [ 549.110383][T10905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1467'. [ 549.200570][T10909] overlayfs: failed to clone upperpath [ 549.207229][T10908] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1467'. [ 549.226434][T10908] veth13: entered promiscuous mode [ 549.238772][T10908] veth13: entered allmulticast mode [ 551.841595][T10939] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1478'. [ 553.376988][T10958] netlink: 'syz.3.1483': attribute type 11 has an invalid length. [ 554.652110][T10970] netlink: 'syz.3.1484': attribute type 1 has an invalid length. [ 554.697075][T10970] 8021q: adding VLAN 0 to HW filter on device bond8 [ 554.712976][T10975] bridge0: port 1(syz_tun) entered disabled state [ 554.806654][T10975] syz_tun: left allmulticast mode [ 554.857571][T10975] syz_tun: left promiscuous mode [ 554.917316][T10975] bridge0: port 1(syz_tun) entered disabled state [ 554.999813][T10975] bond8: (slave syz_tun): making interface the new active one [ 555.015191][T10975] bond8: (slave syz_tun): Enslaving as an active interface with an up link [ 555.588841][T10970] bond8: entered promiscuous mode [ 555.623192][T10970] syz_tun: entered promiscuous mode [ 555.653646][T10970] bond8: entered allmulticast mode [ 555.687224][T10970] syz_tun: entered allmulticast mode [ 557.870618][T11002] tipc: Cannot configure node identity twice [ 560.568881][T11023] netlink: 'syz.0.1501': attribute type 1 has an invalid length. [ 560.609551][T11023] 8021q: adding VLAN 0 to HW filter on device bond14 [ 562.552023][T11023] 8021q: adding VLAN 0 to HW filter on device bond14 [ 562.567479][T11023] bond14: (slave ip6gre0): The slave device specified does not support setting the MAC address [ 562.581374][T11023] bond14: (slave ip6gre0): Error -95 calling set_mac_address [ 563.552645][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.559343][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.691682][T11031] bond14: entered promiscuous mode [ 563.720858][T11031] bond14: entered allmulticast mode [ 569.010935][T11096] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 570.364173][T11113] netlink: 'syz.3.1529': attribute type 4 has an invalid length. [ 572.550992][T11134] random: crng reseeded on system resumption [ 573.812116][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1537'. [ 573.838623][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1537'. [ 573.869791][T11148] netlink: 'syz.2.1537': attribute type 4 has an invalid length. [ 573.892845][T11148] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1537'. [ 573.980919][T11148] .`: renamed from bond0 [ 577.109312][ T51] Bluetooth: hci2: unexpected subevent 0x0e length: 32 > 15 [ 577.559710][T11192] veth7: entered allmulticast mode [ 577.814040][T11198] xt_l2tp: invalid flags combination: 0 [ 579.118358][T11188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1548'. [ 579.159321][T11188] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 582.872428][T11219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1553'. [ 584.336469][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 584.336485][ T28] audit: type=1326 audit(1785447476.430:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.3.1560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 584.559183][ T28] audit: type=1326 audit(1785447476.430:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.3.1560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 584.610108][ T28] audit: type=1326 audit(1785447476.430:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.3.1560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 584.680080][ T28] audit: type=1326 audit(1785447476.430:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.3.1560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 584.741858][ T28] audit: type=1326 audit(1785447476.430:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.3.1560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 584.790263][ T28] audit: type=1326 audit(1785447476.430:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.3.1560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 584.875146][ T28] audit: type=1326 audit(1785447476.430:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.3.1560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 584.967824][ T28] audit: type=1326 audit(1785447476.430:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.3.1560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 584.992369][ T28] audit: type=1326 audit(1785447476.430:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.3.1560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 585.016577][ T28] audit: type=1326 audit(1785447476.430:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.3.1560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 585.823042][T11241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1563'. [ 587.832590][T11249] veth9: entered allmulticast mode [ 587.879893][T11249] bond0: (slave veth9): Enslaving as an active interface with an up link [ 588.229576][T11261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1568'. [ 588.749924][T11241] bond0 (unregistering): (slave veth9): Releasing backup interface [ 588.981394][T11241] bond0 (unregistering): Released all slaves [ 591.123027][T11300] syzkaller0: entered promiscuous mode [ 591.128590][T11300] syzkaller0: entered allmulticast mode [ 594.238904][T11346] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1600'. [ 594.248817][T11346] openvswitch: netlink: ct_state flags 00030000 unsupported [ 596.830434][T11372] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 598.269119][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 598.269140][ T28] audit: type=1326 audit(1785447490.340:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.4.1604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138159e019 code=0x7ffc0000 [ 598.372384][ T28] audit: type=1326 audit(1785447490.340:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.4.1604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138159e019 code=0x7ffc0000 [ 598.461668][ T28] audit: type=1326 audit(1785447490.340:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.4.1604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138159e019 code=0x7ffc0000 [ 598.486145][ T28] audit: type=1326 audit(1785447491.070:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.4.1604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f138155e84e code=0x7ffc0000 [ 598.528391][ T28] audit: type=1326 audit(1785447491.070:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.4.1604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f138159e019 code=0x7ffc0000 [ 598.604440][ T28] audit: type=1326 audit(1785447491.100:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.4.1604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f138155e84e code=0x7ffc0000 [ 598.696592][ T28] audit: type=1326 audit(1785447491.100:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.4.1604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f138155e84e code=0x7ffc0000 [ 598.771938][ T28] audit: type=1326 audit(1785447491.100:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.4.1604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f138155e84e code=0x7ffc0000 [ 598.860223][ T28] audit: type=1326 audit(1785447491.100:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.4.1604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f138155e84e code=0x7ffc0000 [ 598.930190][ T28] audit: type=1326 audit(1785447491.100:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.4.1604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f138155e84e code=0x7ffc0000 [ 599.459092][T11387] tipc: Enabled bearer , priority 10 [ 599.903662][T11387] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1611'. [ 599.975091][T11387] tipc: Enabling of bearer rejected, failed to enable media [ 603.624097][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 603.624116][ T28] audit: type=1326 audit(1785447496.390:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.3.1626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 603.676656][T11433] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1625'. [ 603.681531][ T28] audit: type=1326 audit(1785447496.420:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.3.1626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 603.722318][T11435] sock: sock_set_timeout: `syz.3.1626' (pid 11435) tries to set negative timeout [ 603.772141][ T28] audit: type=1326 audit(1785447496.420:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.3.1626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 603.804271][ T28] audit: type=1326 audit(1785447496.430:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.3.1626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 603.899435][ T28] audit: type=1326 audit(1785447496.430:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.3.1626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 605.200294][ T28] audit: type=1326 audit(1785447496.430:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.3.1626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 605.290407][ T28] audit: type=1326 audit(1785447496.430:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.3.1626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 605.550217][ T28] audit: type=1326 audit(1785447496.430:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.3.1626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 605.574530][ T28] audit: type=1326 audit(1785447496.430:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.3.1626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 605.639407][ T28] audit: type=1326 audit(1785447496.430:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.3.1626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e759e019 code=0x7ffc0000 [ 606.513010][T11460] syzkaller0: entered promiscuous mode [ 606.518587][T11460] syzkaller0: entered allmulticast mode [ 607.855140][T11468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1640'. [ 614.470865][T11519] lo speed is unknown, defaulting to 1000 [ 616.588119][T11520] lo speed is unknown, defaulting to 1000 [ 622.533950][T11566] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1664'. [ 623.686787][T11580] tipc: Enabling of bearer rejected, failed to enable media [ 624.664201][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.673703][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.349279][T11609] lo speed is unknown, defaulting to 1000 [ 625.745175][T11611] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by ""[11611] [ 627.400353][T11610] lo speed is unknown, defaulting to 1000 [ 630.605893][T11632] syzkaller0: entered promiscuous mode [ 630.611739][T11632] syzkaller0: entered allmulticast mode [ 630.626625][ T51] Bluetooth: hci1: unexpected event for opcode 0x080d [ 631.298695][T11651] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 632.487544][T11657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1688'. [ 634.681881][ T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 634.696101][ T51] Bluetooth: hci1: Injecting HCI hardware error event [ 634.708807][ T51] Bluetooth: hci1: hardware error 0x00 [ 635.918898][T11684] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 636.034760][T11684] bond9 (unregistering): Released all slaves [ 636.123861][T11693] xt_hashlimit: max too large, truncated to 1048576 [ 636.166789][T11695] wg1: entered promiscuous mode [ 636.176063][T11695] wg1: entered allmulticast mode [ 637.470326][ T51] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 640.167665][T11733] lo speed is unknown, defaulting to 1000 [ 642.306956][T11734] lo speed is unknown, defaulting to 1000 [ 643.011711][T11745] overlayfs: failed to clone upperpath [ 643.321321][T11741] lo speed is unknown, defaulting to 1000 [ 646.167394][T11790] BUG: unable to handle page fault for address: fffffffffffffbc8 [ 646.175666][T11790] #PF: supervisor read access in kernel mode [ 646.181697][T11790] #PF: error_code(0x0000) - not-present page [ 646.187738][T11790] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 [ 646.193798][T11790] Oops: 0000 [#1] PREEMPT SMP KASAN [ 646.199403][T11790] CPU: 1 PID: 11790 Comm: syz.0.1728 Not tainted syzkaller #0 [ 646.206941][T11790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 646.217068][T11790] RIP: 0010:strlen+0x39/0x70 [ 646.221892][T11790] Code: ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 <42> 80 7c 3f 01 00 75 de eb 19 89 d9 80 e1 07 38 c1 7c e6 49 89 fc [ 646.241697][T11790] RSP: 0018:ffffc9000c3e6bd8 EFLAGS: 00010286 [ 646.247907][T11790] RAX: 0000000000000000 RBX: fffffffffffffbc9 RCX: 0000000000080000 [ 646.255923][T11790] RDX: ffffc9000c9d9000 RSI: 0000000000000bef RDI: fffffffffffffbc8 [ 646.264396][T11790] RBP: ffffc9000c3e6d08 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 646.272425][T11790] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: dffffc0000000000 [ 646.280537][T11790] R13: ffff888018666680 R14: dffffc0000000000 R15: ffffffffffffffff [ 646.288648][T11790] FS: 00007f7f3a08f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 646.297662][T11790] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 646.304328][T11790] CR2: fffffffffffffbc8 CR3: 000000004c833000 CR4: 00000000003506e0 [ 646.312351][T11790] DR0: 0000000000000008 DR1: 0000000000000000 DR2: 0000000000000000 [ 646.320351][T11790] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 646.328351][T11790] Call Trace: [ 646.331653][T11790] [ 646.334730][T11790] trace_event_raw_event_drv_net_setup_tc+0x109/0x4d0 [ 646.341734][T11790] ? perf_trace_drv_twt_teardown_request+0x480/0x480 [ 646.348504][T11790] ieee80211_netdev_setup_tc+0x2c2/0x320 [ 646.354218][T11790] tcf_block_offload_cmd+0x235/0x3a0 [ 646.359617][T11790] ? net_generic+0x240/0x240 [ 646.364235][T11790] ? down_read_killable+0x340/0x340 [ 646.369543][T11790] tcf_block_get_ext+0xdf2/0x13d0 [ 646.374634][T11790] ? qdisc_alloc+0x95/0xa40 [ 646.379171][T11790] tcf_block_get+0x68/0xa0 [ 646.383620][T11790] ? tcf_block_get+0xa0/0xa0 [ 646.388326][T11790] multiq_init+0x72/0x2b0 [ 646.392740][T11790] ? multiq_peek+0x300/0x300 [ 646.397374][T11790] qdisc_create+0x90f/0x1060 [ 646.402021][T11790] ? qdisc_notify+0x370/0x370 [ 646.406751][T11790] ? lockdep_rtnl_is_held+0x26/0x30 [ 646.412092][T11790] ? qdisc_lookup+0x361/0x6c0 [ 646.416811][T11790] tc_modify_qdisc+0xb47/0x1de0 [ 646.421727][T11790] ? qdisc_offload_query_caps+0x150/0x150 [ 646.427509][T11790] ? qdisc_offload_query_caps+0x150/0x150 [ 646.433286][T11790] rtnetlink_rcv_msg+0x843/0xf90 [ 646.438257][T11790] ? rtnetlink_rcv_msg+0x220/0xf90 [ 646.443394][T11790] ? rtnetlink_bind+0x80/0x80 [ 646.448095][T11790] ? mark_lock+0x94/0x320 [ 646.452508][T11790] ? __lock_acquire+0x1262/0x7d80 [ 646.457565][T11790] ? mark_lock+0x94/0x320 [ 646.461928][T11790] ? mark_lock+0x94/0x320 [ 646.466289][T11790] ? __lock_acquire+0x1262/0x7d80 [ 646.471346][T11790] ? kmalloc_reserve+0x95/0x240 [ 646.476340][T11790] ? verify_lock_unused+0x140/0x140 [ 646.481569][T11790] ? verify_lock_unused+0x140/0x140 [ 646.486804][T11790] netlink_rcv_skb+0x235/0x4c0 [ 646.491777][T11790] ? rtnetlink_bind+0x80/0x80 [ 646.496479][T11790] ? netlink_ack+0x1160/0x1160 [ 646.501279][T11790] ? __lock_acquire+0x7d80/0x7d80 [ 646.506414][T11790] ? net_generic+0x1e/0x240 [ 646.510983][T11790] ? netlink_deliver_tap+0x2e/0x1b0 [ 646.516213][T11790] netlink_unicast+0x7b1/0x930 [ 646.521040][T11790] netlink_sendmsg+0x8d0/0xbf0 [ 646.525856][T11790] ? netlink_getsockopt+0x590/0x590 [ 646.531166][T11790] ? apparmor_socket_sendmsg+0x8e/0x330 [ 646.536787][T11790] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 646.542117][T11790] ? security_socket_sendmsg+0x80/0xa0 [ 646.547619][T11790] ? netlink_getsockopt+0x590/0x590 [ 646.552839][T11790] ____sys_sendmsg+0x61b/0x980 [ 646.557689][T11790] ? __asan_memset+0x22/0x40 [ 646.562348][T11790] ? __sys_sendmsg_sock+0x30/0x30 [ 646.567397][T11790] ? __import_iovec+0x5f2/0x850 [ 646.572336][T11790] ? import_iovec+0x73/0xa0 [ 646.576871][T11790] ___sys_sendmsg+0x2a6/0x360 [ 646.581606][T11790] ? __sys_sendmsg+0x2b0/0x2b0 [ 646.586414][T11790] ? put_user_ifreq+0x85/0xb0 [ 646.591132][T11790] __se_sys_sendmsg+0x1d0/0x2c0 [ 646.596012][T11790] ? __x64_sys_sendmsg+0x80/0x80 [ 646.600978][T11790] ? lockdep_hardirqs_on+0x98/0x150 [ 646.606616][T11790] do_syscall_64+0x55/0xb0 [ 646.611091][T11790] ? clear_bhb_loop+0x40/0x90 [ 646.615901][T11790] ? clear_bhb_loop+0x40/0x90 [ 646.620626][T11790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 646.626555][T11790] RIP: 0033:0x7f7f3919e019 [ 646.631007][T11790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.650639][T11790] RSP: 002b:00007f7f3a08f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.659090][T11790] RAX: ffffffffffffffda RBX: 00007f7f39425fa0 RCX: 00007f7f3919e019 [ 646.667091][T11790] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 646.675088][T11790] RBP: 00007f7f3923500c R08: 0000000000000000 R09: 0000000000000000 [ 646.683086][T11790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.691077][T11790] R13: 00007f7f39426038 R14: 00007f7f39425fa0 R15: 00007ffd7901f918 [ 646.699083][T11790] [ 646.702131][T11790] Modules linked in: [ 646.706063][T11790] CR2: fffffffffffffbc8 [ 646.710244][T11790] ---[ end trace 0000000000000000 ]--- [ 646.715719][T11790] RIP: 0010:strlen+0x39/0x70 [ 646.720346][T11790] Code: ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 <42> 80 7c 3f 01 00 75 de eb 19 89 d9 80 e1 07 38 c1 7c e6 49 89 fc [ 646.740026][T11790] RSP: 0018:ffffc9000c3e6bd8 EFLAGS: 00010286 [ 646.746167][T11790] RAX: 0000000000000000 RBX: fffffffffffffbc9 RCX: 0000000000080000 [ 646.754169][T11790] RDX: ffffc9000c9d9000 RSI: 0000000000000bef RDI: fffffffffffffbc8 [ 646.762170][T11790] RBP: ffffc9000c3e6d08 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 646.770173][T11790] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: dffffc0000000000 [ 646.778285][T11790] R13: ffff888018666680 R14: dffffc0000000000 R15: ffffffffffffffff [ 646.786303][T11790] FS: 00007f7f3a08f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 646.795266][T11790] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 646.801878][T11790] CR2: fffffffffffffbc8 CR3: 000000004c833000 CR4: 00000000003506e0 [ 646.809970][T11790] DR0: 0000000000000008 DR1: 0000000000000000 DR2: 0000000000000000 [ 646.817978][T11790] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 646.826056][T11790] Kernel panic - not syncing: Fatal exception [ 646.832679][T11790] Kernel Offset: disabled [ 646.837056][T11790] Rebooting in 86400 seconds..