last executing test programs: 10m49.759864119s ago: executing program 32 (id=287): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r1, &(0x7f0000000800)={0x2, 0x1f90, @loopback}, 0x10) sendmsg(r1, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000840)="ec", 0x1}], 0x1}, 0x8084) r2 = accept(r0, 0x0, 0x0) shutdown(r2, 0x1) 10m40.223858599s ago: executing program 2 (id=330): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x200, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x200}}, 0x0) 10m39.875703987s ago: executing program 2 (id=332): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x84) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) 10m39.180647534s ago: executing program 2 (id=334): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg$kcm(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/80, 0x50}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000340)="b8", 0x1}], 0x1}, 0x4000001) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) close(r0) 10m38.869380772s ago: executing program 2 (id=335): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYRES16=0x0, @ANYRESDEC, @ANYRES64], 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) 10m38.491712421s ago: executing program 2 (id=336): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') chdir(&(0x7f00000003c0)='./bus\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f00000011c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r2, &(0x7f0000003cc0)=""/4128, 0x1020) 10m37.987797363s ago: executing program 2 (id=337): open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) close(0x3) syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000}, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x159b, 0x1c881, 0x8, 0xd1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m37.507252645s ago: executing program 33 (id=337): open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) close(0x3) syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000}, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x159b, 0x1c881, 0x8, 0xd1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m32.325234707s ago: executing program 5 (id=1382): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x7}) 8m31.899090737s ago: executing program 5 (id=1384): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 8m31.753588101s ago: executing program 5 (id=1387): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') 8m31.511965727s ago: executing program 5 (id=1389): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 8m31.36283399s ago: executing program 5 (id=1391): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c, 0x0, 0x0, 0x40000000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 8m29.758613189s ago: executing program 5 (id=1399): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000100)=0xfff, 0x4) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x10) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d5) 8m29.392843258s ago: executing program 34 (id=1399): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000100)=0xfff, 0x4) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x10) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d5) 6m45.086368507s ago: executing program 1 (id=2197): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xffffffffffffffed, 0x2, 0x10000, 0x3, 0x2004002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x180, 0x35d, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m44.663239026s ago: executing program 1 (id=2202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6m44.413951272s ago: executing program 1 (id=2206): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) write$cgroup_devices(r1, &(0x7f00000005c0)=ANY=[], 0xfffffeff) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x34068096) 6m44.144069959s ago: executing program 1 (id=2208): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000240)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, 0x0) 6m43.892016405s ago: executing program 1 (id=2213): syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1b6042c, 0x0, 0xff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000002540)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, 0x0, 0x100) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) 6m42.742043723s ago: executing program 1 (id=2218): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)='9d', 0x2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) recvfrom(r1, &(0x7f0000000240)=""/85, 0x55, 0x100, 0x0, 0x0) 6m42.03981312s ago: executing program 35 (id=2218): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)='9d', 0x2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) recvfrom(r1, &(0x7f0000000240)=""/85, 0x55, 0x100, 0x0, 0x0) 6m14.493662005s ago: executing program 6 (id=2338): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) vmsplice(r3, &(0x7f0000000540)=[{&(0x7f00000003c0)="16", 0x1}], 0x1, 0x2) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0x6, 0xc) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000002c0)) close_range(r0, 0xffffffffffffffff, 0x0) 6m13.935904008s ago: executing program 6 (id=2342): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_score_adj\x00') fcntl$setstatus(r0, 0x4, 0x40800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x2, 0x0, 0x8}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m13.099089419s ago: executing program 7 (id=2353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m12.944530282s ago: executing program 6 (id=2354): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) mount$tmpfs(0x0, 0x0, 0x0, 0x2e40ab, &(0x7f0000000140)=ANY=[@ANYBLOB='nr_inodf']) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="15000000652e"], 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r2, 0x0) 6m12.670882579s ago: executing program 6 (id=2356): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000240)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, 0x0) 6m12.64219873s ago: executing program 7 (id=2357): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0xfffffffd, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 6m12.414788575s ago: executing program 7 (id=2358): r0 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) remap_file_pages(&(0x7f00003f1000/0x4000)=nil, 0x4000, 0x0, 0x2, 0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) futex(0x0, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) 6m12.402983985s ago: executing program 6 (id=2359): clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futex(0x0, 0x100, 0x1, &(0x7f0000000340)={r0, r1+60000000}, 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r3 = fanotify_init(0xf00, 0x2) fanotify_mark(r3, 0x105, 0x8971, r2, 0x0) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000200), 0x3c}], 0x4c) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) getrlimit(0xb, 0x0) 6m10.788127274s ago: executing program 6 (id=2363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) 6m10.380005204s ago: executing program 36 (id=2363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) 6m10.12950432s ago: executing program 7 (id=2367): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000240)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, 0x0) 6m9.783009048s ago: executing program 7 (id=2369): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x30, &(0x7f0000000040)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x22, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xe, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}, 'Xy'}}}}}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'lblcr\x00', 0x1, 0xa8a, 0x4}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6m9.269275391s ago: executing program 7 (id=2370): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(r0, 0x0, 0x0) 6m8.401851192s ago: executing program 37 (id=2370): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(r0, 0x0, 0x0) 3m9.775498753s ago: executing program 8 (id=3269): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 3m9.578800758s ago: executing program 8 (id=3271): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c0) r0 = open(&(0x7f0000000300)='.\x00', 0x100, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x5000002a, r1, 0x0) mkdirat(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r3 = open(&(0x7f0000000200)='.\x00', 0x301f00, 0x393) renameat2(r3, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x2) read$FUSE(r2, &(0x7f0000004fc0)={0x2020}, 0x2020) 3m9.227358597s ago: executing program 8 (id=3274): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3m8.763592788s ago: executing program 8 (id=3277): openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 3m8.457081055s ago: executing program 8 (id=3279): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="b70000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000700)='hello', 0x5) recvfrom(r0, &(0x7f0000000040)=""/156, 0x9c, 0x101, 0x0, 0x0) 3m7.883253179s ago: executing program 8 (id=3283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) 3m7.399180771s ago: executing program 38 (id=3283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) 2.162892137s ago: executing program 9 (id=4255): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000040)=0x5e25, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r2, &(0x7f0000001140), 0x74e, 0x0, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none}, 0x8) listen(r0, 0x5) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0) 2.014040231s ago: executing program 9 (id=4257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffc00}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 1.606256951s ago: executing program 9 (id=4262): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000940)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1.572970202s ago: executing program 3 (id=4263): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb\v1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2', &(0x7f0000000300)='\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xc9\xe1\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x17\x81>\t\xc30-\xe2\xb3\xb00xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="dc52b390", 0xfffffede}, {&(0x7f0000000000)="7681", 0x2}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)='`', 0xfffffe3a}, {&(0x7f0000000080)="cb25", 0x2}, {&(0x7f00000011c0)="b488c5", 0x3}, {&(0x7f0000000340)="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", 0x109}], 0x7, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4011) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) 935.931507ms ago: executing program 4 (id=4273): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x400000, &(0x7f00000000c0)={[{@noload}, {@abort}, {@data_err_ignore}, {@acl}, {@oldalloc}, {@errors_remount}]}, 0xff, 0x467, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, 0x0, 0x22042, 0x20) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000440)='g', 0x1, 0x4fed3) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000340)={0x130, 0xfffffffffffffffe, 0x0, {0x7e40, 0x0, 0x0, '\x00', {0x40, 0x3ff, 0x4621d334, 0x3, 0xee00, 0x0, 0xc000, '\x00', 0x80000000, 0x40, 0x0, 0x8, {0x4be, 0x6}, {0xac0f, 0x5}, {0x8, 0x3}, {0x3, 0x5}, 0x200, 0xd, 0x3, 0x3}}}, 0xe) truncate(&(0x7f00000001c0)='./file1\x00', 0x4fed4) 922.150447ms ago: executing program 3 (id=4274): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x3, 0x5ca, &(0x7f0000000c40)="$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") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB='\x00'/21], 0x50) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_clone3(&(0x7f0000000340)={0x122125000, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$MSR(0x0, 0x0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) sync() sync() process_mrelease(r1, 0x0) 840.696359ms ago: executing program 0 (id=4276): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r2 = dup(r1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r3 = syz_open_pts(r1, 0x80) r4 = dup3(r3, r1, 0x80000) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000001c0)={0x3, 0x2, 0x2, 0xfbdfffd3, 0x3, "65bd219f000062f800", 0xfffff7a4, 0xc}) write$9p(r2, &(0x7f0000000040)="01", 0x1) readv(r4, &(0x7f0000000c00)=[{&(0x7f0000000280)=""/33, 0x21}], 0x1) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000300)=""/85, 0x55}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 619.962725ms ago: executing program 0 (id=4277): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x8) getitimer(0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) write(r1, &(0x7f0000000100)="8f2a0a65bd8c00dc190000000000005f39808619400f04000e0580a7b6070d63e286a5cefe", 0x25) fremovexattr(r0, 0xfffffffffffffffc) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES64=r0, @ANYBLOB="fab0817dbcb5f31a80001280110001006272696467655f736c6176650000000068000580050019000300000005000900010000000500050000000000080025000000000006001f00d5000000050007000200000005000a000000000005000800000000000400180005000600010000000500090001000000050005000100"], 0xb4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) 592.808486ms ago: executing program 4 (id=4278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/114, 0x72}], 0x1, 0x8, 0x4) 561.978746ms ago: executing program 0 (id=4279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x6f631b4376e74f12, {0x2, 0x0, @rand_addr=0x64010102}, 'ip6gretap0\x00'}) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4d, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 418.97174ms ago: executing program 0 (id=4280): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x6, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x42, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0xfffffffb, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffc0003, 0x5, 0x4, 0x8, 0x101, 0x90, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf7, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffe, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x1, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x4, 0x8, 0x86, 0x3, 0x7, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80000000, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x1, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0xf0c1, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x6, 0x10006, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x1ff, 0x7fffffff, 0x12]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 417.59413ms ago: executing program 4 (id=4281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[], 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) close(0x3) 387.189691ms ago: executing program 3 (id=4282): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, 0x0, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x8082, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001e}, [@FRA_SRC={0x8, 0x2, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) 191.754885ms ago: executing program 3 (id=4283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000000), 0x0}, 0x20) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x8000) 191.324685ms ago: executing program 0 (id=4284): r0 = gettid() r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x10000, 0x68000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet(0x2, 0x5, 0x0) listen(r2, 0x7) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) 190.929735ms ago: executing program 9 (id=4285): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000300)=""/19, &(0x7f0000000340)=0x13) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x28) 156.585686ms ago: executing program 4 (id=4286): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0xdbad7101ada84e39, 0xcc, 0x6, 0x9, 0x24, @loopback, @local, 0x40, 0x700, 0x76a0, 0x6}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8840) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000180)='./bus\x00', 0x10000, &(0x7f0000000100), 0xfe, 0x572, &(0x7f0000000240)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x8}]}, {0x0, [0x0, 0x30, 0x30, 0x0, 0x2e, 0x61, 0x60]}}, 0x0, 0x2d, 0x0, 0x4}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) 61.323619ms ago: executing program 4 (id=4287): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1], 0x20) 0s ago: executing program 3 (id=4288): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x70bd2a, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) kernel console output (not intermixed with test programs): 4:1466652092/1466652094 [ 417.551380][T13561] tipc: Failed to remove unknown binding: 66,0,0/9480874:1466652092/1466652093 [ 418.997311][T13584] ceph: No mds server is up or the cluster is laggy [ 419.024981][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 419.073196][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 420.039262][T13611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.431310][T13611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.620682][T13615] erspan0: entered promiscuous mode [ 420.682611][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2421'. [ 420.843504][T13621] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2423'. [ 421.837705][T13656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2434'. [ 423.536706][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2440'. [ 423.895128][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2442'. [ 426.349453][T13758] ip_tables: iptables: counters copy to user failed while replacing table [ 429.880066][T13823] xt_hashlimit: size too large, truncated to 1048576 [ 430.668473][T13852] netlink: 'syz.4.2479': attribute type 10 has an invalid length. [ 430.730974][T13852] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.789192][T13852] bond0: (slave team0): Enslaving as an active interface with an up link [ 433.224953][T13882] FAULT_INJECTION: forcing a failure. [ 433.224953][T13882] name failslab, interval 1, probability 0, space 0, times 1 [ 433.267232][T13882] CPU: 0 PID: 13882 Comm: syz.8.2489 Not tainted syzkaller #0 [ 433.274861][T13882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 433.284980][T13882] Call Trace: [ 433.288400][T13882] [ 433.291547][T13882] dump_stack_lvl+0x18c/0x250 [ 433.296526][T13882] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 433.302963][T13882] ? show_regs_print_info+0x20/0x20 [ 433.308400][T13882] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 433.315091][T13882] should_fail_ex+0x394/0x4c0 [ 433.320510][T13882] should_failslab+0x9/0x20 [ 433.325455][T13882] slab_pre_alloc_hook+0x59/0x300 [ 433.330681][T13882] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 433.336943][T13882] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 433.343429][T13882] __kmem_cache_alloc_node+0x53/0x250 [ 433.348864][T13882] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 433.354995][T13882] __kmalloc+0xa7/0x240 [ 433.359561][T13882] tomoyo_realpath_from_path+0xe6/0x5c0 [ 433.365242][T13882] ? tomoyo_domain+0xd6/0x120 [ 433.369971][T13882] tomoyo_path_perm+0x282/0x560 [ 433.375052][T13882] ? tomoyo_path_perm+0x250/0x560 [ 433.380146][T13882] ? tomoyo_path_permission+0x3a0/0x3a0 [ 433.385815][T13882] security_inode_getattr+0xd3/0x120 [ 433.391190][T13882] __x64_sys_newfstat+0x12c/0x250 [ 433.396257][T13882] ? __ia32_sys_newfstatat+0x1f0/0x1f0 [ 433.401776][T13882] ? lockdep_hardirqs_on+0x98/0x150 [ 433.407027][T13882] do_syscall_64+0x55/0xb0 [ 433.411849][T13882] ? clear_bhb_loop+0x40/0x90 [ 433.417095][T13882] ? clear_bhb_loop+0x40/0x90 [ 433.421814][T13882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 433.427812][T13882] RIP: 0033:0x7f8055d9e0d9 [ 433.432331][T13882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.453332][T13882] RSP: 002b:00007f8056cd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 433.462214][T13882] RAX: ffffffffffffffda RBX: 00007f8056025fa0 RCX: 00007f8055d9e0d9 [ 433.470580][T13882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 433.474390][T13886] gretap0: entered promiscuous mode [ 433.479523][T13882] RBP: 00007f8055e35024 R08: 0000000000000000 R09: 0000000000000000 [ 433.479587][T13882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.479599][T13882] R13: 00007f8056026038 R14: 00007f8056025fa0 R15: 00007ffceb6dd568 [ 433.479629][T13882] [ 433.561752][T13882] ERROR: Out of memory at tomoyo_realpath_from_path. [ 436.423662][T13926] netlink: 201392 bytes leftover after parsing attributes in process `syz.9.2503'. [ 436.474750][T13926] netlink: zone id is out of range [ 436.550532][T13926] netlink: zone id is out of range [ 436.556507][T13926] netlink: zone id is out of range [ 436.627259][T13926] netlink: zone id is out of range [ 436.632499][T13926] netlink: zone id is out of range [ 436.667887][T13926] netlink: zone id is out of range [ 436.673097][T13926] netlink: zone id is out of range [ 436.784208][T13926] netlink: zone id is out of range [ 436.832910][T13926] netlink: zone id is out of range [ 436.865758][T13926] netlink: zone id is out of range [ 438.373146][T13899] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.414418][T13899] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.448552][T13899] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.468879][T13899] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.390055][ T23] IPVS: starting estimator thread 0... [ 439.497854][T13957] IPVS: using max 22 ests per chain, 52800 per kthread [ 440.100749][T13978] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2521'. [ 440.391105][ T27] audit: type=1326 audit(1787626323.966:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.0.2522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 440.397272][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.426509][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.548838][ T27] audit: type=1326 audit(1787626323.966:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.0.2522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 440.672776][ T27] audit: type=1326 audit(1787626324.006:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.0.2522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 440.814200][ T27] audit: type=1326 audit(1787626324.016:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.0.2522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 440.906199][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 440.919824][ T27] audit: type=1326 audit(1787626324.026:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.0.2522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 440.964774][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 441.013726][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 441.021098][ T27] audit: type=1326 audit(1787626324.026:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.0.2522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 441.095297][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 441.138667][ T27] audit: type=1326 audit(1787626324.026:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.0.2522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 441.171163][ T27] audit: type=1326 audit(1787626324.026:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.0.2522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 441.209646][ T27] audit: type=1326 audit(1787626324.046:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.0.2522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 441.214655][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 441.238323][ T27] audit: type=1326 audit(1787626324.046:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.0.2522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 441.384682][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 441.421245][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 441.462433][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 441.514960][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 441.558728][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 441.577057][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 441.588359][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 441.597435][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 441.606386][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 441.637135][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 441.659783][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 441.660827][T14000] bridge0: port 1(vlan2) entered disabled state [ 441.694678][ T9] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0 [ 441.797642][ T9] hid-generic 0006:0008:0008.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 442.044557][T14014] fido_id[14014]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 442.641220][T14000] infiniband syz1: set down [ 443.619556][T14000] tipc: Resetting bearer [ 443.729334][T14000] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.746716][T14000] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.759056][T14000] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.771814][T14000] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.048485][T14000] netdevsim netdevsim0 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0 [ 444.058177][T14000] netdevsim netdevsim0 netdevsim1: unset [0, 1] type 1 family 0 port 256 - 0 [ 444.068784][T14000] netdevsim netdevsim0 netdevsim2: unset [0, 1] type 1 family 0 port 256 - 0 [ 444.078446][T14000] netdevsim netdevsim0 netdevsim3: unset [0, 1] type 1 family 0 port 256 - 0 [ 444.110057][T14000] netdevsim netdevsim0 netdevsim0: unset [0, 2] type 1 family 0 port 60387 - 0 [ 444.119813][T14000] netdevsim netdevsim0 netdevsim1: unset [0, 2] type 1 family 0 port 60387 - 0 [ 444.129262][T14000] netdevsim netdevsim0 netdevsim2: unset [0, 2] type 1 family 0 port 60387 - 0 [ 444.138656][T14000] netdevsim netdevsim0 netdevsim3: unset [0, 2] type 1 family 0 port 60387 - 0 [ 444.167778][T14000] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.180188][T14000] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.190005][T14000] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.199223][T14000] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.046308][T14044] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.054478][T14044] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.901895][T14044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.804410][T14044] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.813918][T14044] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.824075][T14044] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.835713][T14044] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.368314][T14108] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2554'. [ 448.920606][T14160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2568'. [ 450.857249][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 451.064241][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.101894][ T9] usb 10-1: config 0 has no interfaces? [ 451.149572][ T9] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 451.193027][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.237140][ T9] usb 10-1: Product: syz [ 451.246659][ T9] usb 10-1: Manufacturer: syz [ 451.273891][ T9] usb 10-1: SerialNumber: syz [ 451.329257][ T9] usb 10-1: config 0 descriptor?? [ 451.701504][T14205] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.779527][ T5841] usb 10-1: USB disconnect, device number 2 [ 453.308234][ T5786] Bluetooth: hci1: hcon ffff888068ab8000 sent 1 < count 1025 [ 453.315828][ T5786] Bluetooth: hci1: hcon ffff888068ab4000 sent 0 < count 21178 [ 455.264898][T14325] loop9: detected capacity change from 0 to 512 [ 455.387359][T14325] EXT4-fs (loop9): can't read group descriptor 0 [ 455.781280][T14340] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2607'. [ 455.811333][T14340] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2607'. [ 456.013154][ T7769] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 456.209775][ T7769] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 456.237346][ T7769] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 456.279950][ T7769] usb 9-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 456.296952][ T7769] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.325675][ T7769] usb 9-1: Product: syz [ 456.336062][ T7769] usb 9-1: Manufacturer: syz [ 456.345934][ T7769] usb 9-1: SerialNumber: syz [ 456.703277][ T7769] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 456.745206][ T7769] usb 9-1: unit 4 not found! [ 456.824057][ T7769] usb 9-1: USB disconnect, device number 2 [ 458.725106][T14420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2627'. [ 459.117449][T14432] netlink: 'syz.9.2631': attribute type 1 has an invalid length. [ 459.239672][T14432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.289135][T14436] bond3: option mode: unable to set because the bond device has slaves [ 459.416730][T14440] bond3: (slave vlan4): Opening slave failed [ 459.501714][T14441] bond1: (slave ip6gretap1): making interface the new active one [ 459.559699][T14441] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 459.595609][T14445] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 460.949528][T14494] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 460.970585][T14494] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 462.029902][T14518] loop9: detected capacity change from 0 to 32768 [ 462.062674][T14518] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop9 scanned by syz.9.2655 (14518) [ 462.214132][T14518] BTRFS info (device loop9): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 462.228416][T14518] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 462.238030][T14518] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 462.248744][T14518] BTRFS info (device loop9): use zstd compression, level 3 [ 462.256025][T14518] BTRFS info (device loop9): force clearing of disk cache [ 462.264936][T14518] BTRFS info (device loop9): enabling disk space caching [ 462.272879][T14518] BTRFS info (device loop9): disk space caching is enabled [ 462.891704][T14518] BTRFS info (device loop9): enabling ssd optimizations [ 462.899069][T14518] BTRFS info (device loop9): auto enabling async discard [ 462.942274][T14518] BTRFS info (device loop9): rebuilding free space tree [ 463.006140][T14518] BTRFS info (device loop9): disabling free space tree [ 463.014442][T14518] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 463.026863][T14518] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 463.129793][T14537] loop8: detected capacity change from 0 to 512 [ 463.266588][T14537] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.985669][T13321] BTRFS info (device loop9): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 464.311885][T13283] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.518734][T14555] overlayfs: failed to clone upperpath [ 464.639210][T14560] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 465.029252][T14572] Core dump to core aborted: cannot preserve file permissions [ 465.775403][T14575] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2668'. [ 468.362689][ T8] libceph: connect (1)[c::]:6789 error -101 [ 468.368977][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 468.459650][T14635] ceph: No mds server is up or the cluster is laggy [ 468.982899][T14662] loop9: detected capacity change from 0 to 1024 [ 469.218982][ T27] kauditd_printk_skb: 33 callbacks suppressed [ 469.219002][ T27] audit: type=1804 audit(1787626352.796:452): pid=14664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.2698" name="/newroot/69/file1/file1" dev="loop9" ino=20 res=1 errno=0 [ 469.295571][ T27] audit: type=1800 audit(1787626352.856:453): pid=14662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2698" name="file1" dev="loop9" ino=20 res=0 errno=0 [ 469.540951][T14673] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2702'. [ 469.640760][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2702'. [ 470.909243][ T27] audit: type=1326 audit(1787626354.486:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14701 comm="syz.8.2713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8055d9e0d9 code=0x7fc00000 [ 470.974800][ T27] audit: type=1326 audit(1787626354.486:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14701 comm="syz.8.2713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8055d9e0d9 code=0x7fc00000 [ 471.105915][T14719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2716'. [ 471.460721][T14727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.563506][T14726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.673217][T14726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.910906][T14739] bond1: (slave veth5): Enslaving as an active interface with a down link [ 471.949561][T14743] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2720'. [ 471.980857][T14743] 8021q: adding VLAN 0 to HW filter on device bond1 [ 472.515118][T14767] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 472.560653][T14768] tipc: Failed to remove unknown binding: 66,0,0/0:3137880890/3137880891 [ 472.575110][T14768] tipc: Failed to remove unknown binding: 66,0,0/0:3137880890/3137880891 [ 472.847733][T14778] netlink: 'syz.9.2732': attribute type 1 has an invalid length. [ 473.000515][T14778] 8021q: adding VLAN 0 to HW filter on device bond2 [ 473.067094][T14778] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 473.103737][T14778] bond2: (slave batadv1): making interface the new active one [ 473.141556][T14778] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 473.233902][T14780] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode [ 473.263992][T14780] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 473.396942][ T27] audit: type=1326 audit(1787626356.976:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14769 comm="syz.8.2730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8055d9e0d9 code=0x7fc00000 [ 473.535639][ T27] audit: type=1326 audit(1787626357.006:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14769 comm="syz.8.2730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8055d9e0d9 code=0x7fc00000 [ 473.647320][ T27] audit: type=1326 audit(1787626357.006:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14769 comm="syz.8.2730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8055d9e0d9 code=0x7fc00000 [ 473.700033][ T27] audit: type=1326 audit(1787626357.006:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14769 comm="syz.8.2730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8055d9e0d9 code=0x7fc00000 [ 473.726030][ T27] audit: type=1326 audit(1787626357.006:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14769 comm="syz.8.2730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8055d9e0d9 code=0x7fc00000 [ 473.757741][ T27] audit: type=1326 audit(1787626357.006:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14769 comm="syz.8.2730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8055d9e0d9 code=0x7fc00000 [ 474.065118][T14803] net_ratelimit: 115 callbacks suppressed [ 474.065222][T14803] 0: reclassify loop, rule prio 0, protocol 03 [ 482.632783][T14862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2760'. [ 483.248369][T14882] bond4: option mode: unable to set because the bond device has slaves [ 483.373644][T14887] Core dump to core aborted: cannot preserve file permissions [ 483.410956][T14882] bond4: (slave veth13): Enslaving as an active interface with a down link [ 483.420213][T14889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2767'. [ 483.436401][T14889] 8021q: adding VLAN 0 to HW filter on device bond4 [ 483.821085][T14895] overlayfs: failed to clone upperpath [ 484.002429][ T27] kauditd_printk_skb: 61 callbacks suppressed [ 484.002447][ T27] audit: type=1804 audit(1787626367.586:523): pid=14897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2772" name="/newroot/86/file0" dev="fuse" ino=1 res=1 errno=0 [ 486.810023][T14954] loop9: detected capacity change from 0 to 1024 [ 486.842010][T14954] EXT4-fs: Ignoring removed bh option [ 486.910350][T14954] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 487.007101][ T27] audit: type=1800 audit(1787626370.586:524): pid=14954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2795" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 487.120551][ T27] audit: type=1800 audit(1787626370.586:525): pid=14954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2795" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 487.196381][T13321] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 487.558577][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2798'. [ 487.688236][T14975] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2798'. [ 488.490254][ T27] audit: type=1326 audit(1787626372.076:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14984 comm="syz.9.2802" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab59e0d9 code=0x7fc00000 [ 488.539189][ T27] audit: type=1326 audit(1787626372.126:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14984 comm="syz.9.2802" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fedab59e0d9 code=0x7fc00000 [ 488.617206][ T27] audit: type=1326 audit(1787626372.176:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14984 comm="syz.9.2802" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fedab597e57 code=0x7fc00000 [ 488.867514][ T27] audit: type=1326 audit(1787626372.176:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14984 comm="syz.9.2802" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedab53f459 code=0x7fc00000 [ 489.285961][ T27] audit: type=1326 audit(1787626372.176:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14984 comm="syz.9.2802" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fedab53f51d code=0x7fc00000 [ 489.467077][ T27] audit: type=1326 audit(1787626372.176:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14984 comm="syz.9.2802" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fedab59e0d9 code=0x7fc00000 [ 489.503914][T14994] netlink: 'syz.0.2805': attribute type 1 has an invalid length. [ 489.656595][T14994] 8021q: adding VLAN 0 to HW filter on device bond4 [ 489.717213][T14996] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 489.745708][T14996] bond4: (slave wlan0): Enslaving as an active interface with a down link [ 489.941356][T14994] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 489.964232][T14994] bond4: (slave batadv1): making interface the new active one [ 489.981141][T15008] Core dump to core aborted: cannot preserve file permissions [ 489.990311][T14994] bond4: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 490.057891][T14994] batadv1: entered promiscuous mode [ 490.065441][T14994] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 490.310615][T15016] loop9: detected capacity change from 0 to 512 [ 490.380915][T15016] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.493471][T15016] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.479085][T13321] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.693066][T15082] XFS (mtdblock0): Invalid superblock magic number [ 494.103605][T15109] block device autoloading is deprecated and will be removed. [ 494.502009][T15117] loop9: detected capacity change from 0 to 512 [ 494.544532][T15117] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 494.577374][T15117] System zones: 1-12 [ 494.627704][T15117] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #12: comm syz.9.2845: missing EA_INODE flag [ 494.719874][T15117] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.2845: error while reading EA inode 12 err=-117 [ 494.789312][T15117] EXT4-fs (loop9): 1 orphan inode deleted [ 494.807769][T15117] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.936020][T15117] EXT4-fs error (device loop9): ext4_read_inode_bitmap:140: comm syz.9.2845: Invalid inode bitmap blk 0 in block_group 0 [ 495.040615][T13321] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.166552][ T27] audit: type=1326 audit(1787626378.746:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15127 comm="syz.8.2849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8055d9e0d9 code=0x7ffc0000 [ 495.209250][ T27] audit: type=1326 audit(1787626378.756:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15127 comm="syz.8.2849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8055d9e0d9 code=0x7ffc0000 [ 495.253420][ T27] audit: type=1326 audit(1787626378.756:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15127 comm="syz.8.2849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8055d9e0d9 code=0x7ffc0000 [ 495.291819][ T27] audit: type=1326 audit(1787626378.756:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15127 comm="syz.8.2849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8055d9e0d9 code=0x7ffc0000 [ 495.334011][ T27] audit: type=1326 audit(1787626378.826:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15127 comm="syz.8.2849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8055d9e0d9 code=0x7ffc0000 [ 495.410342][ T27] audit: type=1326 audit(1787626378.826:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15127 comm="syz.8.2849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8055d9de42 code=0x7ffc0000 [ 495.452774][ T27] audit: type=1326 audit(1787626378.826:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15127 comm="syz.8.2849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8055d9ded7 code=0x7ffc0000 [ 495.498443][ T27] audit: type=1326 audit(1787626378.826:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15127 comm="syz.8.2849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8055d5add1 code=0x7ffc0000 [ 495.549809][ T27] audit: type=1326 audit(1787626378.826:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15127 comm="syz.8.2849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8055d9eec9 code=0x7ffc0000 [ 495.586776][ T27] audit: type=1326 audit(1787626378.826:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15127 comm="syz.8.2849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8055d5ae3b code=0x7ffc0000 [ 495.715272][T15143] netlink: 'syz.0.2855': attribute type 1 has an invalid length. [ 496.445043][T15165] netlink: 'syz.8.2864': attribute type 2 has an invalid length. [ 496.476966][T15165] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.2864'. [ 496.597441][ T974] IPVS: starting estimator thread 0... [ 496.719095][T15173] IPVS: using max 22 ests per chain, 52800 per kthread [ 496.833568][T15177] netlink: 'syz.8.2869': attribute type 4 has an invalid length. [ 496.897047][T15183] netlink: 'syz.8.2869': attribute type 4 has an invalid length. [ 500.144604][T15192] loop8: detected capacity change from 0 to 256 [ 500.189955][T15192] FAT-fs (loop8): Directory bread(block 1285) failed [ 500.253859][T15192] FAT-fs (loop8): Directory bread(block 1286) failed [ 500.304003][T15192] FAT-fs (loop8): Directory bread(block 1287) failed [ 500.347589][T15192] FAT-fs (loop8): Directory bread(block 1288) failed [ 500.437551][T15192] FAT-fs (loop8): Directory bread(block 1285) failed [ 500.487098][T15192] FAT-fs (loop8): Directory bread(block 1286) failed [ 500.587186][T15192] FAT-fs (loop8): Directory bread(block 1287) failed [ 500.636412][T15192] FAT-fs (loop8): Directory bread(block 1288) failed [ 501.254790][T15219] loop4: detected capacity change from 0 to 7 [ 501.308805][T15219] loop4: [ 501.318953][T15219] loop4: partition table partially beyond EOD, truncated [ 501.438063][T15224] loop9: detected capacity change from 0 to 2048 [ 501.549748][T15224] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.834239][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.840689][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.916303][T15224] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #12: comm syz.9.2887: corrupted inode contents [ 501.949578][T15224] EXT4-fs error (device loop9): ext4_try_add_inline_entry:1344: inode #12: comm syz.9.2887: mark_inode_dirty error [ 502.007138][T15224] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #12: comm syz.9.2887: corrupted inode contents [ 502.036037][T15224] EXT4-fs error (device loop9): ext4_mkdir:3097: inode #12: comm syz.9.2887: mark_inode_dirty error [ 502.152517][T13321] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.615575][T15259] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.2896'. [ 502.729489][T15261] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2899'. [ 502.777315][T15261] bond0: option arp_all_targets: invalid value (8) [ 502.863538][ T9] libceph: connect (1)[c::]:6789 error -101 [ 502.877072][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 502.953784][ T9] libceph: connect (1)[c::]:6789 error -101 [ 502.971340][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 503.247342][ T7769] libceph: connect (1)[c::]:6789 error -101 [ 503.253929][ T7769] libceph: mon0 (1)[c::]:6789 connect error [ 503.669720][T15266] ceph: No mds server is up or the cluster is laggy [ 504.101329][ T6210] batadv1: left promiscuous mode [ 505.933261][T15325] bridge0: port 1(vlan7) entered blocking state [ 505.941441][T15325] bridge0: port 1(vlan7) entered disabled state [ 505.951972][T15325] vlan7: entered allmulticast mode [ 505.961437][T15325] bridge_slave_0: entered allmulticast mode [ 505.983003][T15325] vlan7: entered promiscuous mode [ 505.990635][T15325] bridge_slave_0: entered promiscuous mode [ 506.153500][T15327] bond0: (slave team0): Releasing backup interface [ 506.337351][T15327] bond4: (slave vlan4): Releasing active interface [ 506.371050][T15327] bond4: (slave vlan4): the permanent HWaddr of slave - 2a:99:a0:3f:fc:e9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 506.488643][T15327] bond4: (slave veth13): Releasing active interface [ 506.540373][T15327] vlan7: left allmulticast mode [ 506.565658][T15327] bridge_slave_0: left allmulticast mode [ 506.606523][T15327] vlan7: left promiscuous mode [ 506.639449][T15327] bridge_slave_0: left promiscuous mode [ 506.675306][T15327] bridge0: port 1(vlan7) entered disabled state [ 506.702211][T15339] CIFS mount error: No usable UNC path provided in device string! [ 506.702211][T15339] [ 506.764242][T15339] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 508.726880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 511.608585][T15390] bond6: entered allmulticast mode [ 511.684468][T15392] bridge4: entered promiscuous mode [ 511.808220][T15392] bridge4: entered allmulticast mode [ 511.859778][T15392] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 512.199659][T15397] loop9: detected capacity change from 0 to 136 [ 512.280896][T15397] Attempt to read inode for relocated directory [ 512.464747][T15399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2942'. [ 515.106882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 516.476851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 519.538095][T15471] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2966'. [ 519.558179][T15471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2966'. [ 519.680432][T15477] loop9: detected capacity change from 0 to 1024 [ 519.816299][ T27] kauditd_printk_skb: 71 callbacks suppressed [ 519.816322][ T27] audit: type=1800 audit(1787626403.396:613): pid=15477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2968" name="file1" dev="loop9" ino=20 res=0 errno=0 [ 519.910492][ T27] audit: type=1326 audit(1787626403.466:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15482 comm="syz.0.2971" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x0 [ 520.072972][ T27] audit: type=1326 audit(1787626403.656:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15482 comm="syz.0.2971" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 520.184769][ T27] audit: type=1326 audit(1787626403.656:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15482 comm="syz.0.2971" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 520.328512][ T27] audit: type=1326 audit(1787626403.656:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15482 comm="syz.0.2971" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 520.478511][ T27] audit: type=1326 audit(1787626403.656:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15482 comm="syz.0.2971" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 520.593273][ T27] audit: type=1326 audit(1787626403.656:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15482 comm="syz.0.2971" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 520.718198][ T27] audit: type=1326 audit(1787626403.716:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15482 comm="syz.0.2971" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f51f1f5e90e code=0x7ffc0000 [ 520.822036][ T27] audit: type=1326 audit(1787626403.726:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15482 comm="syz.0.2971" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f51f1f5e90e code=0x7ffc0000 [ 520.936631][ T27] audit: type=1326 audit(1787626403.736:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15482 comm="syz.0.2971" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f51f1f5e90e code=0x7ffc0000 [ 521.597367][T15504] TC_ACT_REPEAT abuse ? [ 521.865791][T15503] syzkaller0: entered promiscuous mode [ 521.945930][T15503] syzkaller0: entered allmulticast mode [ 522.708979][T15519] binder: 15518:15519 unknown command 0 [ 522.715735][T15519] binder: 15518:15519 ioctl c0306201 2000000004c0 returned -22 [ 524.387618][T15516] Bluetooth: hci1: command 0x0406 tx timeout [ 529.546191][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 532.440664][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2980'. [ 532.457521][T15534] sit0: entered promiscuous mode [ 532.462881][T15534] netlink: 'syz.8.2985': attribute type 1 has an invalid length. [ 532.504560][T15534] netlink: 1 bytes leftover after parsing attributes in process `syz.8.2985'. [ 532.659713][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2999'. [ 532.991409][T15595] tipc: Failed to remove unknown binding: 66,0,0/9480874:1728394383/1728394384 [ 533.019173][T15595] tipc: Failed to remove unknown binding: 66,0,0/9480874:1728394383/1728394384 [ 534.357440][T15613] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3012'. [ 537.036075][T15671] loop8: detected capacity change from 0 to 512 [ 537.050987][T15671] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 537.420259][T15681] gretap0: left promiscuous mode [ 537.581368][T15681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.610628][T15681] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.631317][T15681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 538.257280][T15694] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 539.843348][T15711] loop9: detected capacity change from 0 to 256 [ 539.865522][T15711] exfat: Deprecated parameter 'utf8' [ 540.091486][T15711] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 540.401734][T15727] netlink: 'syz.8.3050': attribute type 13 has an invalid length. [ 541.373034][T15741] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3055'. [ 542.644112][T15752] loop8: detected capacity change from 0 to 128 [ 542.760402][T15752] ADFS-fs (loop8): error: can't find an ADFS filesystem on dev loop8. [ 542.967867][T15757] netlink: 'syz.4.3059': attribute type 1 has an invalid length. [ 543.172208][T15757] 8021q: adding VLAN 0 to HW filter on device bond6 [ 543.401684][T15759] bond6: (slave veth15): Enslaving as an active interface with a down link [ 543.496711][T15760] dummy0: left promiscuous mode [ 543.541382][T15760] bond6: (slave dummy0): making interface the new active one [ 543.580932][T15763] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 543.629280][T15760] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 543.677320][T15761] netlink: 'syz.4.3059': attribute type 10 has an invalid length. [ 543.685402][T15761] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3059'. [ 543.753629][T15761] dummy0: entered promiscuous mode [ 543.831098][T15761] bond6: (slave dummy0): Releasing active interface [ 544.187659][T15771] sit0: Caught tx_queue_len zero misconfig [ 544.714271][T15784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3067'. [ 544.902051][T15789] loop8: detected capacity change from 0 to 1024 [ 545.414559][T15797] bond7: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 545.431110][T15797] bond7: entered allmulticast mode [ 545.509908][T15800] ip6gretap1: entered promiscuous mode [ 545.515835][T15800] bond7: (slave ip6gretap1): no link monitoring support [ 545.590439][T15800] bond7: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 545.641024][T15800] ip6gretap1: entered allmulticast mode [ 545.659473][T15800] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 545.727807][ T8176] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 545.976263][ T8176] usb 10-1: Using ep0 maxpacket: 8 [ 546.016630][ T8176] usb 10-1: config 0 interface 0 has no altsetting 0 [ 546.034808][ T8176] usb 10-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 546.047305][ T8176] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.080161][ T8176] usb 10-1: config 0 descriptor?? [ 546.554952][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.590970][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.617840][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.630586][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.655233][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.686691][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.696902][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.706189][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.716078][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.724676][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.751706][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.764979][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.776346][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.789713][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x2 [ 546.801222][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.811535][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.823787][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.832466][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.842212][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.852571][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.861738][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.873248][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.906005][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.907019][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 546.933654][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.943147][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.953530][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.962235][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.971137][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.983473][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 546.991771][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 547.000052][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 547.008503][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 547.016825][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 547.024858][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 547.032810][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 547.041342][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 547.049965][ T8176] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 547.096208][ T8176] ntrig 0003:1B96:0009.0004: hidraw0: USB HID v0.c1 Device [HID 1b96:0009] on usb-dummy_hcd.9-1/input0 [ 547.107692][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 547.120516][ T9] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 547.134312][ T8176] usb 10-1: USB disconnect, device number 3 [ 547.147541][ T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 547.195440][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 547.229194][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 547.273432][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 547.307862][T15835] fido_id[15835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 547.318915][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 547.373542][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.608541][ T9] usb 9-1: GET_CAPABILITIES returned 0 [ 547.614641][ T9] usbtmc 9-1:16.0: can't read capabilities [ 548.218868][ T8176] usb 9-1: USB disconnect, device number 3 [ 548.729843][T15859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3089'. [ 549.362478][T15869] loop9: detected capacity change from 0 to 8192 [ 549.507603][T15869] netlink: 'syz.9.3093': attribute type 3 has an invalid length. [ 549.532474][T15869] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3093'. [ 550.557422][T14062] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 550.787378][T14062] usb 10-1: Using ep0 maxpacket: 32 [ 550.811062][T14062] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 550.845239][T14062] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 550.875010][T14062] usb 10-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 550.911490][T14062] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.941402][T14062] usb 10-1: config 0 descriptor?? [ 551.397230][T15878] kvm: kvm [15877]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 551.437612][T15878] kvm: kvm [15877]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 551.610633][T14062] usbhid 10-1:0.0: can't add hid device: -71 [ 551.656712][T14062] usbhid: probe of 10-1:0.0 failed with error -71 [ 551.715559][T14062] usb 10-1: USB disconnect, device number 4 [ 553.655939][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3119'. [ 554.043850][T15948] loop9: detected capacity change from 0 to 512 [ 554.086880][T15948] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 554.174469][ T27] kauditd_printk_skb: 66 callbacks suppressed [ 554.174500][ T27] audit: type=1800 audit(1787626437.756:689): pid=15948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3121" name="bus" dev="loop9" ino=1048692 res=0 errno=0 [ 554.612136][ T6210] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 554.972452][T15965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.099065][T15975] netlink: 'syz.4.3133': attribute type 1 has an invalid length. [ 555.143785][T15975] 8021q: adding VLAN 0 to HW filter on device bond7 [ 555.225830][T15975] vlan0: entered allmulticast mode [ 555.233123][T15975] bond7: entered allmulticast mode [ 555.319524][T15979] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.335474][T15979] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.351692][T15979] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.364987][T15979] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.398792][T15979] bond7: (slave geneve2): making interface the new active one [ 555.408653][T15979] geneve2: entered allmulticast mode [ 555.427651][T15979] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 555.493718][T15979] syz.4.3133 (15979) used greatest stack depth: 19544 bytes left [ 556.031490][T15997] 9pnet: Found fid 0 not clunked [ 558.914671][T14062] IPVS: starting estimator thread 0... [ 559.046973][T16036] IPVS: using max 20 ests per chain, 48000 per kthread [ 559.136703][T16044] tipc: Failed to remove unknown binding: 66,1,1/0:2487910559/2487910561 [ 559.165575][T16044] tipc: Failed to remove unknown binding: 66,1,1/0:2487910559/2487910561 [ 559.180170][T16044] tipc: Failed to remove unknown binding: 66,1,1/0:2487910559/2487910561 [ 563.297747][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.306117][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.726023][ T27] audit: type=1800 audit(1787626452.306:690): pid=16161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3193" name="/" dev="fuse" ino=4 res=0 errno=0 [ 569.576557][T16180] loop9: detected capacity change from 0 to 512 [ 569.638649][T16180] EXT4-fs: Ignoring removed nobh option [ 569.763092][T16180] fscrypt (loop9, inode 2): Error -61 getting encryption context [ 569.832778][T16180] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -61 [ 569.881498][T16180] EXT4-fs error (device loop9): ext4_orphan_get:1404: inode #13: comm syz.9.3199: inode has both inline data and extents flags [ 569.968282][T16180] EXT4-fs error (device loop9): ext4_orphan_get:1409: comm syz.9.3199: couldn't read orphan inode 13 (err -117) [ 570.030937][T16180] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.199586][T16180] EXT4-fs (loop9): shut down requested (2) [ 570.329627][T13321] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.418879][T16191] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3204'. [ 571.227464][T16209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3209'. [ 571.421117][ T27] audit: type=1326 audit(1787626454.986:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16210 comm="syz.9.3210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab59e0d9 code=0x7fc00000 [ 571.446263][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3209'. [ 571.468274][ T27] audit: type=1326 audit(1787626454.986:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16210 comm="syz.9.3210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fedab59e0d9 code=0x7fc00000 [ 571.503553][ T27] audit: type=1326 audit(1787626454.986:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16210 comm="syz.9.3210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab59e0d9 code=0x7fc00000 [ 571.521566][T16218] gadgetfs: bound to dummy_udc driver [ 571.535208][ T27] audit: type=1326 audit(1787626454.986:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16210 comm="syz.9.3210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab59e0d9 code=0x7fc00000 [ 571.583104][ T27] audit: type=1326 audit(1787626454.996:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16210 comm="syz.9.3210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab59e0d9 code=0x7fc00000 [ 571.632709][ T27] audit: type=1326 audit(1787626454.996:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16210 comm="syz.9.3210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab59e0d9 code=0x7fc00000 [ 571.665483][ T27] audit: type=1326 audit(1787626454.996:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16210 comm="syz.9.3210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab59e0d9 code=0x7fc00000 [ 571.713557][ T27] audit: type=1326 audit(1787626454.996:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16210 comm="syz.9.3210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab59e0d9 code=0x7fc00000 [ 571.769291][ T27] audit: type=1326 audit(1787626454.996:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16210 comm="syz.9.3210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab59e0d9 code=0x7fc00000 [ 571.826991][ T8] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 571.867806][ C0] gadgetfs: connected [ 571.880904][T16217] gadgetfs: suspended from state 3 [ 571.887848][T16217] gadgetfs: disconnected [ 571.987627][T15516] Bluetooth: hci3: ACL packet for unknown connection handle 2825 [ 574.220670][T16268] ref_ctr increment failed for inode: 0x129c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888030bdc280 [ 575.287413][T16288] netlink: 'syz.9.3236': attribute type 2 has an invalid length. [ 575.610134][T16292] netlink: 'syz.0.3239': attribute type 29 has an invalid length. [ 585.331438][T15516] Bluetooth: hci0: ACL packet for unknown connection handle 2825 [ 585.762112][T16441] loop9: detected capacity change from 0 to 128 [ 585.854534][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 585.870704][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 585.884434][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 585.923195][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 585.971425][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 585.981621][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 586.438643][T16453] syz.9.3295: attempt to access beyond end of device [ 586.438643][T16453] loop9: rw=2049, sector=225, nr_sectors = 104 limit=128 [ 586.477445][T16453] syz.9.3295: attempt to access beyond end of device [ 586.477445][T16453] loop9: rw=2049, sector=337, nr_sectors = 16 limit=128 [ 586.618008][T16441] syz.9.3295: attempt to access beyond end of device [ 586.618008][T16441] loop9: rw=524288, sector=225, nr_sectors = 104 limit=128 [ 586.717132][T16441] syz.9.3295: attempt to access beyond end of device [ 586.717132][T16441] loop9: rw=524288, sector=337, nr_sectors = 16 limit=128 [ 586.807772][T16441] syz.9.3295: attempt to access beyond end of device [ 586.807772][T16441] loop9: rw=0, sector=225, nr_sectors = 8 limit=128 [ 586.998843][ T6217] kworker/u4:20: attempt to access beyond end of device [ 586.998843][ T6217] loop9: rw=1, sector=145, nr_sectors = 80 limit=128 [ 587.038253][ T6217] kworker/u4:20: attempt to access beyond end of device [ 587.038253][ T6217] loop9: rw=1, sector=329, nr_sectors = 8 limit=128 [ 587.479966][T16474] netlink: 'syz.4.3304': attribute type 11 has an invalid length. [ 587.579603][T16443] chnl_net:caif_netlink_parms(): no params data found [ 587.600332][ T5786] Bluetooth: hci2: ACL packet for unknown connection handle 2825 [ 587.870275][T16443] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.877848][T16443] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.885320][T16443] bridge_slave_0: entered allmulticast mode [ 587.898844][T16443] bridge_slave_0: entered promiscuous mode [ 587.923316][T16443] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.956309][T16443] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.979661][T16443] bridge_slave_1: entered allmulticast mode [ 588.077147][ T5786] Bluetooth: hci1: command tx timeout [ 588.107234][T16443] bridge_slave_1: entered promiscuous mode [ 588.520217][T16443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.591570][T16443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.646526][ T27] kauditd_printk_skb: 123 callbacks suppressed [ 588.646545][ T27] audit: type=1326 audit(1787626472.226:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16492 comm="syz.0.3309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 588.744708][T16443] team0: Port device team_slave_0 added [ 588.777057][ T27] audit: type=1326 audit(1787626472.266:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16492 comm="syz.0.3309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 588.812873][T16443] team0: Port device team_slave_1 added [ 588.862871][ T27] audit: type=1326 audit(1787626472.266:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16492 comm="syz.0.3309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 588.910249][T16443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.949110][T16443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.981004][ T27] audit: type=1326 audit(1787626472.276:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16492 comm="syz.0.3309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 589.014441][T16443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.049314][ T27] audit: type=1326 audit(1787626472.276:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16492 comm="syz.0.3309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 589.074009][T16443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.099274][T16443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.119346][ T27] audit: type=1326 audit(1787626472.276:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16492 comm="syz.0.3309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 589.144365][T16443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.186255][ T27] audit: type=1326 audit(1787626472.276:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16492 comm="syz.0.3309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 589.230202][ T27] audit: type=1326 audit(1787626472.276:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16492 comm="syz.0.3309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 589.274141][ T27] audit: type=1326 audit(1787626472.276:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16492 comm="syz.0.3309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 589.311854][ T27] audit: type=1326 audit(1787626472.276:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16492 comm="syz.0.3309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 589.321684][T16443] hsr_slave_0: entered promiscuous mode [ 589.350775][T16443] hsr_slave_1: entered promiscuous mode [ 589.358164][T16443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 589.366207][T16443] Cannot create hsr debugfs directory [ 589.956266][T16507] sctp: [Deprecated]: syz.4.3313 (pid 16507) Use of struct sctp_assoc_value in delayed_ack socket option. [ 589.956266][T16507] Use struct sctp_sack_info instead [ 590.084409][T16511] loop9: detected capacity change from 0 to 64 [ 590.153674][ T5786] Bluetooth: hci1: command tx timeout [ 591.542051][T16443] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 591.554329][T16443] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 591.565906][T16443] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 591.577540][T16443] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 591.753597][T16443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.815214][T16443] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.854050][ T6216] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.862631][ T6216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.905048][ T6216] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.913796][ T6216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.227268][ T5786] Bluetooth: hci1: command tx timeout [ 592.478790][T16443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.602299][T16443] veth0_vlan: entered promiscuous mode [ 592.645968][T16443] veth1_vlan: entered promiscuous mode [ 592.711997][T16443] veth0_macvtap: entered promiscuous mode [ 592.755843][T16443] veth1_macvtap: entered promiscuous mode [ 592.824322][T16443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.850675][T16443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.875833][T16443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.896954][T16443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.919710][T16443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.963610][T16443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.991466][T16443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.007126][T16443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.030899][T16443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.049100][T16443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.103510][T16443] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.125989][T16443] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.136400][T16443] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.155141][T16443] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.407412][ T6216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.451097][ T6216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.523755][ T6216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.536633][ T6216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.846343][T16560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3325'. [ 594.037139][T14062] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 594.138436][T16562] netlink: 'syz.3.3285': attribute type 3 has an invalid length. [ 594.151929][T16562] netlink: 'syz.3.3285': attribute type 3 has an invalid length. [ 594.260081][T14062] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 594.281940][T14062] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.309483][ T5786] Bluetooth: hci1: command tx timeout [ 594.347829][T14062] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 594.413780][T14062] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.472699][T14062] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 594.504614][T14062] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 594.561853][T14062] usb 10-1: Product: syz [ 594.566454][T14062] usb 10-1: Manufacturer: syz [ 594.735108][T14062] cdc_wdm 10-1:1.0: skipping garbage [ 594.743005][T14062] cdc_wdm 10-1:1.0: skipping garbage [ 594.809348][T14062] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 594.827182][T14062] cdc_wdm 10-1:1.0: Unknown control protocol [ 595.586120][T16594] netlink: 'syz.0.3323': attribute type 4 has an invalid length. [ 595.683595][T16594] netlink: 'syz.0.3323': attribute type 4 has an invalid length. [ 595.746317][T14062] usb 10-1: USB disconnect, device number 5 [ 596.342531][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3331'. [ 596.637335][T16616] tipc: Failed to remove unknown binding: 66,0,0/9480874:3424888484/3424888485 [ 596.665929][T16616] tipc: Failed to remove unknown binding: 66,0,0/9480874:3424888484/3424888485 [ 597.387419][T16633] loop3: detected capacity change from 0 to 64 [ 597.404840][T16635] netlink: 'syz.9.3338': attribute type 4 has an invalid length. [ 597.722670][ T5841] IPVS: starting estimator thread 0... [ 597.770869][T16638] netlink: 'syz.9.3338': attribute type 4 has an invalid length. [ 597.857453][T16644] IPVS: using max 21 ests per chain, 50400 per kthread [ 602.639086][ T5786] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 602.981403][T16740] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 603.201514][T16744] bridge0: port 3(vlan2) entered blocking state [ 603.221308][T16744] bridge0: port 3(vlan2) entered disabled state [ 603.241404][T16744] vlan2: entered allmulticast mode [ 603.269745][T16744] vlan2: entered promiscuous mode [ 603.337433][T16747] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.390576][T16747] bridge_slave_1: left allmulticast mode [ 603.413379][T16747] bridge_slave_1: left promiscuous mode [ 603.437381][T16747] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.471277][T16747] bond0: (slave bond_slave_0): Releasing backup interface [ 603.608629][T16747] bond0: (slave bond_slave_1): Releasing backup interface [ 603.961727][T16747] team0: Port device team_slave_0 removed [ 604.077622][T16747] team0: Port device team_slave_1 removed [ 604.192424][T16747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.311845][T16747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.365375][T16747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.409771][T16747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.500390][T16747] vlan2: left allmulticast mode [ 604.530835][T16747] bridge_slave_0: left allmulticast mode [ 604.558258][T16747] vlan2: left promiscuous mode [ 604.581171][T16747] bridge_slave_0: left promiscuous mode [ 604.610208][T16747] bridge0: port 3(vlan2) entered disabled state [ 607.264679][T16809] bond4: (slave wlan0): Releasing active interface [ 607.297869][T16809] bond4: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 607.347466][T16809] batadv1: entered promiscuous mode [ 607.414815][T16809] vlan2: left allmulticast mode [ 607.457965][T16809] veth1_virt_wifi: left allmulticast mode [ 607.463876][T16809] vlan2: left promiscuous mode [ 607.527098][T16809] veth1_virt_wifi: left promiscuous mode [ 607.532337][T16813] loop3: detected capacity change from 0 to 2048 [ 607.579933][T16809] bridge0: port 1(vlan2) entered disabled state [ 607.659617][T16809] bond3: (slave vlan3): Releasing active interface [ 607.674378][T16813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.768472][T16809] bond4: (slave batadv1): Releasing active interface [ 607.825525][T16809] batadv1: left promiscuous mode [ 608.040531][T16809] bond6: (slave bridge4): Releasing backup interface [ 608.060604][T16813] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #12: comm syz.3.3380: corrupted inode contents [ 608.110996][T16813] EXT4-fs error (device loop3): ext4_try_add_inline_entry:1344: inode #12: comm syz.3.3380: mark_inode_dirty error [ 608.153097][T16809] bridge4: left allmulticast mode [ 608.247088][T16813] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #12: comm syz.3.3380: corrupted inode contents [ 608.288115][T16809] bond7: (slave ip6gretap1): Releasing backup interface [ 608.314136][T16813] EXT4-fs error (device loop3): ext4_mkdir:3097: inode #12: comm syz.3.3380: mark_inode_dirty error [ 608.332328][T16809] ip6gretap1: left allmulticast mode [ 608.578784][T16443] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.544484][T16851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3386'. [ 610.914945][T16883] bridge0: port 3(vlan3) entered blocking state [ 610.977998][T16883] bridge0: port 3(vlan3) entered disabled state [ 610.986029][T16883] vlan3: entered allmulticast mode [ 611.057358][T16883] vlan3: entered promiscuous mode [ 611.124650][T16885] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.253088][T16885] bridge_slave_1: left allmulticast mode [ 611.290431][T16885] bridge_slave_1: left promiscuous mode [ 611.310974][T16885] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.350889][T16885] bond0: (slave bond_slave_0): Releasing backup interface [ 611.448001][T16885] bond0: (slave bond_slave_1): Releasing backup interface [ 611.687403][T16885] team0: Port device team_slave_0 removed [ 611.880484][T16885] team0: Port device team_slave_1 removed [ 611.969154][T16885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.054261][T16885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.104882][T16885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.139465][T16885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.263399][T16885] bond1: (slave ip6gretap1): Releasing active interface [ 612.367957][T16885] bond2: (slave batadv1): Releasing active interface [ 612.421865][T16885] vlan3: left allmulticast mode [ 612.448932][T16885] bridge_slave_0: left allmulticast mode [ 612.467449][T16885] vlan3: left promiscuous mode [ 612.473282][T16885] bridge_slave_0: left promiscuous mode [ 612.507942][T16885] bridge0: port 3(vlan3) entered disabled state [ 615.140391][T16949] loop3: detected capacity change from 0 to 512 [ 615.168918][T16949] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 617.659462][T17005] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3420'. [ 618.131593][T17011] sit0: entered promiscuous mode [ 618.155852][T17011] netlink: 'syz.3.3422': attribute type 1 has an invalid length. [ 618.248357][T17011] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3422'. [ 618.425911][T17017] binder: 17016:17017 ioctl c0306201 2000000001c0 returned -14 [ 624.714571][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.722627][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.286057][T17082] lo speed is unknown, defaulting to 1000 [ 627.757652][T17120] jffs2: notice: (17120) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 627.978660][T17082] lo speed is unknown, defaulting to 1000 [ 628.040995][T17082] lo speed is unknown, defaulting to 1000 [ 628.074524][T17082] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 628.207756][T17082] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 628.274133][T17082] lo speed is unknown, defaulting to 1000 [ 628.309403][T17082] lo speed is unknown, defaulting to 1000 [ 628.375420][T17082] lo speed is unknown, defaulting to 1000 [ 628.422100][T17082] lo speed is unknown, defaulting to 1000 [ 628.548123][T17082] lo speed is unknown, defaulting to 1000 [ 628.556082][T17082] lo speed is unknown, defaulting to 1000 [ 628.602538][T17082] lo speed is unknown, defaulting to 1000 [ 628.668812][T17082] lo speed is unknown, defaulting to 1000 [ 629.940704][T17143] loop3: detected capacity change from 0 to 512 [ 630.028056][T17143] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 633.486751][T17175] loop9: detected capacity change from 0 to 32768 [ 633.587736][T17175] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 633.882360][T17175] XFS (loop9): Ending clean mount [ 633.940467][T17175] XFS (loop9): Quotacheck needed: Please wait. [ 634.088311][T17175] XFS (loop9): Quotacheck: Done. [ 634.965332][T13321] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 635.513311][T17228] tipc: New replicast peer: 172.20.20.187 [ 635.574258][T17228] tipc: Enabled bearer , priority 10 [ 636.687907][ T9] tipc: Node number set to 249116421 [ 641.021010][T17312] loop9: detected capacity change from 0 to 512 [ 641.091937][T17312] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 641.146054][T17312] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 641.158831][ T7769] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 641.207984][T17312] System zones: 0-1, 15-15, 18-18, 34-34 [ 641.228638][T17312] EXT4-fs (loop9): orphan cleanup on readonly fs [ 641.241310][T17312] Quota error (device loop9): v2_read_header: Failed header read: expected=8 got=0 [ 641.295264][T17312] EXT4-fs warning (device loop9): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 641.374796][T17312] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 641.384929][ T7769] usb 4-1: Using ep0 maxpacket: 8 [ 641.409687][ T7769] usb 4-1: config 0 has no interfaces? [ 641.445091][ T7769] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 641.461371][T17312] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm syz.9.3477: bg 0: block 40: padding at end of block bitmap is not set [ 641.499536][ T7769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.531687][ T7769] usb 4-1: config 0 descriptor?? [ 641.557198][T17312] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 641.585475][T17312] EXT4-fs (loop9): 1 truncate cleaned up [ 641.603091][T17312] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 641.782044][T17312] EXT4-fs (loop9): shut down requested (1) [ 641.795740][ T7769] usb 4-1: USB disconnect, device number 2 [ 642.106322][T17312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.473022][T17339] overlayfs: failed to clone upperpath [ 646.151053][T17382] lo speed is unknown, defaulting to 1000 [ 648.324922][T17425] tipc: Failed to remove unknown binding: 66,1,1/249116421:1708192202/1708192204 [ 648.621853][T17434] tipc: Failed to remove unknown binding: 66,1,1/249116421:1708192202/1708192204 [ 648.688753][T17434] tipc: Failed to remove unknown binding: 66,1,1/249116421:1708192202/1708192204 [ 648.782372][T17436] loop3: detected capacity change from 0 to 512 [ 648.891002][T17436] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 649.018006][T17436] EXT4-fs (loop3): 1 truncate cleaned up [ 649.076541][T17436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 649.611377][T16443] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.949448][T17447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3500'. [ 650.346987][ T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 650.557336][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 650.567920][ T9] usb 10-1: config 0 has no interfaces? [ 650.579713][ T9] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 650.609722][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.669032][ T9] usb 10-1: config 0 descriptor?? [ 650.731032][T17465] lo speed is unknown, defaulting to 1000 [ 650.919759][ T7769] usb 10-1: USB disconnect, device number 6 [ 652.775218][T17518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3520'. [ 657.314854][T17579] overlayfs: failed to clone upperpath [ 657.707579][T17595] loop4: detected capacity change from 0 to 7 [ 657.723413][T17595] loop4: [ 657.726610][T17595] loop4: partition table partially beyond EOD, truncated [ 658.075108][T17605] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 659.789756][T17631] fuse: Bad value for 'fd' [ 660.391652][T17659] 9pnet_fd: Insufficient options for proto=fd [ 660.831112][ T27] audit: type=1326 audit(1787626544.406:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17667 comm="syz.4.3566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a19e0d9 code=0x7ffc0000 [ 660.915103][ T27] audit: type=1326 audit(1787626544.406:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17667 comm="syz.4.3566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a19e0d9 code=0x7ffc0000 [ 661.007599][ T27] audit: type=1326 audit(1787626544.456:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17667 comm="syz.4.3566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f152a19e0d9 code=0x7ffc0000 [ 661.087240][ T27] audit: type=1326 audit(1787626544.456:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17667 comm="syz.4.3566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a19e0d9 code=0x7ffc0000 [ 661.192469][ T27] audit: type=1326 audit(1787626544.456:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17667 comm="syz.4.3566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f152a19e0d9 code=0x7ffc0000 [ 661.301502][ T27] audit: type=1326 audit(1787626544.456:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17667 comm="syz.4.3566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a19e0d9 code=0x7ffc0000 [ 661.369927][ T27] audit: type=1326 audit(1787626544.456:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17667 comm="syz.4.3566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f152a19e0d9 code=0x7ffc0000 [ 661.402582][T17685] netlink: 'syz.3.3573': attribute type 10 has an invalid length. [ 661.452928][ T27] audit: type=1326 audit(1787626544.466:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17667 comm="syz.4.3566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a19e0d9 code=0x7ffc0000 [ 661.488515][T17685] team0: Port device dummy0 added [ 661.494491][ T27] audit: type=1326 audit(1787626544.476:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17667 comm="syz.4.3566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a19e0d9 code=0x7ffc0000 [ 661.603499][ T27] audit: type=1326 audit(1787626544.496:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17667 comm="syz.4.3566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f152a19e0d9 code=0x7ffc0000 [ 661.618828][T17688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3574'. [ 661.850511][T17697] vlan0: entered allmulticast mode [ 661.947137][T17697] bond8: entered allmulticast mode [ 662.499595][T17712] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 662.529411][T17712] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 662.573028][T17712] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 663.392725][T17737] loop9: detected capacity change from 0 to 512 [ 663.484383][T17737] EXT4-fs (loop9): orphan cleanup on readonly fs [ 663.524086][T17737] EXT4-fs warning (device loop9): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 663.573982][T17737] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 663.592380][T17737] EXT4-fs error (device loop9): ext4_orphan_get:1409: comm syz.9.3589: couldn't read orphan inode 26 (err -116) [ 663.631784][T17737] EXT4-fs (loop9): Remounting filesystem read-only [ 663.654386][T17737] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 663.960713][T13321] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.488729][T17756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3597'. [ 664.544506][T17758] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3598'. [ 664.690452][T17744] lo speed is unknown, defaulting to 1000 [ 665.953144][T17795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3608'. [ 666.120484][T17798] netlink: 'syz.9.3610': attribute type 10 has an invalid length. [ 666.164494][T17798] team0: Port device dummy0 added [ 666.362693][T17805] netlink: 'syz.3.3613': attribute type 4 has an invalid length. [ 666.410914][T17805] netlink: 'syz.3.3613': attribute type 4 has an invalid length. [ 666.625677][T17819] block device autoloading is deprecated and will be removed. [ 666.946387][T17827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3623'. [ 667.592477][T17839] 9pnet_fd: Insufficient options for proto=fd [ 667.848062][ T5817] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 668.051435][ T5817] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 668.062417][ T5817] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 668.075707][ T5817] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 668.085209][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.093532][ T5817] usb 4-1: Product: syz [ 668.102081][ T5817] usb 4-1: Manufacturer: syz [ 668.110779][ T5817] usb 4-1: SerialNumber: syz [ 668.241880][T17863] binder: 17862:17863 ioctl c0306201 200000000680 returned -14 [ 668.365936][T17867] netlink: 'syz.4.3637': attribute type 1 has an invalid length. [ 668.377939][ T5817] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 668.426063][T17867] 8021q: adding VLAN 0 to HW filter on device bond8 [ 668.521626][T17871] bond8: (slave veth17): Enslaving as an active interface with a down link [ 668.650540][T17867] dummy0: left promiscuous mode [ 668.686575][T17867] bond8: (slave dummy0): making interface the new active one [ 668.718972][T17867] dummy0: entered promiscuous mode [ 668.724676][T17867] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 669.614596][ C1] usblp0: nonzero read bulk status received: -71 [ 669.654498][ T5841] usb 4-1: USB disconnect, device number 3 [ 669.670943][T17883] usblp0: error -71 reading from printer [ 669.720161][T17837] usblp0: removed [ 670.303414][T17918] futex_wake_op: syz.4.3654 tries to shift op by 144; fix this program [ 670.630835][T17923] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3655'. [ 670.736216][T17923] bond3: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 671.252316][T17947] netlink: 'syz.3.3663': attribute type 1 has an invalid length. [ 671.313740][T17947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 671.341404][T17952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3663'. [ 671.370143][T17952] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 671.396759][T17952] bond1: entered allmulticast mode [ 671.414538][T17955] netlink: 'syz.4.3665': attribute type 1 has an invalid length. [ 671.529370][T17955] bond9: entered promiscuous mode [ 671.535006][T17955] 8021q: adding VLAN 0 to HW filter on device bond9 [ 671.590039][T17947] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 671.598033][T17963] jffs2: notice: (17963) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 671.668714][T17957] vlan1: entered allmulticast mode [ 671.674090][T17957] bond9: entered allmulticast mode [ 671.674191][T17963] loop9: detected capacity change from 0 to 512 [ 671.694264][T17963] EXT4-fs: Ignoring removed oldalloc option [ 671.761554][T17960] bond9: (slave bridge4): making interface the new active one [ 671.780858][T17963] EXT4-fs (loop9): Test dummy encryption mode enabled [ 671.812607][T17960] bridge4: entered promiscuous mode [ 671.821334][T17967] overlayfs: failed to clone upperpath [ 671.849160][T17963] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.850717][T17960] bridge4: entered allmulticast mode [ 671.896012][T17963] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.928934][T17960] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 672.650075][T17989] loop3: detected capacity change from 0 to 128 [ 672.672481][T17989] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 672.708103][T17989] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 672.745007][T17963] loop9: detected capacity change from 0 to 32768 [ 672.766504][T17963] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.3667 (17963) [ 672.829081][T17963] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 672.855103][T17963] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 672.909202][T17963] BTRFS info (device loop9): using free space tree [ 672.984554][ T3469] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 673.085514][T17963] BTRFS info (device loop9): enabling ssd optimizations [ 673.093336][T17963] BTRFS info (device loop9): auto enabling async discard [ 673.135513][T17963] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 673.180800][T18013] netlink: 'syz.3.3677': attribute type 10 has an invalid length. [ 673.341345][T18013] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 673.421188][T18013] team0: Failed to send options change via netlink (err -105) [ 673.454555][T18013] team0: Port device netdevsim0 added [ 676.580853][T18054] jffs2: notice: (18054) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 676.684464][T18054] loop3: detected capacity change from 0 to 512 [ 676.726991][T18054] EXT4-fs: Ignoring removed oldalloc option [ 676.757512][T18054] EXT4-fs (loop3): Test dummy encryption mode enabled [ 676.793543][T18054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.835145][T18054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.985490][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 676.985503][ T27] audit: type=1326 audit(1787626560.566:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18058 comm="syz.9.3690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab59e0d9 code=0x7ffc0000 [ 677.063578][T18066] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 677.078119][ T27] audit: type=1326 audit(1787626560.616:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18058 comm="syz.9.3690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab59e0d9 code=0x7ffc0000 [ 677.149280][ T27] audit: type=1326 audit(1787626560.616:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18058 comm="syz.9.3690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab59e0d9 code=0x7ffc0000 [ 677.230462][ T27] audit: type=1326 audit(1787626560.626:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18058 comm="syz.9.3690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fedab59e0d9 code=0x7ffc0000 [ 677.275655][ T27] audit: type=1326 audit(1787626560.626:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18058 comm="syz.9.3690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab59e0d9 code=0x7ffc0000 [ 677.427065][ T27] audit: type=1326 audit(1787626560.686:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18058 comm="syz.9.3690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fedab55e90e code=0x7ffc0000 [ 677.515362][ T27] audit: type=1326 audit(1787626560.696:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18058 comm="syz.9.3690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fedab55e90e code=0x7ffc0000 [ 677.563097][ T27] audit: type=1326 audit(1787626560.706:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18058 comm="syz.9.3690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fedab55e90e code=0x7ffc0000 [ 677.951853][ T27] audit: type=1326 audit(1787626560.706:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18058 comm="syz.9.3690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fedab55e90e code=0x7ffc0000 [ 678.369072][ T27] audit: type=1326 audit(1787626560.706:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18058 comm="syz.9.3690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fedab55e90e code=0x7ffc0000 [ 678.554280][T18054] loop3: detected capacity change from 0 to 32768 [ 678.564134][T18078] gadgetfs: bound to dummy_udc driver [ 678.597512][T18054] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3689 (18054) [ 678.677620][T18054] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 678.705011][T18054] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 678.755363][T18054] BTRFS info (device loop3): using free space tree [ 678.967202][T18054] BTRFS info (device loop3): enabling ssd optimizations [ 678.974589][T18054] BTRFS info (device loop3): auto enabling async discard [ 678.998523][T18054] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 681.166001][T18140] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼ [ 681.878065][ T3469] dummy0: left promiscuous mode [ 682.264712][T18166] syzkaller0: entered promiscuous mode [ 682.271692][T18166] syzkaller0: entered allmulticast mode [ 684.155977][T18192] lo speed is unknown, defaulting to 1000 [ 684.498628][T18198] lo speed is unknown, defaulting to 1000 [ 686.153646][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.160743][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.660057][T18227] futex_wake_op: syz.4.3744 tries to shift op by 144; fix this program [ 687.929248][T18236] lo speed is unknown, defaulting to 1000 [ 688.770046][T18276] netlink: 'syz.4.3757': attribute type 10 has an invalid length. [ 688.806696][T18276] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 688.840539][T18276] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 688.945777][T18273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.679929][T18304] netlink: 'syz.0.3766': attribute type 12 has an invalid length. [ 690.694678][T18304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3766'. [ 693.558161][T18359] tipc: Started in network mode [ 693.566284][T18359] tipc: Node identity 2007ff, cluster identity 4711 [ 693.597236][T18359] tipc: Node number set to 2099199 [ 694.327728][T18366] futex_wake_op: syz.3.3786 tries to shift op by 144; fix this program [ 695.689451][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 695.689472][ T27] audit: type=1800 audit(1787626579.276:893): pid=18372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3787" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 696.900103][T18425] sch_tbf: burst 1520 is lower than device lo mtu (32783) ! [ 696.979757][T18430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3806'. [ 697.566575][ T27] audit: type=1800 audit(1787626581.126:894): pid=18419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3802" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 698.342263][ T5786] Bluetooth: hci1: hardware error 0x00 [ 698.453067][T15516] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 699.519920][T18485] MTD: Couldn't look up './dev/mtdblock0': -2 [ 700.468767][ T5786] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 700.511189][ T27] audit: type=1326 audit(1787626584.096:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18501 comm="syz.0.3830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 700.610228][ T27] audit: type=1326 audit(1787626584.126:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18501 comm="syz.0.3830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 700.652784][ T27] audit: type=1326 audit(1787626584.126:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18501 comm="syz.0.3830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 700.686944][ T27] audit: type=1326 audit(1787626584.126:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18501 comm="syz.0.3830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 700.769175][T18523] CIFS mount error: No usable UNC path provided in device string! [ 700.769175][T18523] [ 700.782504][T18523] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 701.357085][ T27] audit: type=1326 audit(1787626584.126:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18501 comm="syz.0.3830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 701.382933][ T27] audit: type=1326 audit(1787626584.146:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18501 comm="syz.0.3830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 701.437200][ T27] audit: type=1326 audit(1787626584.226:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18501 comm="syz.0.3830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f51f1f5e90e code=0x7ffc0000 [ 701.518639][ T27] audit: type=1326 audit(1787626584.236:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18501 comm="syz.0.3830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f51f1f5e90e code=0x7ffc0000 [ 701.590684][ T27] audit: type=1326 audit(1787626584.246:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18501 comm="syz.0.3830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f51f1f5e90e code=0x7ffc0000 [ 701.742557][T18530] netlink: 'syz.0.3837': attribute type 4 has an invalid length. [ 701.775678][ T27] audit: type=1326 audit(1787626584.246:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18501 comm="syz.0.3830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f51f1f5e90e code=0x7ffc0000 [ 701.854350][ T27] audit: type=1326 audit(1787626584.246:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18501 comm="syz.0.3830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f51f1f5e90e code=0x7ffc0000 [ 701.893482][ T27] audit: type=1326 audit(1787626584.246:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18501 comm="syz.0.3830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f51f1f5e90e code=0x7ffc0000 [ 701.932353][T18533] syz.4.3838 (18533): attempted to duplicate a private mapping with mremap. This is not supported. [ 701.954082][T18527] loop3: detected capacity change from 0 to 8192 [ 701.997730][T18527] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 702.026120][ T27] audit: type=1326 audit(1787626584.246:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18501 comm="syz.0.3830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f51f1f5e90e code=0x7ffc0000 [ 702.147401][ T27] audit: type=1326 audit(1787626584.256:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18501 comm="syz.0.3830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f51f1f5e90e code=0x7ffc0000 [ 702.834093][T18552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3846'. [ 702.876512][T18552] ip6gre1: entered promiscuous mode [ 702.889731][T18552] ip6gre1: entered allmulticast mode [ 702.963687][T18552] netlink: 'syz.0.3846': attribute type 6 has an invalid length. [ 702.981136][T18552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3846'. [ 703.356739][T18566] netlink: 'syz.4.3850': attribute type 11 has an invalid length. [ 705.153790][T18584] netlink: 'syz.9.3856': attribute type 4 has an invalid length. [ 705.461685][T18586] netlink: 'syz.9.3857': attribute type 10 has an invalid length. [ 705.560229][T18586] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 705.642859][T18585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.959949][T18611] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 708.033708][T18623] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3870'. [ 708.156316][T18632] loop3: detected capacity change from 0 to 1024 [ 708.187226][T18632] ext4: Unknown parameter 'no' [ 708.232349][T17310] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 708.791612][T18642] lo speed is unknown, defaulting to 1000 [ 709.641455][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 709.641468][ T27] audit: type=1326 audit(1787626593.226:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18652 comm="syz.4.3880" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f152a19e0d9 code=0x0 [ 709.752287][T18660] netlink: 'syz.3.3878': attribute type 10 has an invalid length. [ 709.801852][T18660] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 709.959447][T18654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.770612][T18703] netlink: 'syz.4.3896': attribute type 4 has an invalid length. [ 712.904250][ T5779] lo speed is unknown, defaulting to 1000 [ 713.615017][T18725] netlink: 'syz.0.3903': attribute type 10 has an invalid length. [ 714.017738][T18725] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 714.480251][ T27] audit: type=1326 audit(1787626598.066:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18723 comm="syz.9.3902" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fedab59e0d9 code=0x0 [ 714.486536][T18724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.395807][T18756] netlink: 'syz.9.3916': attribute type 1 has an invalid length. [ 715.539010][T18754] loop3: detected capacity change from 0 to 512 [ 715.636577][T18756] bond4: entered promiscuous mode [ 715.680671][T18756] bond4: entered allmulticast mode [ 715.694882][T18759] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3916'. [ 715.782767][T18759] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 715.850437][T18759] bond4: (slave bridge3): making interface the new active one [ 715.905830][T18759] bridge3: entered promiscuous mode [ 715.944730][T18759] bridge3: entered allmulticast mode [ 715.981203][T18759] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 716.020826][T18761] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3916'. [ 716.064984][T18761] bond4: left promiscuous mode [ 716.103704][T18761] bridge3: left promiscuous mode [ 716.147696][T18761] bond4: left allmulticast mode [ 716.167017][T18761] bridge3: left allmulticast mode [ 716.194989][T18761] 8021q: adding VLAN 0 to HW filter on device bond4 [ 716.469332][ T5786] Bluetooth: hci3: Unknown advertising packet type: 0x14 [ 716.820585][T18779] netlink: 'syz.0.3924': attribute type 10 has an invalid length. [ 716.854614][T18778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 717.648836][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3930'. [ 717.650079][T18791] team0: Port device dummy0 removed [ 717.744643][T18791] team0: Port device netdevsim0 removed [ 717.791309][T18791] bond0: (slave wlan1): Releasing backup interface [ 717.826782][T18791] bond1: (slave ip6gretap1): Releasing active interface [ 717.878024][T18795] team0: Mode changed to "activebackup" [ 718.259741][T18814] netlink: 'syz.9.3936': attribute type 4 has an invalid length. [ 720.317568][ T49] tipc: Subscription rejected, illegal request [ 720.488865][ T27] audit: type=1326 audit(1787626604.076:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.0.3950" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 720.559598][ T27] audit: type=1326 audit(1787626604.076:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.0.3950" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 720.648316][ T27] audit: type=1326 audit(1787626604.076:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.0.3950" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 720.709578][ T27] audit: type=1326 audit(1787626604.076:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.0.3950" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 720.777011][ T27] audit: type=1326 audit(1787626604.076:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.0.3950" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 720.822121][ T27] audit: type=1326 audit(1787626604.076:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.0.3950" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 720.889916][ T27] audit: type=1326 audit(1787626604.076:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.0.3950" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 720.967938][ T27] audit: type=1326 audit(1787626604.076:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.0.3950" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 721.076783][ T27] audit: type=1326 audit(1787626604.076:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.0.3950" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 721.106091][ T27] audit: type=1326 audit(1787626604.076:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.0.3950" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f1f9e0d9 code=0x7ffc0000 [ 721.884028][T18889] loop3: detected capacity change from 0 to 8192 [ 721.914394][T18889] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 723.274844][ T5779] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 723.618449][ T5779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.821624][ T5779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.834588][ T5779] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 723.848685][ T5779] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 723.858164][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.870643][ T5779] usb 4-1: config 0 descriptor?? [ 724.323898][ T5779] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 724.371747][ T5779] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 724.675081][ T5779] usb 4-1: USB disconnect, device number 4 [ 726.685022][T18977] Invalid ELF header magic: != ELF [ 727.096895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 728.014197][T18996] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.4001'. [ 728.063110][T18996] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 728.238149][ T5841] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 728.461175][ T5841] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.500609][ T5841] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.543909][ T5841] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 728.666790][ T5841] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 728.676722][ T5841] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.718207][ T5841] usb 10-1: config 0 descriptor?? [ 729.730889][ T5841] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 729.747838][ T5841] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 730.029038][ T5841] usb 10-1: USB disconnect, device number 7 [ 730.184892][T19026] netlink: 'syz.4.4011': attribute type 1 has an invalid length. [ 730.233908][T19026] bond10: entered allmulticast mode [ 730.268765][T19026] bond10: (slave vti0): The slave device specified does not support setting the MAC address [ 730.280648][T19026] bond10: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 730.294520][T19026] bond10: (slave vti0): making interface the new active one [ 730.302521][T19026] vti0: entered allmulticast mode [ 730.310011][T19026] bond10: (slave vti0): Enslaving as an active interface with an up link [ 730.357702][T19026] bond10 (unregistering): (slave vti0): Releasing backup interface [ 730.405403][T19026] vti0: left allmulticast mode [ 730.419722][T19026] bond10 (unregistering): Released all slaves [ 730.443354][T19030] tipc: Enabling of bearer rejected, failed to enable media [ 734.150632][T19105] syzkaller0: entered promiscuous mode [ 734.166005][T19105] syzkaller0: entered allmulticast mode [ 735.111820][ T5786] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 735.123569][ T5786] Bluetooth: hci2: Injecting HCI hardware error event [ 735.137163][ T5786] Bluetooth: hci2: hardware error 0x00 [ 735.465032][T19126] binder_alloc: 19125: binder_alloc_buf, no vma [ 736.640252][T19139] macsec1: entered promiscuous mode [ 736.645625][T19139] virt_wifi0: entered promiscuous mode [ 737.187505][ T5786] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 738.328108][T19189] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4066'. [ 738.596697][T19198] netlink: 'syz.9.4069': attribute type 1 has an invalid length. [ 738.753939][T19198] bond5: (slave gretap2): making interface the new active one [ 738.817552][T19198] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 738.902833][T19198] syz.9.4069 (19198) used greatest stack depth: 19504 bytes left [ 739.041456][T19213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4075'. [ 739.398629][T19227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4079'. [ 740.580437][T19257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4090'. [ 741.645111][ T27] kauditd_printk_skb: 41 callbacks suppressed [ 741.645129][ T27] audit: type=1326 audit(1787626625.226:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19264 comm="syz.4.4101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f152a19e0d9 code=0x0 [ 745.269339][ T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 745.477417][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 745.496308][ T9] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 745.525693][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.542916][ T9] usb 10-1: Product: syz [ 745.550944][ T9] usb 10-1: Manufacturer: syz [ 745.561973][ T9] usb 10-1: SerialNumber: syz [ 746.007939][T19311] xt_TCPMSS: Only works on TCP SYN packets [ 746.305360][ T9] snd-usb-audio: probe of 10-1:1.0 failed with error -71 [ 746.317359][ T9] usb 10-1: USB disconnect, device number 8 [ 747.590424][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.597126][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.642857][ T27] audit: type=1326 audit(1787626631.226:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19335 comm="syz.9.4113" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab59e0d9 code=0x7ffc0000 [ 747.733176][ T27] audit: type=1326 audit(1787626631.226:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19335 comm="syz.9.4113" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab59e0d9 code=0x7ffc0000 [ 747.800861][ T27] audit: type=1326 audit(1787626631.256:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19335 comm="syz.9.4113" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fedab59e0d9 code=0x7ffc0000 [ 747.891527][ T27] audit: type=1326 audit(1787626631.256:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19335 comm="syz.9.4113" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab59e0d9 code=0x7ffc0000 [ 747.891950][T19337] loop3: detected capacity change from 0 to 1024 [ 747.978774][ T27] audit: type=1326 audit(1787626631.256:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19335 comm="syz.9.4113" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab59e0d9 code=0x7ffc0000 [ 748.041580][ T27] audit: type=1326 audit(1787626631.256:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19335 comm="syz.9.4113" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fedab59e0d9 code=0x7ffc0000 [ 748.041609][ T27] audit: type=1326 audit(1787626631.256:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19335 comm="syz.9.4113" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab59e0d9 code=0x7ffc0000 [ 748.041636][ T27] audit: type=1326 audit(1787626631.256:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19335 comm="syz.9.4113" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab59e0d9 code=0x7ffc0000 [ 748.041657][ T27] audit: type=1326 audit(1787626631.256:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19335 comm="syz.9.4113" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fedab59e0d9 code=0x7ffc0000 [ 748.041678][ T27] audit: type=1326 audit(1787626631.256:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19335 comm="syz.9.4113" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab59e0d9 code=0x7ffc0000 [ 748.329457][T19348] cgroup: noprefix used incorrectly [ 748.336572][T19348] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4116'. [ 748.590368][T19352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4119'. [ 748.637871][ T5816] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 748.668920][ T9] libceph: connect (1)[c::]:6789 error -101 [ 748.697486][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 748.814115][T19354] ceph: No mds server is up or the cluster is laggy [ 748.830548][ T5816] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 748.840953][ T5816] usb 10-1: config 1 has no interface number 0 [ 748.847906][ T5816] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 748.857389][ T5816] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 748.875888][ T5816] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 748.902249][ T5816] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice= 0.40 [ 748.923972][ T5816] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.937318][ T5816] usb 10-1: Product: syz [ 748.942771][ T5816] usb 10-1: Manufacturer: syz [ 748.967184][ T5816] usb 10-1: SerialNumber: syz [ 749.217097][T19345] loop9: detected capacity change from 0 to 8 [ 749.358847][ T5816] usb 10-1: 1:0 : does not exist [ 749.375171][ T5816] usb 10-1: BAAD GENERIC IO: no channels? [ 749.465527][ T5816] snd-usb-audio: probe of 10-1:1.1 failed with error -22 [ 749.501720][ T5816] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 749.527239][ T5816] snd_usb_pod 10-1:1.1: set_interface failed [ 749.550528][ T5816] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 749.567122][ T5816] snd_usb_pod: probe of 10-1:1.1 failed with error -71 [ 749.597615][ T5816] usb 10-1: USB disconnect, device number 9 [ 749.633883][T17131] udevd[17131]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 752.318369][ T5841] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 752.626938][ T5841] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 752.645952][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.707083][ T5841] usb 4-1: config 0 descriptor?? [ 752.744682][ T5841] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 753.435490][T19489] netlink: 'syz.4.4163': attribute type 7 has an invalid length. [ 753.463549][T19489] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.472437][T19489] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.481421][T19489] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.490844][T19489] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.542746][T19489] netlink: 'syz.4.4163': attribute type 7 has an invalid length. [ 753.561973][T19489] netlink: 'syz.4.4163': attribute type 7 has an invalid length. [ 754.324808][T19509] loop9: detected capacity change from 0 to 512 [ 754.365217][T19509] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 754.848805][ T5841] gspca_stv06xx: I2C: Read error writing address: -71 [ 754.937646][ T5841] usb 4-1: USB disconnect, device number 5 [ 756.353839][T19539] bond8: (slave dummy0): Releasing active interface [ 756.404047][T19539] bond0: (slave wlan1): Releasing backup interface [ 756.513097][T19539] bond6: (slave veth15): Releasing active interface [ 756.556796][T19539] bond7: (slave geneve2): Releasing active interface [ 756.564022][T19539] geneve2: left allmulticast mode [ 756.634829][T19539] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.657590][T19539] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.686941][T19539] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.704554][T19545] Config c/1 of g1 needs at least one function. [ 756.719723][T19539] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.756659][T19545] udc dummy_udc.0: failed to start g1: -22 [ 756.764286][T19539] bond8: (slave veth17): Releasing active interface [ 756.788532][T19545] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 756.842465][T19539] bond9: (slave bridge4): Releasing backup interface [ 756.857268][T19539] bridge4: left promiscuous mode [ 756.868839][T19539] bridge4: left allmulticast mode [ 756.961796][T19545] UDC core: g1: couldn't find an available UDC or it's busy [ 757.276027][T19540] team0: Mode changed to "loadbalance" [ 757.983870][T19554] Process accounting resumed [ 758.061899][T19564] netlink: 'syz.9.4191': attribute type 10 has an invalid length. [ 758.116101][T19564] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 758.147999][T19566] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4191'. [ 758.197790][T19549] loop3: detected capacity change from 0 to 40427 [ 758.243122][T19549] F2FS-fs (loop3): Unrecognized mount option "fault_inection=00000000000000000010" or missing value [ 758.338182][T19566] bond0: (slave bridge0): Releasing backup interface [ 760.999131][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 760.999147][ T27] audit: type=1326 audit(1787626644.586:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19597 comm="syz.4.4203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a19e0d9 code=0x7ffc0000 [ 761.169817][ T27] audit: type=1326 audit(1787626644.636:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19597 comm="syz.4.4203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f152a19e0d9 code=0x7ffc0000 [ 761.197590][ T27] audit: type=1326 audit(1787626644.636:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19597 comm="syz.4.4203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a19e0d9 code=0x7ffc0000 [ 761.246982][ T27] audit: type=1326 audit(1787626644.636:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19597 comm="syz.4.4203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a19e0d9 code=0x7ffc0000 [ 761.312493][ T27] audit: type=1326 audit(1787626644.636:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19597 comm="syz.4.4203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f152a19e0d9 code=0x7ffc0000 [ 761.351693][ T27] audit: type=1326 audit(1787626644.656:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19597 comm="syz.4.4203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a19e0d9 code=0x7ffc0000 [ 761.378964][ T27] audit: type=1326 audit(1787626644.656:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19597 comm="syz.4.4203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f152a19e0d9 code=0x7ffc0000 [ 761.422814][ T27] audit: type=1326 audit(1787626644.656:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19597 comm="syz.4.4203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a19e0d9 code=0x7ffc0000 [ 761.449267][ T27] audit: type=1326 audit(1787626644.656:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19597 comm="syz.4.4203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a19e0d9 code=0x7ffc0000 [ 761.474952][ T27] audit: type=1326 audit(1787626644.656:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19597 comm="syz.4.4203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f152a19e0d9 code=0x7ffc0000 [ 761.989457][T19631] jffs2: notice: (19631) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 762.366968][ T974] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 762.559961][ T974] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 762.583985][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.602901][ T974] usb 4-1: Product: syz [ 763.359713][ T974] usb 4-1: Manufacturer: syz [ 763.364625][ T974] usb 4-1: SerialNumber: syz [ 763.372269][ T974] usb 4-1: config 0 descriptor?? [ 763.381049][ T974] hub 4-1:0.0: bad descriptor, ignoring hub [ 763.437136][ T974] hub: probe of 4-1:0.0 failed with error -5 [ 763.658265][T19662] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 764.147182][ T974] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 764.160671][ T974] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 764.174235][ T974] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 764.188656][ T974] usb 4-1: media controller created [ 764.300466][ T974] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 764.502146][ T974] DVB: Unable to find symbol dib7000p_attach() [ 764.530426][ T974] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 764.734305][ T974] rc_core: IR keymap rc-dib0700-rc5 not found [ 764.747829][ T974] Registered IR keymap rc-empty [ 764.775630][ T974] dvb-usb: could not initialize remote control. [ 764.821283][ T974] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 765.040214][ T974] usb 4-1: USB disconnect, device number 6 [ 765.169293][ T974] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 765.324090][T19699] fuse: Bad value for 'fd' [ 767.786183][T19745] fuse: Bad value for 'fd' [ 768.540277][T19769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4254'. [ 769.049686][T19784] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.4259'. [ 769.351126][ T974] libceph: connect (1)[c::]:6789 error -101 [ 769.360873][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 769.484333][T19794] ceph: No mds server is up or the cluster is laggy [ 769.923952][T19825] loop3: detected capacity change from 0 to 512 [ 770.013689][T19825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 770.397984][T16443] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.423793][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4280'. [ 770.759249][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 770.759731][ T27] audit: type=1326 audit(1787626654.346:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.9.4285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab59e0d9 code=0x7ffc0000 [ 770.819354][ T27] audit: type=1326 audit(1787626654.346:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.9.4285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab59e0d9 code=0x7ffc0000 [ 770.868063][ C0] ------------[ cut here ]------------ [ 770.875258][ C0] WARNING: CPU: 0 PID: 19858 at net/core/flow_dissector.c:1107 __skb_flow_dissect+0xb05/0x6e70 [ 770.876625][ T27] audit: type=1326 audit(1787626654.346:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.9.4285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedab59e0d9 code=0x7ffc0000 [ 770.885849][ C0] Modules linked in: [ 770.885972][ C0] CPU: 0 PID: 19858 Comm: syz.4.4287 Not tainted syzkaller #0 [ 770.926165][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 770.937344][ C0] RIP: 0010:__skb_flow_dissect+0xb05/0x6e70 [ 770.943728][ C0] Code: c6 e8 3f 42 06 f9 85 db 0f 84 9a 06 00 00 80 3d e4 c1 f5 05 01 0f 85 c0 06 00 00 e8 75 3e 06 f9 e9 d5 f9 ff ff e8 6b 3e 06 f9 <0f> 0b e8 74 5c 0e 02 89 c3 31 ff 89 c6 e8 09 42 06 f9 85 db 74 18 [ 770.955205][ T27] audit: type=1326 audit(1787626654.346:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.9.4285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fedab59e0d9 code=0x7ffc0000 [ 770.966768][ C0] RSP: 0018:ffffc90000006940 EFLAGS: 00010246 [ 770.966799][ C0] RAX: ffffffff88813405 RBX: 0000000000000000 RCX: ffff888022d8da00 [ 770.966815][ C0] RDX: 0000000000000100 RSI: ffffffff8b1d3240 RDI: ffffffff8b1d3200 [ 770.966857][ C0] RBP: ffffc90000006f58 R08: dffffc0000000000 R09: 1ffffffff223dea0 [ 770.966874][ C0] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: ffffffff8e8cf838 [ 770.966890][ C0] R13: 1ffffffff1d19f08 R14: ffffffff8e8cf842 R15: dffffc0000000000 [ 770.966908][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 770.966926][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 770.966942][ C0] CR2: 00007f03bc988f40 CR3: 0000000024ec1000 CR4: 00000000003506f0 [ 770.966967][ C0] Call Trace: [ 770.966982][ C0] [ 770.966998][ C0] ? __skb_flow_dissect+0x1eb/0x6e70 [ 770.967034][ C0] ? mark_lock+0x94/0x320 [ 770.967080][ C0] ? mark_lock+0x94/0x320 [ 770.967106][ C0] ? bpf_flow_dissect+0x3f0/0x3f0 [ 770.967128][ C0] ? __lock_acquire+0x1262/0x7d80 [ 770.967166][ C0] ? mark_lock+0x94/0x320 [ 770.967194][ C0] ? __lock_acquire+0x1336/0x7d80 [ 770.967227][ C0] ? mark_lock+0x94/0x320 [ 770.967253][ C0] ? __lock_acquire+0x1262/0x7d80 [ 770.967298][ C0] ? verify_lock_unused+0x140/0x140 [ 770.967318][ C0] ? trace_pelt_se_tp+0x39/0x100 [ 770.967349][ C0] ? verify_lock_unused+0x140/0x140 [ 770.967376][ C0] ? verify_lock_unused+0x140/0x140 [ 770.967422][ C0] __skb_get_hash+0xf3/0x2e0 [ 770.967451][ C0] ? __skb_get_hash_symmetric+0x1d0/0x1d0 [ 770.967472][ C0] ? ip_vs_conn_hashkey_param+0x34a/0x5c0 [ 771.005481][ T27] audit: type=1326 audit(1787626654.396:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.9.4285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fedab55e90e code=0x7ffc0000 [ 771.006583][ C0] ? __ip_vs_conn_in_get+0x9a/0xae0 [ 771.015688][ T27] audit: type=1326 audit(1787626654.396:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.9.4285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fedab55e90e code=0x7ffc0000 [ 771.023313][ C0] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 771.032849][ T27] audit: type=1326 audit(1787626654.406:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.9.4285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fedab55e90e code=0x7ffc0000 [ 771.040308][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 771.050201][ T27] audit: type=1326 audit(1787626654.436:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.9.4285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fedab55e90e code=0x7ffc0000 [ 771.056146][ C0] nft_trace_init+0x1bb/0x420 [ 771.065258][ T27] audit: type=1326 audit(1787626654.436:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.9.4285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fedab55e90e code=0x7ffc0000 [ 771.068184][ C0] ? nf_trace_fill_pkt_info+0x870/0x870 [ 771.068315][ C0] nft_do_chain+0x1523/0x1620 [ 771.071762][ T27] audit: type=1326 audit(1787626654.436:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19851 comm="syz.9.4285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fedab55e90e code=0x7ffc0000 [ 771.076578][ C0] ? udp_conn_schedule+0x352/0x740 [ 771.076618][ C0] ? __udp_exit+0x40/0x40 [ 771.355525][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 771.361561][ C0] nft_do_chain_ipv4+0x160/0x230 [ 771.366542][ C0] ? nf_tables_netdev_event+0x9d0/0x9d0 [ 771.372180][ C0] ? nf_nat_ipv4_local_fn+0x411/0x560 [ 771.377625][ C0] ? nf_tables_netdev_event+0x9d0/0x9d0 [ 771.383659][ C0] nf_hook_slow+0xbd/0x200 [ 771.388312][ C0] ? nf_hook+0x390/0x390 [ 771.392664][ C0] nf_hook+0x228/0x390 [ 771.396758][ C0] ? nf_hook+0xa2/0x390 [ 771.401077][ C0] ? __ip_local_out+0x5f0/0x5f0 [ 771.405972][ C0] ? __alloc_skb+0x138/0x2c0 [ 771.410659][ C0] ? nf_hook+0x390/0x390 [ 771.414996][ C0] ? run_timer_softirq+0x67/0xf0 [ 771.420374][ C0] ? handle_softirqs+0x27d/0x820 [ 771.425562][ C0] ? irq_exit_rcu+0x9/0x20 [ 771.430219][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 771.436069][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 771.443210][ C0] ? ip_fast_csum+0x1ee/0x2b0 [ 771.448114][ C0] __ip_local_out+0x4db/0x5f0 [ 771.452856][ C0] ? nf_hook+0x390/0x390 [ 771.457306][ C0] ip_local_out+0x2a/0x130 [ 771.461786][ C0] iptunnel_xmit+0x4d0/0x910 [ 771.466493][ C0] udp_tunnel_xmit_skb+0x22f/0x380 [ 771.471818][ C0] tipc_udp_xmit+0x861/0xb40 [ 771.476754][ C0] ? tipc_udp_xmit+0xb7/0xb40 [ 771.481550][ C0] ? tipc_udp_msg2addr+0x1d0/0x1d0 [ 771.486737][ C0] ? __copy_skb_header+0xa3/0x4a0 [ 771.492385][ C0] ? __asan_memcpy+0x40/0x70 [ 771.497074][ C0] ? __pskb_copy_fclone+0x978/0x1000 [ 771.502416][ C0] ? __asan_memcpy+0x40/0x70 [ 771.507097][ C0] ? __pskb_copy_fclone+0x978/0x1000 [ 771.512604][ C0] tipc_udp_send_msg+0x27e/0x3e0 [ 771.517645][ C0] tipc_bearer_xmit_skb+0x2ad/0x3f0 [ 771.522976][ C0] ? tipc_bearer_xmit_skb+0xaa/0x3f0 [ 771.528544][ C0] ? tipc_bearer_min_mtu+0x1d0/0x1d0 [ 771.534041][ C0] tipc_disc_timeout+0x5f7/0x750 [ 771.539235][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 771.544483][ C0] call_timer_fn+0x189/0x540 [ 771.549191][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 771.554695][ C0] ? call_timer_fn+0xd2/0x540 [ 771.559478][ C0] ? __run_timers+0x810/0x810 [ 771.564281][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 771.569740][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 771.574992][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 771.580264][ C0] __run_timers+0x570/0x810 [ 771.585382][ C0] ? detach_timer+0x2b0/0x2b0 [ 771.590128][ C0] ? lock_chain_count+0x20/0x20 [ 771.595007][ C0] run_timer_softirq+0x67/0xf0 [ 771.599893][ C0] handle_softirqs+0x27d/0x820 [ 771.604703][ C0] ? read_tsc+0x9/0x20 [ 771.609001][ C0] ? ktime_get+0x24b/0x280 [ 771.613453][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 771.618839][ C0] ? do_softirq+0x1a0/0x1a0 [ 771.624076][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 771.629372][ C0] __irq_exit_rcu+0xd3/0x190 [ 771.634011][ C0] ? irq_exit_rcu+0x20/0x20 [ 771.638620][ C0] irq_exit_rcu+0x9/0x20 [ 771.642991][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 771.648812][ C0] [ 771.651877][ C0] [ 771.654864][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 771.661016][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 771.667650][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 771.687615][ C0] RSP: 0018:ffffc9000348f580 EFLAGS: 00000206 [ 771.693817][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 429b826275802800 [ 771.702054][ C0] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d3260 [ 771.711684][ C0] RBP: ffffc9000348f690 R08: dffffc0000000000 R09: 1ffffffff223dea0 [ 771.720549][ C0] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: 1ffff92000691ebc [ 771.728611][ C0] R13: ffffffff8d131e60 R14: 0000000000000246 R15: dffffc0000000000 [ 771.736719][ C0] ? read_lock_is_recursive+0x20/0x20 [ 771.742326][ C0] ? page_ext_put+0x9c/0xb0 [ 771.747002][ C0] ? pfn_valid+0xcd/0x420 [ 771.751383][ C0] pfn_valid+0xe9/0x420 [ 771.755584][ C0] ? pfn_valid+0xcd/0x420 [ 771.760550][ C0] page_table_check_clear+0x1e/0x6a0 [ 771.766061][ C0] ? __page_table_check_pte_clear+0x43/0x70 [ 771.772310][ C0] unmap_page_range+0x1c35/0x32f0 [ 771.777577][ C0] ? copy_page_range+0x3700/0x3700 [ 771.782819][ C0] unmap_vmas+0x286/0x3f0 [ 771.787237][ C0] ? unmap_page_range+0x32f0/0x32f0 [ 771.792500][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 771.797607][ C0] exit_mmap+0x238/0xb90 [ 771.801965][ C0] ? exit_mm_release+0x1a/0x30 [ 771.806736][ C0] ? vm_brk+0x30/0x30 [ 771.810812][ C0] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 771.816997][ C0] ? uprobe_clear_state+0x278/0x290 [ 771.822271][ C0] __mmput+0x118/0x3a0 [ 771.826412][ C0] exit_mm+0x23f/0x340 [ 771.830587][ C0] ? sysctl_delayacct+0x220/0x220 [ 771.835809][ C0] ? do_exit+0x2530/0x2530 [ 771.840481][ C0] ? tty_audit_exit+0x14d/0x1f0 [ 771.845695][ C0] do_exit+0x909/0x2530 [ 771.850674][ C0] ? preempt_schedule_common+0x82/0xc0 [ 771.856180][ C0] ? put_task_struct+0xc0/0xc0 [ 771.861120][ C0] ? preempt_schedule+0xc0/0xd0 [ 771.866029][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 771.871867][ C0] ? lock_chain_count+0x20/0x20 [ 771.876914][ C0] do_group_exit+0x22d/0x2f0 [ 771.881562][ C0] __x64_sys_exit_group+0x3f/0x40 [ 771.886605][ C0] do_syscall_64+0x55/0xb0 [ 771.891450][ C0] ? clear_bhb_loop+0x40/0x90 [ 771.896196][ C0] ? clear_bhb_loop+0x40/0x90 [ 771.901047][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 771.907551][ C0] RIP: 0033:0x7f152a19e0d9 [ 771.912081][ C0] Code: Unable to access opcode bytes at 0x7f152a19e0af. [ 771.919375][ C0] RSP: 002b:00007ffeb00cf2b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 771.928121][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f152a19e0d9 [ 771.936446][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 771.945593][ C0] RBP: 00007ffeb00cf31c R08: 0000000000000000 R09: 00000000000927c0 [ 771.954122][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000046f [ 771.962266][ C0] R13: 00000000000927c0 R14: 00000000000bc25b R15: 00007ffeb00cf370 [ 771.970602][ C0] [ 771.973704][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 771.980987][ C0] CPU: 0 PID: 19858 Comm: syz.4.4287 Not tainted syzkaller #0 [ 771.989052][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 771.999688][ C0] Call Trace: [ 772.003035][ C0] [ 772.005970][ C0] dump_stack_lvl+0x18c/0x250 [ 772.010968][ C0] ? show_regs_print_info+0x20/0x20 [ 772.016173][ C0] ? load_image+0x420/0x420 [ 772.021000][ C0] panic+0x2ca/0x720 [ 772.025229][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 772.030851][ C0] __warn+0x2e0/0x470 [ 772.035059][ C0] ? __skb_flow_dissect+0xb05/0x6e70 [ 772.040456][ C0] ? __skb_flow_dissect+0xb05/0x6e70 [ 772.046407][ C0] report_bug+0x2be/0x4f0 [ 772.050948][ C0] ? __skb_flow_dissect+0xb05/0x6e70 [ 772.056360][ C0] ? __skb_flow_dissect+0xb05/0x6e70 [ 772.062357][ C0] ? __skb_flow_dissect+0xb07/0x6e70 [ 772.067690][ C0] handle_bug+0xcf/0x120 [ 772.072051][ C0] exc_invalid_op+0x1a/0x50 [ 772.076567][ C0] asm_exc_invalid_op+0x1a/0x20 [ 772.081518][ C0] RIP: 0010:__skb_flow_dissect+0xb05/0x6e70 [ 772.087414][ C0] Code: c6 e8 3f 42 06 f9 85 db 0f 84 9a 06 00 00 80 3d e4 c1 f5 05 01 0f 85 c0 06 00 00 e8 75 3e 06 f9 e9 d5 f9 ff ff e8 6b 3e 06 f9 <0f> 0b e8 74 5c 0e 02 89 c3 31 ff 89 c6 e8 09 42 06 f9 85 db 74 18 [ 772.107196][ C0] RSP: 0018:ffffc90000006940 EFLAGS: 00010246 [ 772.113573][ C0] RAX: ffffffff88813405 RBX: 0000000000000000 RCX: ffff888022d8da00 [ 772.121700][ C0] RDX: 0000000000000100 RSI: ffffffff8b1d3240 RDI: ffffffff8b1d3200 [ 772.130373][ C0] RBP: ffffc90000006f58 R08: dffffc0000000000 R09: 1ffffffff223dea0 [ 772.138999][ C0] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: ffffffff8e8cf838 [ 772.147601][ C0] R13: 1ffffffff1d19f08 R14: ffffffff8e8cf842 R15: dffffc0000000000 [ 772.156306][ C0] ? __skb_flow_dissect+0xb05/0x6e70 [ 772.161721][ C0] ? __skb_flow_dissect+0x1eb/0x6e70 [ 772.167041][ C0] ? mark_lock+0x94/0x320 [ 772.171421][ C0] ? mark_lock+0x94/0x320 [ 772.175780][ C0] ? bpf_flow_dissect+0x3f0/0x3f0 [ 772.181708][ C0] ? __lock_acquire+0x1262/0x7d80 [ 772.186856][ C0] ? mark_lock+0x94/0x320 [ 772.191297][ C0] ? __lock_acquire+0x1336/0x7d80 [ 772.196326][ C0] ? mark_lock+0x94/0x320 [ 772.200673][ C0] ? __lock_acquire+0x1262/0x7d80 [ 772.205707][ C0] ? verify_lock_unused+0x140/0x140 [ 772.211252][ C0] ? trace_pelt_se_tp+0x39/0x100 [ 772.216318][ C0] ? verify_lock_unused+0x140/0x140 [ 772.221517][ C0] ? verify_lock_unused+0x140/0x140 [ 772.226749][ C0] __skb_get_hash+0xf3/0x2e0 [ 772.231368][ C0] ? __skb_get_hash_symmetric+0x1d0/0x1d0 [ 772.237110][ C0] ? ip_vs_conn_hashkey_param+0x34a/0x5c0 [ 772.243734][ C0] ? __ip_vs_conn_in_get+0x9a/0xae0 [ 772.249057][ C0] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 772.255409][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 772.260659][ C0] nft_trace_init+0x1bb/0x420 [ 772.265389][ C0] ? nf_trace_fill_pkt_info+0x870/0x870 [ 772.271473][ C0] nft_do_chain+0x1523/0x1620 [ 772.276157][ C0] ? udp_conn_schedule+0x352/0x740 [ 772.281299][ C0] ? __udp_exit+0x40/0x40 [ 772.285637][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 772.291558][ C0] nft_do_chain_ipv4+0x160/0x230 [ 772.297034][ C0] ? nf_tables_netdev_event+0x9d0/0x9d0 [ 772.302584][ C0] ? nf_nat_ipv4_local_fn+0x411/0x560 [ 772.307964][ C0] ? nf_tables_netdev_event+0x9d0/0x9d0 [ 772.313517][ C0] nf_hook_slow+0xbd/0x200 [ 772.318301][ C0] ? nf_hook+0x390/0x390 [ 772.322634][ C0] nf_hook+0x228/0x390 [ 772.326810][ C0] ? nf_hook+0xa2/0x390 [ 772.331011][ C0] ? __ip_local_out+0x5f0/0x5f0 [ 772.335923][ C0] ? __alloc_skb+0x138/0x2c0 [ 772.340688][ C0] ? nf_hook+0x390/0x390 [ 772.344940][ C0] ? run_timer_softirq+0x67/0xf0 [ 772.349891][ C0] ? handle_softirqs+0x27d/0x820 [ 772.355277][ C0] ? irq_exit_rcu+0x9/0x20 [ 772.359735][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 772.365704][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 772.371889][ C0] ? ip_fast_csum+0x1ee/0x2b0 [ 772.376671][ C0] __ip_local_out+0x4db/0x5f0 [ 772.381396][ C0] ? nf_hook+0x390/0x390 [ 772.385733][ C0] ip_local_out+0x2a/0x130 [ 772.390170][ C0] iptunnel_xmit+0x4d0/0x910 [ 772.394775][ C0] udp_tunnel_xmit_skb+0x22f/0x380 [ 772.399993][ C0] tipc_udp_xmit+0x861/0xb40 [ 772.404638][ C0] ? tipc_udp_xmit+0xb7/0xb40 [ 772.409322][ C0] ? tipc_udp_msg2addr+0x1d0/0x1d0 [ 772.414645][ C0] ? __copy_skb_header+0xa3/0x4a0 [ 772.419691][ C0] ? __asan_memcpy+0x40/0x70 [ 772.424292][ C0] ? __pskb_copy_fclone+0x978/0x1000 [ 772.429586][ C0] ? __asan_memcpy+0x40/0x70 [ 772.434223][ C0] ? __pskb_copy_fclone+0x978/0x1000 [ 772.439548][ C0] tipc_udp_send_msg+0x27e/0x3e0 [ 772.444592][ C0] tipc_bearer_xmit_skb+0x2ad/0x3f0 [ 772.449812][ C0] ? tipc_bearer_xmit_skb+0xaa/0x3f0 [ 772.455432][ C0] ? tipc_bearer_min_mtu+0x1d0/0x1d0 [ 772.460755][ C0] tipc_disc_timeout+0x5f7/0x750 [ 772.465765][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 772.471109][ C0] call_timer_fn+0x189/0x540 [ 772.475720][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 772.480939][ C0] ? call_timer_fn+0xd2/0x540 [ 772.485656][ C0] ? __run_timers+0x810/0x810 [ 772.490363][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 772.495601][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 772.500820][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 772.506034][ C0] __run_timers+0x570/0x810 [ 772.510581][ C0] ? detach_timer+0x2b0/0x2b0 [ 772.515555][ C0] ? lock_chain_count+0x20/0x20 [ 772.520760][ C0] run_timer_softirq+0x67/0xf0 [ 772.525570][ C0] handle_softirqs+0x27d/0x820 [ 772.530789][ C0] ? read_tsc+0x9/0x20 [ 772.534959][ C0] ? ktime_get+0x24b/0x280 [ 772.540194][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 772.545054][ C0] ? do_softirq+0x1a0/0x1a0 [ 772.549559][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 772.554807][ C0] __irq_exit_rcu+0xd3/0x190 [ 772.560036][ C0] ? irq_exit_rcu+0x20/0x20 [ 772.564759][ C0] irq_exit_rcu+0x9/0x20 [ 772.569008][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 772.575265][ C0] [ 772.578233][ C0] [ 772.581214][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 772.587331][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 772.592659][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 772.613361][ C0] RSP: 0018:ffffc9000348f580 EFLAGS: 00000206 [ 772.619809][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 429b826275802800 [ 772.627888][ C0] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d3260 [ 772.636060][ C0] RBP: ffffc9000348f690 R08: dffffc0000000000 R09: 1ffffffff223dea0 [ 772.644074][ C0] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: 1ffff92000691ebc [ 772.652419][ C0] R13: ffffffff8d131e60 R14: 0000000000000246 R15: dffffc0000000000 [ 772.660684][ C0] ? read_lock_is_recursive+0x20/0x20 [ 772.666106][ C0] ? page_ext_put+0x9c/0xb0 [ 772.671106][ C0] ? pfn_valid+0xcd/0x420 [ 772.675783][ C0] pfn_valid+0xe9/0x420 [ 772.680124][ C0] ? pfn_valid+0xcd/0x420 [ 772.686143][ C0] page_table_check_clear+0x1e/0x6a0 [ 772.691494][ C0] ? __page_table_check_pte_clear+0x43/0x70 [ 772.697816][ C0] unmap_page_range+0x1c35/0x32f0 [ 772.703096][ C0] ? copy_page_range+0x3700/0x3700 [ 772.709119][ C0] unmap_vmas+0x286/0x3f0 [ 772.713475][ C0] ? unmap_page_range+0x32f0/0x32f0 [ 772.718697][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 772.724053][ C0] exit_mmap+0x238/0xb90 [ 772.728522][ C0] ? exit_mm_release+0x1a/0x30 [ 772.733331][ C0] ? vm_brk+0x30/0x30 [ 772.737410][ C0] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 772.743802][ C0] ? uprobe_clear_state+0x278/0x290 [ 772.749062][ C0] __mmput+0x118/0x3a0 [ 772.753578][ C0] exit_mm+0x23f/0x340 [ 772.758475][ C0] ? sysctl_delayacct+0x220/0x220 [ 772.763697][ C0] ? do_exit+0x2530/0x2530 [ 772.768941][ C0] ? tty_audit_exit+0x14d/0x1f0 [ 772.773876][ C0] do_exit+0x909/0x2530 [ 772.778125][ C0] ? preempt_schedule_common+0x82/0xc0 [ 772.783630][ C0] ? put_task_struct+0xc0/0xc0 [ 772.788500][ C0] ? preempt_schedule+0xc0/0xd0 [ 772.793560][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 772.799317][ C0] ? lock_chain_count+0x20/0x20 [ 772.804300][ C0] do_group_exit+0x22d/0x2f0 [ 772.808924][ C0] __x64_sys_exit_group+0x3f/0x40 [ 772.814087][ C0] do_syscall_64+0x55/0xb0 [ 772.818645][ C0] ? clear_bhb_loop+0x40/0x90 [ 772.823447][ C0] ? clear_bhb_loop+0x40/0x90 [ 772.829463][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 772.835759][ C0] RIP: 0033:0x7f152a19e0d9 [ 772.840617][ C0] Code: Unable to access opcode bytes at 0x7f152a19e0af. [ 772.848145][ C0] RSP: 002b:00007ffeb00cf2b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 772.857146][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f152a19e0d9 [ 772.866916][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 772.875148][ C0] RBP: 00007ffeb00cf31c R08: 0000000000000000 R09: 00000000000927c0 [ 772.884078][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000046f [ 772.892846][ C0] R13: 00000000000927c0 R14: 00000000000bc25b R15: 00007ffeb00cf370 [ 772.901233][ C0] [ 772.905083][ C0] Kernel Offset: disabled [ 772.910633][ C0] Rebooting in 86400 seconds..