last executing test programs: 8m49.890227819s ago: executing program 2 (id=201): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16], 0x34}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 8m49.543693277s ago: executing program 2 (id=202): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) sendmmsg$unix(r0, &(0x7f000000aa40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x20000048) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x4, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x1, 0x26d, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x3ed, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m49.369871441s ago: executing program 2 (id=203): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 8m49.019314328s ago: executing program 2 (id=204): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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") open(&(0x7f0000000100)='./bus\x00', 0x14927e, 0x1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0xfffffffffffffffc]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) 8m48.458996701s ago: executing program 2 (id=210): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000008a000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000089000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x80000970, 0x1f480, 0x0, 0x399}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m47.928255722s ago: executing program 2 (id=211): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket(0x10, 0x3, 0x0) 8m47.662015258s ago: executing program 32 (id=211): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket(0x10, 0x3, 0x0) 13.46751268s ago: executing program 4 (id=2142): syz_usb_disconnect(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 11.752376867s ago: executing program 4 (id=2146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c0001400000000000000008140000001100"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) 8.83034942s ago: executing program 0 (id=2147): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 8.802692691s ago: executing program 1 (id=2148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) 6.810262233s ago: executing program 4 (id=2149): sched_setscheduler(0x0, 0x2, 0x0) r0 = io_uring_setup(0x2688, &(0x7f0000000300)={0x0, 0x600, 0x400, 0x8001002, 0x3d7}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r3}, 0x20) recvmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 6.423041102s ago: executing program 3 (id=2150): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="12000000350000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f00000001c0), 0x0}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.382204203s ago: executing program 1 (id=2151): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080200ffd00000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x24) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/11, 0xb}], 0x1, 0x1d40, 0x4) 6.340254013s ago: executing program 0 (id=2152): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x1}, 0x10) write(r1, &(0x7f00000002c0)="04", 0x1) sendto$inet6(r1, &(0x7f0000000440)="10", 0x1, 0x4044850, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x0, 0x2, 0xfbffffff}, 0x10) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) close(r1) 6.202706556s ago: executing program 3 (id=2153): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000002c0)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x0, 0x1c, "aede62497cf56c9ab5bfd7b842f6b7ea6b8579d27d9c47d7da09f581"}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) semget$private(0x0, 0x2, 0xa) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) 6.162316687s ago: executing program 0 (id=2154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x800}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 6.115476178s ago: executing program 4 (id=2155): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.112221169s ago: executing program 1 (id=2156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r1, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 4.951755903s ago: executing program 0 (id=2157): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x28, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r5) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 4.708232419s ago: executing program 3 (id=2158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda108000000000026010000f8ffffffb702000008000000b703000000000000850000007b00000018010000202070250000000000202020dd1af5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.740355193s ago: executing program 3 (id=2159): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)={0x170001, 0x0, {[0x4, 0x2, 0x6, 0x9a4a, 0x7, 0x4, 0x80, 0x1000]}}) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @local}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 1.640062545s ago: executing program 0 (id=2160): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000340)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r2, 0x711, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) 1.429198239s ago: executing program 0 (id=2161): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r3, 0x1) 1.261861453s ago: executing program 1 (id=2162): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000200)={0x0, 0x2710}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc)=0x102, 0x16) write(r1, &(0x7f0000000000)='\"', 0xfdef) 1.184032695s ago: executing program 4 (id=2163): syz_mount_image$fuse(0xfffffffffffffffe, &(0x7f0000000000)='./file0\x00', 0x8000d4, 0x0, 0x0, 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081c11, 0x0, 0x1, 0x0, &(0x7f0000000080)) rename(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)='./bus/file0\x00') 1.123802586s ago: executing program 3 (id=2164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) 888.140581ms ago: executing program 4 (id=2165): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) r4 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd\x9b`;\x1c\xfc\xaf9\x98\x91\xe7\x00'/52, 0x0) splice(r2, 0x0, r4, 0x0, 0x400c5, 0x5) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffe3e) io_setup(0x8, 0x0) 887.145341ms ago: executing program 1 (id=2173): r0 = socket(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8}, {0xfff2}, {0xfff1, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}}, 0x0) 127.705838ms ago: executing program 3 (id=2166): r0 = timerfd_create(0x0, 0x80000) unshare(0x24020400) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x710, 0x0, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x770) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf4243, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x1, 0x6}) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x7ff}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) 0s ago: executing program 1 (id=2167): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): ode [ 123.492024][ T6442] ip6gre1: entered allmulticast mode [ 123.551217][ T5873] usb 1-1: USB disconnect, device number 2 [ 123.555258][ T6442] netlink: 'syz.2.201': attribute type 6 has an invalid length. [ 123.569124][ T6442] netlink: 72 bytes leftover after parsing attributes in process `syz.2.201'. [ 123.897362][ T6447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.203'. [ 124.016321][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 124.303400][ T6450] loop2: detected capacity change from 0 to 512 [ 124.349422][ T6450] EXT4-fs (loop2): invalid journal inode [ 124.378434][ T6450] EXT4-fs (loop2): can't get journal size [ 124.431475][ T6450] EXT4-fs (loop2): 1 truncate cleaned up [ 124.449875][ T6450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.668965][ T6450] loop2: detected capacity change from 512 to 0 [ 124.680755][ T6464] syz.2.204: attempt to access beyond end of device [ 124.680755][ T6464] loop2: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 124.695362][ T6464] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.204: error -5 reading directory block [ 124.745747][ T5771] syz-executor: attempt to access beyond end of device [ 124.745747][ T5771] loop2: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 124.761237][ T5771] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 124.775299][ T5771] syz-executor: attempt to access beyond end of device [ 124.775299][ T5771] loop2: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 124.790627][ T5771] syz-executor: attempt to access beyond end of device [ 124.790627][ T5771] loop2: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 124.806312][ T5771] syz-executor: attempt to access beyond end of device [ 124.806312][ T5771] loop2: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 124.823230][ T5771] syz-executor: attempt to access beyond end of device [ 124.823230][ T5771] loop2: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 124.839252][ T5771] syz-executor: attempt to access beyond end of device [ 124.839252][ T5771] loop2: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 124.853649][ T5771] syz-executor: attempt to access beyond end of device [ 124.853649][ T5771] loop2: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 124.867723][ T5771] syz-executor: attempt to access beyond end of device [ 124.867723][ T5771] loop2: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 124.881453][ T5771] syz-executor: attempt to access beyond end of device [ 124.881453][ T5771] loop2: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 124.895111][ T5771] EXT4-fs error (device loop2): ext4_get_inode_loc:4634: inode #2: block 5: comm syz-executor: unable to read itable block [ 124.908634][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bc9c800: rx timeout, send abort [ 124.915585][ T5771] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 124.925838][ T5771] EXT4-fs (loop2): I/O error while writing superblock [ 124.933109][ T5771] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5939: IO failure [ 124.944243][ T5771] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 124.954069][ T5771] EXT4-fs (loop2): I/O error while writing superblock [ 124.961311][ T5771] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #2: comm syz-executor: mark_inode_dirty error [ 124.973142][ T5771] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 124.981793][ T5771] EXT4-fs (loop2): I/O error while writing superblock [ 125.008043][ T58] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4619: inode #21: block 10: comm kworker/u4:4: unable to read itable block [ 125.022791][ T58] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 125.031227][ T58] EXT4-fs (loop2): I/O error while writing superblock [ 125.038615][ T58] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4619: inode #2: block 5: comm kworker/u4:4: unable to read itable block [ 125.053529][ T58] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 125.061944][ T58] EXT4-fs (loop2): I/O error while writing superblock [ 125.075468][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.088902][ T5771] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 125.097262][ T5771] EXT4-fs (loop2): I/O error while writing superblock [ 125.176542][ T5771] bond0: (slave syz_tun): Releasing backup interface [ 125.255572][ T58] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.322655][ T58] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.374589][ T58] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.409653][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bc9dc00: rx timeout, send abort [ 125.419653][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bc9c800: abort rx timeout. Force session deactivation [ 125.470492][ T58] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.687943][ T6469] 9pnet: Found fid 0 not clunked [ 125.693513][ T28] audit: type=1326 audit(1783062761.739:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.0.213" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ca4d9de59 code=0x0 [ 125.923889][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bc9dc00: abort rx timeout. Force session deactivation [ 126.389205][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.400113][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.412664][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.423020][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.435742][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 126.443565][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.772722][ T6504] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 126.772722][ T6504] program syz.0.220 not setting count and/or reply_len properly [ 126.794419][ T6502] loop3: detected capacity change from 0 to 256 [ 126.872587][ T6055] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 127.500974][ T28] audit: type=1326 audit(1783062763.539:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.1.218" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7fc00000 [ 127.974289][ T6502] loop3: detected capacity change from 0 to 32768 [ 128.326299][ T58] hsr_slave_0: left promiscuous mode [ 128.384721][ T6055] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by udevd (6055) [ 128.413396][ T58] hsr_slave_1: left promiscuous mode [ 128.443937][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.482614][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.518330][ T5778] Bluetooth: hci0: command tx timeout [ 128.538999][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.546499][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.557079][ T58] bridge_slave_1: left allmulticast mode [ 128.563394][ T58] bridge_slave_1: left promiscuous mode [ 128.581702][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.674179][ T58] bridge_slave_0: left allmulticast mode [ 128.702320][ T58] bridge_slave_0: left promiscuous mode [ 128.708746][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.829605][ T58] veth1_macvtap: left promiscuous mode [ 128.835787][ T58] veth0_macvtap: left promiscuous mode [ 128.857115][ T58] veth1_vlan: left promiscuous mode [ 129.907959][ T970] libceph: connect (1)[c::]:6789 error -101 [ 129.925685][ T970] libceph: mon0 (1)[c::]:6789 connect error [ 129.977765][ T6542] loop3: detected capacity change from 0 to 32768 [ 130.045392][ T6552] ceph: No mds server is up or the cluster is laggy [ 130.598744][ T5778] Bluetooth: hci0: command tx timeout [ 130.757384][ T58] team0 (unregistering): Port device team_slave_1 removed [ 130.849320][ T58] team0 (unregistering): Port device team_slave_0 removed [ 130.943369][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.044813][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.922111][ T58] bond0 (unregistering): Released all slaves [ 132.085243][ T6490] chnl_net:caif_netlink_parms(): no params data found [ 132.126303][ T6559] netlink: 'syz.1.229': attribute type 1 has an invalid length. [ 132.183830][ T6559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.215431][ T6560] bond1: (slave veth3): Enslaving as an active interface with a down link [ 132.242286][ T6561] bond1: (slave dummy0): making interface the new active one [ 132.264166][ T6561] dummy0: entered promiscuous mode [ 132.277290][ T6561] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 132.294159][ T6561] syz.1.229 (6561) used greatest stack depth: 20040 bytes left [ 132.306807][ T6566] netlink: 14 bytes leftover after parsing attributes in process `syz.1.229'. [ 132.357776][ T6566] bond1: (slave dummy0): Releasing active interface [ 132.372755][ T6566] dummy0 (unregistering): left promiscuous mode [ 132.415309][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.236'. [ 132.682268][ T5778] Bluetooth: hci0: command tx timeout [ 132.760472][ T6490] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.767725][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.814053][ T6490] bridge_slave_0: entered allmulticast mode [ 132.842816][ T6490] bridge_slave_0: entered promiscuous mode [ 132.864058][ T6490] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.902400][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.930530][ T6490] bridge_slave_1: entered allmulticast mode [ 132.953804][ T6490] bridge_slave_1: entered promiscuous mode [ 133.057428][ T6490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.095350][ T6490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.162649][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.170785][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.347163][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.371040][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.387695][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.408383][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.430758][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.446154][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.457935][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.479950][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.675188][ T6490] team0: Port device team_slave_0 added [ 133.718429][ T6490] team0: Port device team_slave_1 added [ 133.842484][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.854562][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.950726][ T6490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.992155][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.026258][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.089169][ T6490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.264775][ T6490] hsr_slave_0: entered promiscuous mode [ 134.306009][ T6490] hsr_slave_1: entered promiscuous mode [ 134.333932][ T6490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.348122][ T6490] Cannot create hsr debugfs directory [ 134.462403][ T6627] capability: warning: `syz.0.248' uses 32-bit capabilities (legacy support in use) [ 134.759358][ T5778] Bluetooth: hci0: command tx timeout [ 134.901223][ T6490] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 134.939005][ T6490] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 134.956252][ T6490] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 134.983514][ T6490] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 135.176180][ T6490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.224462][ T6490] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.261495][ T4076] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.268876][ T4076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.306470][ T4076] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.313724][ T4076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.400164][ T6490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.669361][ T6661] loop0: detected capacity change from 0 to 64 [ 135.920777][ T6490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.134710][ T6666] overlayfs: failed to verify origin (76/file1, ino=422, err=-116) [ 136.147050][ T6666] overlayfs: failed to verify origin (76/file1, ino=422, err=-116) [ 136.711599][ T6490] veth0_vlan: entered promiscuous mode [ 136.795207][ T6490] veth1_vlan: entered promiscuous mode [ 137.026325][ T6490] veth0_macvtap: entered promiscuous mode [ 137.058513][ T6490] veth1_macvtap: entered promiscuous mode [ 137.152489][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.163646][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.174682][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.185311][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.198566][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.221767][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.260452][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.283100][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.308306][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.332854][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.359687][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.404062][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.436538][ T6490] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.450330][ T6490] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.461110][ T6490] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.470391][ T6490] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.789860][ T5921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.862866][ T5921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.978905][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.986824][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.422383][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'. [ 138.462459][ T6718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.262'. [ 138.541834][ T6722] bridge1: port 1(vlan2) entered blocking state [ 138.566062][ T6722] bridge1: port 1(vlan2) entered disabled state [ 138.608884][ T6722] vlan2: entered allmulticast mode [ 138.614097][ T6722] bridge1: entered allmulticast mode [ 138.681858][ T6722] vlan2: left allmulticast mode [ 138.686814][ T6722] bridge1: left allmulticast mode [ 140.195755][ T6766] bond2: entered allmulticast mode [ 140.256480][ T6763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.272'. [ 140.548409][ T6766] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.592780][ T6766] bond3: entered allmulticast mode [ 140.626963][ T6766] bond2: (slave bond3): Enslaving as an active interface with an up link [ 140.974400][ T6788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.279'. [ 141.594686][ T6810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.284'. [ 142.093971][ T6823] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 142.146578][ T6823] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 142.442019][ T6836] loop4: detected capacity change from 0 to 1024 [ 143.317187][ T28] audit: type=1804 audit(1783062779.369:143): pid=6846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.292" name="/newroot/8/file1/file1" dev="loop4" ino=20 res=1 errno=0 [ 143.373491][ T28] audit: type=1804 audit(1783062779.419:144): pid=6851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.292" name="/newroot/8/file1/file1" dev="loop4" ino=20 res=1 errno=0 [ 143.420256][ T28] audit: type=1326 audit(1783062779.469:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.1.296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7fc00000 [ 143.498478][ T6846] hfsplus: request for non-existent node 16777216 in B*Tree [ 143.522454][ T28] audit: type=1326 audit(1783062779.469:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.1.296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb7fd19de59 code=0x7fc00000 [ 143.567575][ T6846] hfsplus: request for non-existent node 16777216 in B*Tree [ 143.590319][ T28] audit: type=1326 audit(1783062779.519:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.1.296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb7fd197bd7 code=0x7fc00000 [ 143.705606][ T28] audit: type=1326 audit(1783062779.519:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.1.296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb7fd13f1d9 code=0x7fc00000 [ 143.764673][ T28] audit: type=1326 audit(1783062779.519:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.1.296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb7fd13f29d code=0x7fc00000 [ 143.833296][ T6860] loop0: detected capacity change from 0 to 512 [ 143.848691][ T28] audit: type=1326 audit(1783062779.519:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.1.296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb7fd19de59 code=0x7fc00000 [ 143.951244][ T28] audit: type=1800 audit(1783062779.719:151): pid=6846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.292" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 144.009806][ T6860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.077056][ T6860] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.775085][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.026560][ T28] audit: type=1326 audit(1783062781.079:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.3.302" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51f559de59 code=0x0 [ 147.216013][ T6924] loop0: detected capacity change from 0 to 512 [ 147.284180][ T6924] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 147.398084][ C1] sched: RT throttling activated [ 147.401509][ T6924] EXT4-fs (loop0): orphan cleanup on readonly fs [ 147.480908][ T6924] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 147.600152][ T6924] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 147.607021][ T6924] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.316: couldn't read orphan inode 26 (err -116) [ 147.699506][ T6924] EXT4-fs (loop0): Remounting filesystem read-only [ 147.725415][ T6924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.247946][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.485168][ T6946] netlink: 14 bytes leftover after parsing attributes in process `syz.0.321'. [ 149.831535][ T6967] input: syz1 as /devices/virtual/input/input6 [ 150.646709][ T7002] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 151.470219][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.343'. [ 151.878577][ T970] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 152.018904][ T7032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.078179][ T970] usb 1-1: Using ep0 maxpacket: 32 [ 152.112182][ T970] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02 [ 152.132631][ T970] usb 1-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25 [ 152.161403][ T970] usb 1-1: Product: syz [ 152.177198][ T970] usb 1-1: Manufacturer: syz [ 152.198385][ T970] usb 1-1: SerialNumber: syz [ 152.210325][ T7032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.217618][ T970] usb 1-1: config 0 descriptor?? [ 152.246601][ T970] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 152.269759][ T970] ftdi_sio ttyUSB0: unknown device type: 0x302 [ 152.343515][ T7035] erspan0: entered promiscuous mode [ 152.387318][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'. [ 152.731753][ T788] usb 1-1: USB disconnect, device number 3 [ 152.748761][ T788] ftdi_sio 1-1:0.0: device disconnected [ 156.817382][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.361'. [ 156.886850][ T7083] overlayfs: failed to clone upperpath [ 157.504628][ T7103] netlink: 180 bytes leftover after parsing attributes in process `syz.3.368'. [ 158.453676][ T7134] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 158.453676][ T7134] The task syz.1.375 (7134) triggered the difference, watch for misbehavior. [ 159.115172][ T7151] loop3: detected capacity change from 0 to 256 [ 159.137787][ T7151] exfat: Deprecated parameter 'namecase' [ 159.190344][ T7151] exfat: Unknown parameter 'ioch`rset' [ 159.241356][ T6055] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 160.066862][ T28] audit: type=1326 audit(1783062796.119:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.0.388" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca4d9de59 code=0x7ffc0000 [ 160.157182][ T28] audit: type=1326 audit(1783062796.119:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.0.388" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca4d9de59 code=0x7ffc0000 [ 160.189735][ T28] audit: type=1326 audit(1783062796.119:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.0.388" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca4d9de59 code=0x7ffc0000 [ 160.223116][ T28] audit: type=1326 audit(1783062796.149:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.0.388" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f5ca4d9de59 code=0x7ffc0000 [ 160.253832][ T28] audit: type=1326 audit(1783062796.149:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.0.388" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca4d9de59 code=0x7ffc0000 [ 160.349593][ T28] audit: type=1326 audit(1783062796.149:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.0.388" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca4d9de59 code=0x7ffc0000 [ 160.435158][ T28] audit: type=1326 audit(1783062796.169:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.0.388" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca4d9de59 code=0x7ffc0000 [ 160.555925][ T28] audit: type=1326 audit(1783062796.169:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.0.388" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca4d9de59 code=0x7ffc0000 [ 160.667799][ T28] audit: type=1326 audit(1783062796.169:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.0.388" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca4d9de59 code=0x7ffc0000 [ 160.768570][ T28] audit: type=1326 audit(1783062796.169:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.0.388" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f5ca4d9de59 code=0x7ffc0000 [ 162.022803][ T7205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 162.179138][ T7207] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3739920483 (478709821824 ns) > initial count (167705171968 ns). Using initial count to start timer. [ 162.242715][ T970] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 162.441563][ T970] usb 1-1: Using ep0 maxpacket: 8 [ 162.461321][ T970] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.498236][ T970] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 162.527705][ T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.562476][ T7220] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 162.614232][ T970] usb 1-1: config 0 descriptor?? [ 162.876318][ T970] usbhid 1-1:0.0: can't add hid device: -71 [ 162.884740][ T970] usbhid: probe of 1-1:0.0 failed with error -71 [ 162.904884][ T970] usb 1-1: USB disconnect, device number 4 [ 164.737474][ T7247] loop0: detected capacity change from 0 to 40427 [ 164.858410][ T7247] F2FS-fs (loop0): Found nat_bits in checkpoint [ 165.047758][ T7247] F2FS-fs (loop0): Start checkpoint disabled! [ 165.143626][ T7247] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 165.945180][ T4076] bio_check_eod: 25 callbacks suppressed [ 165.945200][ T4076] kworker/u4:7: attempt to access beyond end of device [ 165.945200][ T4076] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.973906][ T4076] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 167.335720][ T7358] overlayfs: failed to clone upperpath [ 167.726220][ T7374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.426'. [ 167.751903][ T7374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.426'. [ 167.803358][ T7374] syz_tun: entered promiscuous mode [ 167.847039][ T7374] syz_tun: left promiscuous mode [ 167.966149][ T7384] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 169.919373][ C1] hrtimer: interrupt took 1604430 ns [ 169.994230][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 170.194846][ T7446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.438'. [ 170.237211][ T7455] loop0: detected capacity change from 0 to 128 [ 170.273486][ T7446] geneve2: entered promiscuous mode [ 170.297138][ T7455] syz.0.442: attempt to access beyond end of device [ 170.297138][ T7455] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 172.374888][ T7472] loop0: detected capacity change from 0 to 32768 [ 172.449154][ T7472] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.449 (7472) [ 172.546052][ T7487] loop4: detected capacity change from 0 to 128 [ 172.663135][ T7472] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.719431][ T7487] syz.4.455: attempt to access beyond end of device [ 172.719431][ T7487] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 172.749064][ T7472] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 172.805591][ T7472] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 172.845198][ T7472] BTRFS info (device loop0): trying to use backup root at mount time [ 172.865966][ T7472] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 172.909711][ T7472] BTRFS info (device loop0): trying to use backup root at mount time [ 172.917898][ T7472] BTRFS info (device loop0): force clearing of disk cache [ 172.963291][ T7491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.456'. [ 172.973924][ T7472] BTRFS info (device loop0): enabling disk space caching [ 172.990702][ T7491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.456'. [ 173.001995][ T7472] BTRFS info (device loop0): disk space caching is enabled [ 173.272739][ T7491] syz_tun: entered promiscuous mode [ 173.409618][ T7491] syz_tun: left promiscuous mode [ 173.474032][ T7472] BTRFS info (device loop0): enabling ssd optimizations [ 173.543589][ T7472] BTRFS info (device loop0): rebuilding free space tree [ 173.792764][ T7472] BTRFS info (device loop0): disabling free space tree [ 173.829813][ T7472] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 173.898278][ T7472] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 174.293454][ T7472] loop0: detected capacity change from 32768 to 64 [ 174.554762][ T7519] syz.0.449: attempt to access beyond end of device [ 174.554762][ T7519] loop0: rw=6145, sector=10664, nr_sectors = 8 limit=64 [ 174.624779][ T7519] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 174.734876][ T7519] syz.0.449: attempt to access beyond end of device [ 174.734876][ T7519] loop0: rw=6145, sector=10656, nr_sectors = 8 limit=64 [ 174.810107][ T7519] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 174.872592][ T7519] BTRFS error (device loop0: state AL): Transaction aborted (error -5) [ 174.932850][ T7519] BTRFS: error (device loop0: state AL) in free_log_tree:3319: errno=-5 IO failure [ 174.993608][ T7519] BTRFS info (device loop0: state EAL): forced readonly [ 175.029028][ T7519] BTRFS: error (device loop0: state EAL) in free_log_tree:3319: errno=-5 IO failure [ 175.070054][ T7519] BTRFS warning (device loop0: state EAL): Skipping commit of aborted transaction. [ 175.104740][ T7519] BTRFS: error (device loop0: state EAL) in cleanup_transaction:2021: errno=-5 IO failure [ 175.325298][ T5770] BTRFS info (device loop0: state EAL): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 175.753767][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.467'. [ 175.888481][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.467'. [ 175.901498][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.467'. [ 175.913766][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.467'. [ 175.927211][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.467'. [ 175.937919][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.467'. [ 175.949704][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.467'. [ 175.960177][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.467'. [ 176.626254][ T7537] syz.4.467 (7537) used greatest stack depth: 19824 bytes left [ 179.661189][ T7571] __nla_validate_parse: 3 callbacks suppressed [ 179.661245][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.479'. [ 179.714932][ T5817] IPVS: starting estimator thread 0... [ 179.809684][ T7576] IPVS: using max 18 ests per chain, 43200 per kthread [ 180.058740][ T7583] netlink: 168 bytes leftover after parsing attributes in process `syz.1.483'. [ 180.651163][ T7595] tipc: Failed to remove unknown binding: 66,1,1/0:3331982743/3331982745 [ 180.683171][ T7595] tipc: Failed to remove unknown binding: 66,1,1/0:3331982743/3331982745 [ 180.713605][ T7595] tipc: Failed to remove unknown binding: 66,1,1/0:3331982743/3331982745 [ 183.381970][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 183.381986][ T28] audit: type=1326 audit(1783062819.429:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.0.496" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ca4d9de59 code=0x0 [ 183.449339][ T7637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.502'. [ 184.058611][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 184.097073][ T7643] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.106478][ T7643] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.115323][ T7643] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.124294][ T7643] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.259578][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 184.351148][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 184.606647][ T28] audit: type=1326 audit(1783062820.659:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7647 comm="syz.3.505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51f559de59 code=0x0 [ 185.829510][ T7674] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 187.347027][ T7690] ref_ctr increment failed for inode: 0x2b2 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88805c48d580 [ 188.424199][ T7689] loop3: detected capacity change from 0 to 32768 [ 188.647130][ T7689] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 188.872067][ T7689] XFS (loop3): Ending clean mount [ 188.897540][ T7689] XFS (loop3): Quotacheck needed: Please wait. [ 189.087819][ T7689] XFS (loop3): Quotacheck: Done. [ 189.377909][ T7689] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 192.885995][ T7725] macsec0: entered promiscuous mode [ 192.916890][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 192.970898][ T7725] veth1_macvtap: left promiscuous mode [ 193.511226][ T7741] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 193.654369][ T7741] bond4: entered allmulticast mode [ 193.677229][ T7743] ip6gretap1: entered promiscuous mode [ 194.756448][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.763016][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.685362][ T788] IPVS: starting estimator thread 0... [ 195.788511][ T7774] IPVS: using max 16 ests per chain, 38400 per kthread [ 196.607920][ T7789] loop0: detected capacity change from 0 to 1024 [ 198.967940][ T7837] netlink: 140 bytes leftover after parsing attributes in process `syz.4.567'. [ 198.995057][ T7837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.567'. [ 199.816233][ T7850] netlink: 'syz.3.571': attribute type 1 has an invalid length. [ 199.906469][ T7850] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.074292][ T7854] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 200.145902][ T7854] bond4: (slave wlan0): Enslaving as an active interface with a down link [ 200.225208][ T7857] syz.0.574 uses obsolete (PF_INET,SOCK_PACKET) [ 200.267199][ T7850] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 200.309286][ T7850] bond4: (slave batadv1): making interface the new active one [ 200.326229][ T7858] loop0: detected capacity change from 0 to 512 [ 200.360570][ T7850] batadv1: entered promiscuous mode [ 200.378626][ T7858] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 200.390330][ T7850] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 200.509719][ T7858] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.574: iget: bad extra_isize 58 (inode size 256) [ 200.575783][ T7858] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.574: error while reading EA inode 11 err=-117 [ 200.665302][ T7858] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 200.725021][ T7858] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.574: iget: bad extra_isize 58 (inode size 256) [ 200.776015][ T7858] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.574: error while reading EA inode 11 err=-117 [ 200.826670][ T7858] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.574: iget: bad extra_isize 58 (inode size 256) [ 200.868681][ T7858] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.574: error while reading EA inode 18 err=-117 [ 200.887409][ T7858] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.574: iget: bad extra_isize 58 (inode size 256) [ 200.930824][ T7858] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.574: error while reading EA inode 18 err=-117 [ 200.966810][ T7858] EXT4-fs (loop0): 1 orphan inode deleted [ 201.002804][ T7858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.507640][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.591533][ T7880] xt_TPROXY: Can be used only with -p tcp or -p udp [ 204.416337][ T7938] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 204.445947][ T7938] ref_ctr increment failed for inode: 0x316 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807d3c0980 [ 204.490014][ T7937] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 204.544935][ T7937] ref_ctr decrement failed for inode: 0x316 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807d3c0980 [ 206.506057][ T7945] loop0: detected capacity change from 0 to 32768 [ 206.520680][ T7945] xfs: Unknown parameter 'smackfstransmute' [ 206.649487][ T7945] trusted_key: syz.0.603 sent an empty control message without MSG_MORE. [ 206.918620][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 206.926494][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 207.537600][ T7982] syzkaller0: entered promiscuous mode [ 207.564678][ T7982] syzkaller0: entered allmulticast mode [ 207.828230][ T28] audit: type=1326 audit(1783062843.879:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7988 comm="syz.3.617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f559de59 code=0x7ffc0000 [ 207.872324][ T28] audit: type=1326 audit(1783062843.879:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7988 comm="syz.3.617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f559de59 code=0x7ffc0000 [ 207.947358][ T28] audit: type=1326 audit(1783062843.879:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7988 comm="syz.3.617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f559de59 code=0x7ffc0000 [ 207.995651][ T28] audit: type=1326 audit(1783062843.879:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7988 comm="syz.3.617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f559de59 code=0x7ffc0000 [ 208.098600][ T28] audit: type=1326 audit(1783062843.879:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7988 comm="syz.3.617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f51f559de59 code=0x7ffc0000 [ 208.230798][ T28] audit: type=1326 audit(1783062843.929:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7988 comm="syz.3.617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f559de59 code=0x7ffc0000 [ 208.304125][ T28] audit: type=1326 audit(1783062843.929:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7988 comm="syz.3.617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f51f559dbc2 code=0x7ffc0000 [ 208.332240][ T28] audit: type=1326 audit(1783062843.949:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7988 comm="syz.3.617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f51f559dc57 code=0x7ffc0000 [ 208.393128][ T28] audit: type=1326 audit(1783062843.969:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7988 comm="syz.3.617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f51f555ab51 code=0x7ffc0000 [ 208.448966][ T28] audit: type=1326 audit(1783062843.969:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7988 comm="syz.3.617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f51f559ec49 code=0x7ffc0000 [ 208.791826][ T8010] overlayfs: failed to clone upperpath [ 212.485723][ T7276] batadv1: left promiscuous mode [ 212.828308][ T5817] IPVS: starting estimator thread 0... [ 213.009073][ T8120] IPVS: using max 18 ests per chain, 43200 per kthread [ 215.807330][ T8169] kvm: pic: non byte write [ 215.846676][ T8169] kvm: pic: non byte write [ 215.879093][ T8169] kvm: pic: non byte read [ 215.898598][ T8169] kvm: pic: non byte write [ 215.922029][ T8169] kvm: pic: non byte write [ 215.926696][ T8169] kvm: pic: non byte write [ 215.999450][ T8169] kvm: pic: non byte write [ 216.054912][ T8169] kvm: pic: non byte write [ 216.105624][ T8169] kvm: pic: non byte write [ 216.142362][ T8169] kvm: pic: non byte write [ 216.147037][ T8169] kvm: pic: non byte write [ 216.747428][ T8189] netlink: 'syz.0.668': attribute type 1 has an invalid length. [ 217.189124][ T8189] 8021q: adding VLAN 0 to HW filter on device bond3 [ 217.278956][ T8199] vlan2: entered allmulticast mode [ 217.312723][ T8199] bond3: entered allmulticast mode [ 217.471465][ T8194] bond3: (slave gretap1): making interface the new active one [ 217.529331][ T8194] gretap1: entered allmulticast mode [ 217.595385][ T8194] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 219.009776][ T8212] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 219.072942][ T8212] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 220.206553][ T8226] overlayfs: failed to clone lowerpath [ 220.594590][ T8230] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 220.749859][ T8233] netlink: 'syz.1.686': attribute type 10 has an invalid length. [ 220.822011][ T8233] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 221.098063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 221.228065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 221.338071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 221.348159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 221.468064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 221.588092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 221.648065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #84!!! [ 221.698064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 221.708065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 221.768060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 223.219848][ T8253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.465508][ T8255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.695739][ T8283] bridge4: entered promiscuous mode [ 226.310245][ T8301] mmap: syz.1.710 (8301) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 226.894925][ T8315] loop0: detected capacity change from 0 to 164 [ 227.007592][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.717'. [ 227.026994][ T8315] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 227.058479][ T8315] isofs_fill_super: root inode is not a directory. Corrupted media? [ 227.146717][ T6055] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 228.454433][ T8343] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 228.495053][ T8343] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 235.218866][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.749'. [ 236.159153][ T8414] team0: Port device team_slave_0 removed [ 237.042369][ T8429] netlink: 'syz.1.759': attribute type 1 has an invalid length. [ 237.169714][ T8429] 8021q: adding VLAN 0 to HW filter on device bond5 [ 237.205521][ T8432] vlan2: entered allmulticast mode [ 237.299739][ T8432] veth0_to_bond: entered allmulticast mode [ 237.369333][ T8432] bond5: (slave vlan2): making interface the new active one [ 237.408884][ T8432] bond5: (slave vlan2): Enslaving as an active interface with an up link [ 239.573461][ T8472] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 240.120769][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 240.120809][ T28] audit: type=1326 audit(1783062876.179:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.4.777" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2839de59 code=0x7ffc0000 [ 240.181954][ T28] audit: type=1326 audit(1783062876.179:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.4.777" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2839de59 code=0x7ffc0000 [ 240.211910][ T28] audit: type=1326 audit(1783062876.229:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.4.777" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7fca2839de59 code=0x7ffc0000 [ 240.287703][ T28] audit: type=1326 audit(1783062876.229:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.4.777" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2839de59 code=0x7ffc0000 [ 240.335503][ T28] audit: type=1326 audit(1783062876.229:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.4.777" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fca2839de59 code=0x7ffc0000 [ 240.365507][ T28] audit: type=1326 audit(1783062876.229:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.4.777" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2839de59 code=0x7ffc0000 [ 240.393862][ T28] audit: type=1326 audit(1783062876.239:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.4.777" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2839de59 code=0x7ffc0000 [ 240.422700][ T28] audit: type=1326 audit(1783062876.259:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.4.777" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fca2839de59 code=0x7ffc0000 [ 240.452411][ T28] audit: type=1326 audit(1783062876.259:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.4.777" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2839de59 code=0x7ffc0000 [ 240.491663][ T28] audit: type=1326 audit(1783062876.279:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.4.777" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fca2839de59 code=0x7ffc0000 [ 246.294596][ T8538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.793'. [ 248.196803][ T8572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.803'. [ 249.649241][ T8590] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 249.789848][ T8596] netlink: 'syz.0.810': attribute type 1 has an invalid length. [ 250.020100][ T8596] bond4: entered promiscuous mode [ 250.047692][ T8596] bond4: entered allmulticast mode [ 250.054506][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 250.088348][ T8599] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 250.127821][ T8599] bond4: (slave bridge1): making interface the new active one [ 250.141192][ T8599] bridge1: entered promiscuous mode [ 250.146765][ T8599] bridge1: entered allmulticast mode [ 250.168929][ T8599] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 250.288180][ T8600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.810'. [ 250.335466][ T8600] bond4: left promiscuous mode [ 250.348421][ T8600] bridge1: left promiscuous mode [ 250.353679][ T8600] bond4: left allmulticast mode [ 250.367994][ T8600] bridge1: left allmulticast mode [ 250.375330][ T8600] 8021q: adding VLAN 0 to HW filter on device bond4 [ 251.562763][ T8630] bridge0: port 2(bridge_slave_1) entered listening state [ 251.620798][ T8630] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.030072][ T8639] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 252.718844][ T8649] xt_hashlimit: size too large, truncated to 1048576 [ 253.022754][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 253.389190][ T8638] loop4: detected capacity change from 0 to 32768 [ 253.534390][ T8638] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 253.828260][ T8638] XFS (loop4): Ending clean mount [ 253.863396][ T8638] XFS (loop4): Quotacheck needed: Please wait. [ 254.086868][ T8638] XFS (loop4): Quotacheck: Done. [ 254.943777][ T6490] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 256.047511][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.054161][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.549915][ T8718] netlink: 52 bytes leftover after parsing attributes in process `syz.4.844'. [ 259.589591][ T8718] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.598342][ T8718] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.686843][ T8718] netlink: 76 bytes leftover after parsing attributes in process `syz.4.844'. [ 259.718694][ T8718] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.726329][ T8718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.734044][ T8718] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.741327][ T8718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.760871][ T8718] netlink: 52 bytes leftover after parsing attributes in process `syz.4.844'. [ 259.774532][ T8718] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.783233][ T8718] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.817931][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.846'. [ 260.739960][ T8745] tipc: Started in network mode [ 260.764661][ T8745] tipc: Node identity ac1414aa, cluster identity 4711 [ 260.789985][ T8745] tipc: Enabled bearer , priority 10 [ 260.835606][ T8745] tipc: Enabled bearer , priority 0 [ 261.152858][ T8753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.857'. [ 261.229399][ T8754] loop0: detected capacity change from 0 to 1024 [ 261.257461][ T8754] ext4: Unknown parameter 'no' [ 261.379988][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.857'. [ 261.831321][ T5873] tipc: Node number set to 2886997162 [ 261.958292][ T5779] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 261.967326][ T5779] Bluetooth: hci3: Injecting HCI hardware error event [ 261.978405][ T5779] Bluetooth: hci3: hardware error 0x00 [ 263.047676][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.868'. [ 264.074046][ T5779] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 266.566403][ T8825] netlink: 'syz.1.883': attribute type 4 has an invalid length. [ 266.751586][ T8826] netlink: 'syz.1.883': attribute type 4 has an invalid length. [ 267.238687][ T5873] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 267.446461][ T5873] usb 1-1: config 0 has no interfaces? [ 267.481450][ T5873] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.517162][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.537682][ T5873] usb 1-1: config 0 descriptor?? [ 267.863612][ T5873] usb 1-1: USB disconnect, device number 5 [ 268.086593][ T8846] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 268.902188][ T8851] loop5: detected capacity change from 0 to 7 [ 269.009108][ T8851] Dev loop5: unable to read RDB block 7 [ 269.048722][ T8851] loop5: AHDI p1 p2 p3 [ 269.053930][ T8851] loop5: partition table partially beyond EOD, truncated [ 269.068701][ T8851] loop5: p1 start 1818582900 is beyond EOD, truncated [ 269.102304][ T8851] loop5: p3 start 335544320 is beyond EOD, truncated [ 271.356460][ T8880] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 271.407156][ T8880] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 272.609895][ T8896] bridge5: entered promiscuous mode [ 273.043145][ T8901] ip6erspan0: entered allmulticast mode [ 275.933664][ T8937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.914'. [ 276.443627][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.927'. [ 276.590282][ T8942] team1: entered promiscuous mode [ 276.598698][ T8942] team1: entered allmulticast mode [ 276.605481][ T8942] 8021q: adding VLAN 0 to HW filter on device team1 [ 276.619112][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.927'. [ 276.846917][ T8946] team2: entered promiscuous mode [ 276.934412][ T8946] team2: entered allmulticast mode [ 276.953647][ T8946] 8021q: adding VLAN 0 to HW filter on device team2 [ 278.894153][ T8975] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 279.637080][ T8979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.972668][ T8980] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.299273][ T8986] netlink: 35 bytes leftover after parsing attributes in process `syz.0.941'. [ 281.531314][ T8991] Device name cannot be null; rc = [-22] [ 282.360893][ T9007] netlink: 'syz.1.948': attribute type 11 has an invalid length. [ 283.902290][ T9029] netlink: 28 bytes leftover after parsing attributes in process `syz.3.957'. [ 287.883118][ T9079] netlink: 'syz.3.973': attribute type 4 has an invalid length. [ 288.011235][ T9082] netlink: 'syz.3.973': attribute type 4 has an invalid length. [ 288.711739][ T28] kauditd_printk_skb: 208 callbacks suppressed [ 288.711754][ T28] audit: type=1326 audit(1783062924.769:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.0.979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca4d9de59 code=0x7ffc0000 [ 288.825493][ T28] audit: type=1326 audit(1783062924.769:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.0.979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca4d9de59 code=0x7ffc0000 [ 288.900601][ T28] audit: type=1326 audit(1783062924.769:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.0.979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca4d9de59 code=0x7ffc0000 [ 289.034903][ T28] audit: type=1326 audit(1783062924.769:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.0.979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca4d9de59 code=0x7ffc0000 [ 289.059943][ T28] audit: type=1326 audit(1783062924.809:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.0.979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f5ca4d9de59 code=0x7ffc0000 [ 289.116767][ T28] audit: type=1326 audit(1783062924.809:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.0.979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca4d9de59 code=0x7ffc0000 [ 289.184415][ T9095] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 289.515578][ T28] audit: type=1326 audit(1783062924.809:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.0.979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca4d9de59 code=0x7ffc0000 [ 289.738795][ T9095] team0 (unregistering): Port device team_slave_0 removed [ 289.786854][ T28] audit: type=1326 audit(1783062924.809:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.0.979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca4d9de59 code=0x7ffc0000 [ 289.873921][ T28] audit: type=1326 audit(1783062924.809:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.0.979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5ca4d9de59 code=0x7ffc0000 [ 289.949614][ T28] audit: type=1326 audit(1783062924.809:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.0.979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca4d9de59 code=0x7ffc0000 [ 290.146458][ T9095] team0 (unregistering): Port device team_slave_1 removed [ 290.368614][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.982'. [ 292.297688][ T9138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.994'. [ 301.812789][ T9180] overlayfs: failed to clone upperpath [ 304.887645][ T9209] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1017'. [ 304.920071][ T9209] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 305.036342][ T9211] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1017'. [ 305.090047][ T9211] bond5: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 305.414408][ T9213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.626985][ T9218] veth0_macvtap: left promiscuous mode [ 309.352850][ T5433] veth0_macvtap: entered promiscuous mode [ 309.893491][ T9277] netlink: 'syz.0.1035': attribute type 6 has an invalid length. [ 317.698604][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.704991][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.337318][ T9418] tipc: Failed to remove unknown binding: 66,0,0/0:3389171670/3389171672 [ 318.361191][ T9418] tipc: Failed to remove unknown binding: 66,0,0/0:3389171670/3389171671 [ 318.383666][ T9418] tipc: Failed to remove unknown binding: 66,0,0/0:3389171670/3389171672 [ 318.406950][ T9418] tipc: Failed to remove unknown binding: 66,0,0/0:3389171670/3389171671 [ 319.023313][ T9427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1078'. [ 319.189642][ T9430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1078'. [ 319.666762][ T9437] binder: BINDER_SET_CONTEXT_MGR already set [ 319.699769][ T9437] binder: 9436:9437 ioctl 4018620d 200000004a80 returned -16 [ 322.038694][ T5779] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 322.049442][ T5779] Bluetooth: hci0: Injecting HCI hardware error event [ 322.059429][ T5776] Bluetooth: hci0: hardware error 0x00 [ 322.223172][ T9463] netlink: 'syz.4.1088': attribute type 4 has an invalid length. [ 322.385042][ T9463] netlink: 'syz.4.1088': attribute type 4 has an invalid length. [ 322.754807][ T9475] lo: Caught tx_queue_len zero misconfig [ 322.947762][ T9476] : renamed from bond0 (while UP) [ 323.043684][ T9478] netlink: 'syz.4.1094': attribute type 1 has an invalid length. [ 323.263215][ T9478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.118511][ T5776] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 324.139594][ T9480] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 324.437143][ T9480] bond1: (slave batadv1): making interface the new active one [ 324.530103][ T9480] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 325.277157][ T9481] bond1 (unregistering): (slave batadv1): Releasing active interface [ 325.301428][ T9481] bond1 (unregistering): Released all slaves [ 325.409744][ T9512] bridge_slave_0: left allmulticast mode [ 325.433058][ T9512] bridge_slave_0: left promiscuous mode [ 325.451488][ T9512] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.505063][ T9512] bridge_slave_1: left allmulticast mode [ 325.533712][ T9512] bridge_slave_1: left promiscuous mode [ 325.555335][ T9512] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.616241][ T9512] bond0: (slave bond_slave_0): Releasing backup interface [ 325.661235][ T9512] bond0: (slave bond_slave_1): Releasing backup interface [ 325.751913][ T9512] team0: Port device team_slave_0 removed [ 325.897377][ T9512] team0: Port device team_slave_1 removed [ 325.933024][ T9512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.948720][ T9512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.981123][ T9512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.078590][ T9512] bond1: (slave ip6gretap1): Releasing active interface [ 326.134452][ T9512] bond3: (slave gretap1): Releasing active interface [ 326.158968][ T9512] gretap1: left allmulticast mode [ 326.206832][ T9512] bond4: (slave bridge1): Releasing active interface [ 326.249718][ T9514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1101'. [ 326.480774][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 326.480791][ T28] audit: type=1326 audit(1783062962.519:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9525 comm="syz.4.1103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2839de59 code=0x7fc00000 [ 326.502334][ T9532] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 326.942711][ T28] audit: type=1326 audit(1783062962.989:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9525 comm="syz.4.1103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fca2833f1d9 code=0x7fc00000 [ 326.989914][ T9539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1106'. [ 327.170475][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 327.915210][ T9562] Invalid ELF header magic: != ELF [ 328.206465][ T9568] bridge0: port 3(vlan3) entered blocking state [ 328.270238][ T9568] bridge0: port 3(vlan3) entered disabled state [ 328.327672][ T9568] vlan3: entered allmulticast mode [ 328.355539][ T9568] bond0: entered allmulticast mode [ 328.422719][ T9568] bond_slave_0: entered allmulticast mode [ 328.457191][ T9568] bond_slave_1: entered allmulticast mode [ 328.493172][ T9568] vlan3: entered promiscuous mode [ 328.510621][ T9568] bond0: entered promiscuous mode [ 328.558208][ T9568] bond_slave_0: entered promiscuous mode [ 328.592204][ T9568] bond_slave_1: entered promiscuous mode [ 331.337942][ T9589] loop0: detected capacity change from 0 to 32768 [ 331.689230][ T9589] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 332.245395][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 334.365441][ T9642] lo: Caught tx_queue_len zero misconfig [ 334.388340][ T9642] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 336.795497][ T9677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1151'. [ 337.589347][ T9677] bridge8: port 1(veth0_to_bond) entered blocking state [ 337.597747][ T9677] bridge8: port 1(veth0_to_bond) entered disabled state [ 337.621131][ T9677] veth0_to_bond: entered promiscuous mode [ 337.655763][ T7266] bond5: (slave vlan2): link status definitely down, disabling slave [ 337.713926][ T7266] bond5: now running without any active interface! [ 338.687703][ T9702] capability: warning: `syz.0.1160' uses deprecated v2 capabilities in a way that may be insecure [ 341.162671][ T9746] loop0: detected capacity change from 0 to 512 [ 341.330483][ T9746] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 341.387450][ T9746] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 341.396987][ T9746] System zones: 0-1, 15-15, 18-18, 34-34 [ 341.405604][ T9746] EXT4-fs (loop0): orphan cleanup on readonly fs [ 341.412644][ T9746] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 341.424542][ T9746] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 341.440069][ T9746] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 341.461474][ T9746] EXT4-fs (loop0): 1 truncate cleaned up [ 341.469756][ T9746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 341.994023][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.625216][ T9759] batadv_slave_1: left promiscuous mode [ 344.707949][ T9776] loop4: detected capacity change from 0 to 128 [ 344.838333][ T9774] 9pnet: p9_errstr2errno: server reported unknown error 'I$۷= [ 345.702647][ T9795] loop4: detected capacity change from 0 to 512 [ 345.747475][ T9795] EXT4-fs: Ignoring removed i_version option [ 345.873007][ T9795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.908999][ T9795] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.333301][ T6490] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.913798][ T7266] wlan1: Trigger new scan to find an IBSS to join [ 355.087658][ T9892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1217'. [ 356.418455][ T5873] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 356.620898][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 356.650953][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 356.702487][ T5873] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 356.750509][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.813433][ T5873] usb 5-1: config 0 descriptor?? [ 357.174473][ T5873] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 357.243758][ T146] wlan1: Trigger new scan to find an IBSS to join [ 357.734042][ C0] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 357.777063][ T5873] usb 5-1: USB disconnect, device number 2 [ 358.151952][ T7266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.394344][ T28] audit: type=1326 audit(1783062994.449:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9923 comm="syz.1.1230" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x0 [ 359.074790][ T9932] netlink: 'syz.0.1233': attribute type 1 has an invalid length. [ 359.150775][ T9932] 8021q: adding VLAN 0 to HW filter on device bond6 [ 359.312095][ T9934] bond6: (slave veth5): Enslaving as an active interface with a down link [ 359.576778][ T9932] bond6: (slave dummy0): making interface the new active one [ 359.626756][ T9932] dummy0: entered promiscuous mode [ 359.650861][ T9932] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 359.693886][ T9934] netlink: 'syz.0.1233': attribute type 10 has an invalid length. [ 359.762586][ T9934] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1233'. [ 359.834911][ T9934] bond6: (slave dummy0): Releasing active interface [ 360.788909][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 361.585840][ T9964] syzkaller0: entered promiscuous mode [ 361.592657][ T9964] syzkaller0: entered allmulticast mode [ 363.738841][ T9995] loop4: detected capacity change from 0 to 16 [ 363.793069][ T9995] erofs: (device loop4): mounted with root inode @ nid 36. [ 363.905934][ T9995] syz.4.1255: attempt to access beyond end of device [ 363.905934][ T9995] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 364.001508][ T9995] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -32 in[55, 4041] out[4096] [ 364.018932][ T28] audit: type=1800 audit(1783063000.079:579): pid=9995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1255" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 364.547930][ T28] audit: type=1326 audit(1783063000.599:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.0.1260" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ca4d9de59 code=0x0 [ 369.060446][T10027] overlayfs: failed to clone upperpath [ 375.598232][T10123] syz_tun: entered allmulticast mode [ 376.163168][T10134] tipc: Failed to remove unknown binding: 66,0,0/0:61506177/61506179 [ 376.207506][T10134] tipc: Failed to remove unknown binding: 66,0,0/0:61506177/61506178 [ 376.252370][T10134] tipc: Failed to remove unknown binding: 66,0,0/0:61506177/61506179 [ 376.288420][T10134] tipc: Failed to remove unknown binding: 66,0,0/0:61506177/61506178 [ 378.834516][T10198] syz.1.1319 (10198): attempted to duplicate a private mapping with mremap. This is not supported. [ 378.926898][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.466250][T10214] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 380.564531][ T28] audit: type=1326 audit(1783063016.619:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10233 comm="syz.3.1331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51f559de59 code=0x0 [ 380.588130][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.668337][ T5873] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 380.859588][ T5873] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 380.885989][ T5873] usb 1-1: config 0 interface 0 has no altsetting 0 [ 380.912824][ T5873] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 380.935034][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 380.958937][ T5873] usb 1-1: Product: syz [ 380.963213][ T5873] usb 1-1: Manufacturer: syz [ 380.984019][ T5873] usb 1-1: SerialNumber: syz [ 381.004087][ T5873] usb 1-1: config 0 descriptor?? [ 381.041220][ T5873] usb 1-1: selecting invalid altsetting 0 [ 381.389201][T10228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1330'. [ 381.450721][ T5873] usb 1-1: USB disconnect, device number 6 [ 384.743882][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805bda3800: rx timeout, send abort [ 384.753395][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805bda3800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 385.090780][T10288] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 385.161263][T10279] syz.3.1345 (10279) used greatest stack depth: 19728 bytes left [ 385.706726][T10302] tipc: Failed to remove unknown binding: 66,0,0/0:2938804207/2938804209 [ 385.736611][T10302] tipc: Failed to remove unknown binding: 66,0,0/0:2938804207/2938804208 [ 385.762068][T10303] tipc: Failed to remove unknown binding: 66,0,0/0:2938804207/2938804209 [ 385.808442][T10303] tipc: Failed to remove unknown binding: 66,0,0/0:2938804207/2938804208 [ 386.925275][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1364'. [ 387.143837][T10327] 8021q: adding VLAN 0 to HW filter on device bond2 [ 387.169957][T10327] bond1: (slave bond2): Enslaving as an active interface with an up link [ 387.273441][T10335] bond1 (unregistering): (slave bond2): Releasing backup interface [ 387.335679][T10335] bond1 (unregistering): Released all slaves [ 387.869598][T10354] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 388.007642][T10362] loop4: detected capacity change from 0 to 16 [ 388.414632][T10366] loop0: detected capacity change from 0 to 1764 [ 388.478600][T10366] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 389.129660][T10383] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.1382'. [ 389.626081][T10390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1385'. [ 389.922500][T10396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1388'. [ 389.943274][T10398] sctp: [Deprecated]: syz.4.1387 (pid 10398) Use of int in max_burst socket option deprecated. [ 389.943274][T10398] Use struct sctp_assoc_value instead [ 390.083853][T10401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1389'. [ 390.330031][T10401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1389'. [ 390.509364][T10408] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 390.540630][T10408] CIFS mount error: No usable UNC path provided in device string! [ 390.540630][T10408] [ 390.553221][T10408] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 390.950142][ T146] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 392.349642][T10424] loop4: detected capacity change from 0 to 1024 [ 392.451926][T10426] xt_TCPMSS: Only works on TCP SYN packets [ 392.473687][T10424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 392.548444][T10424] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.737023][ T6490] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 393.328346][T10450] overlayfs: failed to clone upperpath [ 394.207245][ T5873] IPVS: starting estimator thread 0... [ 394.758454][T10473] IPVS: using max 19 ests per chain, 45600 per kthread [ 395.693889][T10497] loop4: detected capacity change from 0 to 256 [ 395.727767][T10497] FAT-fs (loop4): Unrecognized mount option "nonumtal=0" or missing value [ 395.831206][T10229] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 397.548376][T10536] lo speed is unknown, defaulting to 1000 [ 397.554806][T10536] lo speed is unknown, defaulting to 1000 [ 397.562196][T10538] syz_tun: entered allmulticast mode [ 397.594471][T10536] lo speed is unknown, defaulting to 1000 [ 397.606313][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1439'. [ 397.662990][T10534] syz_tun: left allmulticast mode [ 397.736203][T10536] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 397.901367][T10536] lo speed is unknown, defaulting to 1000 [ 397.920677][T10536] lo speed is unknown, defaulting to 1000 [ 397.935533][T10536] lo speed is unknown, defaulting to 1000 [ 397.944948][T10536] lo speed is unknown, defaulting to 1000 [ 400.043833][T10575] netlink: 'syz.4.1455': attribute type 2 has an invalid length. [ 400.221479][T10579] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 402.071950][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1459'. [ 403.933884][T10636] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 403.951840][T10636] kvm: requested 181866 ns i8254 timer period limited to 200000 ns [ 403.966521][T10636] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 403.983070][T10636] kvm: requested 61180 ns i8254 timer period limited to 200000 ns [ 403.996584][T10636] kvm: requested 178514 ns i8254 timer period limited to 200000 ns [ 404.029011][T10636] kvm: requested 195276 ns i8254 timer period limited to 200000 ns [ 404.045930][T10636] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 404.073560][T10639] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 404.087610][T10636] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 404.099053][T10636] kvm: requested 141638 ns i8254 timer period limited to 200000 ns [ 405.058417][T10667] sch_tbf: burst 1023 is lower than device lo mtu (1550) ! [ 405.273162][T10672] vlan2: entered promiscuous mode [ 405.286425][T10672] bridge0: entered promiscuous mode [ 405.292608][T10672] vlan2: entered allmulticast mode [ 405.299851][T10672] bridge0: entered allmulticast mode [ 405.335213][T10675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1487'. [ 405.380488][T10675] bridge_slave_0: left allmulticast mode [ 405.387631][T10675] bridge_slave_0: left promiscuous mode [ 405.402822][T10675] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.447501][T10675] bridge_slave_1: left allmulticast mode [ 405.488649][T10675] bridge_slave_1: left promiscuous mode [ 405.495922][T10675] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.554251][T10675] bond0: (slave bond_slave_0): Releasing backup interface [ 405.616786][T10675] bond0: (slave bond_slave_1): Releasing backup interface [ 405.725633][T10675] team0: Port device team_slave_0 removed [ 405.841707][T10675] team0: Port device team_slave_1 removed [ 405.860380][T10675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.890035][T10675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.923658][T10675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.947640][T10675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.619778][ T788] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 406.835610][ T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.952649][ T788] usb 1-1: New USB device found, idVendor=0a5c, idProduct=0bdc, bcdDevice=f0.66 [ 407.088350][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.147712][ T788] usb 1-1: Product: syz [ 407.169835][ T788] usb 1-1: Manufacturer: syz [ 407.199153][ T788] usb 1-1: SerialNumber: syz [ 407.241217][ T788] usb 1-1: config 0 descriptor?? [ 407.577298][T10696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.605484][T10696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.625292][T10707] netlink: 'syz.4.1497': attribute type 11 has an invalid length. [ 407.656456][T10696] : renamed from veth0_to_bond (while UP) [ 407.703003][ T788] usb 1-1: USB disconnect, device number 7 [ 410.552635][T10742] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 411.553377][T10750] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 412.586252][T10754] netlink: 'syz.4.1512': attribute type 7 has an invalid length. [ 412.624392][T10754] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.633984][T10754] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.642980][T10754] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.651921][T10754] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.678923][T10754] netlink: 'syz.4.1512': attribute type 7 has an invalid length. [ 412.699466][T10754] netlink: 'syz.4.1512': attribute type 7 has an invalid length. [ 413.206465][T10758] VFS: Mount too revealing [ 414.025271][ T28] audit: type=1804 audit(1783063050.079:582): pid=10772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1519" name="bus" dev="ramfs" ino=25600 res=1 errno=0 [ 414.208157][ T28] audit: type=1804 audit(1783063050.169:583): pid=10775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1519" name="bus" dev="ramfs" ino=25600 res=1 errno=0 [ 416.213865][T10794] netlink: 'syz.0.1527': attribute type 1 has an invalid length. [ 416.422937][T10794] 8021q: adding VLAN 0 to HW filter on device bond7 [ 416.578520][T10799] bond7: entered promiscuous mode [ 416.624888][T10799] bond7: entered allmulticast mode [ 416.696746][T10803] syzkaller0: entered promiscuous mode [ 416.724661][T10803] syzkaller0: entered allmulticast mode [ 416.901709][T10800] tipc: Enabled bearer , priority 0 [ 417.108433][T10796] tipc: Resetting bearer [ 417.822472][T10796] tipc: Disabling bearer [ 418.894494][T10819] netlink: 'syz.4.1533': attribute type 1 has an invalid length. [ 419.093498][T10819] bond1: entered promiscuous mode [ 419.137615][T10819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 419.252516][ T7270] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 419.286456][T10820] bridge3: entered promiscuous mode [ 419.306904][T10820] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 419.438321][ T7270] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 419.482318][T10822] veth3: entered promiscuous mode [ 419.487471][T10822] veth3: entered allmulticast mode [ 419.538725][T10822] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 419.724417][T10827] vxcan2: entered allmulticast mode [ 421.055799][ T28] audit: type=1326 audit(1783063057.109:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.1.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 421.116570][ T28] audit: type=1326 audit(1783063057.109:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.1.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 421.183286][ T28] audit: type=1326 audit(1783063057.109:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.1.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 421.323621][ T28] audit: type=1326 audit(1783063057.109:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.1.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 421.487654][ T28] audit: type=1326 audit(1783063057.109:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.1.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 421.630826][ T28] audit: type=1326 audit(1783063057.279:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.1.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7fd15e68e code=0x7ffc0000 [ 421.892282][ T28] audit: type=1326 audit(1783063057.299:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.1.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7fd15e68e code=0x7ffc0000 [ 422.018249][ T28] audit: type=1326 audit(1783063057.299:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.1.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7fd15e68e code=0x7ffc0000 [ 422.046665][ T28] audit: type=1326 audit(1783063057.299:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.1.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7fd15e68e code=0x7ffc0000 [ 422.082565][ T28] audit: type=1326 audit(1783063057.299:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.1.1540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7fd15e68e code=0x7ffc0000 [ 422.448112][ T7265] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 422.477197][T10868] syz_tun: entered promiscuous mode [ 422.502164][T10868] vlan4: entered promiscuous mode [ 423.545655][T10887] xt_HMARK: spi-set and port-set can't be combined [ 426.983680][T10916] bond0: entered allmulticast mode [ 427.024838][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1563'. [ 427.075598][T10916] bridge9: entered allmulticast mode [ 427.107844][T10916] bond0: (slave bridge9): Enslaving as an active interface with an up link [ 427.127443][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1563'. [ 427.230565][T10920] bridge10: entered allmulticast mode [ 427.259606][T10920] bond0: (slave bridge10): Enslaving as an active interface with a down link [ 428.644789][T10940] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1569'. [ 430.936740][T10970] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1578'. [ 431.454962][T10975] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 431.756800][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1581'. [ 434.809093][T10988] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1584'. [ 434.906086][T10987] syzkaller0: entered promiscuous mode [ 434.906131][T10987] syzkaller0: entered allmulticast mode [ 435.227421][T10989] loop0: detected capacity change from 0 to 1024 [ 435.271830][T10989] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 435.318485][T10989] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 435.358627][T10989] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 435.430983][T10989] EXT4-fs error (device loop0): ext4_get_journal_inode:5820: inode #5: comm syz.0.1585: unexpected bad inode w/o EXT4_IGET_BAD [ 435.721902][T10989] EXT4-fs (loop0): no journal found [ 435.739091][T10989] EXT4-fs (loop0): can't get journal size [ 435.747879][T10989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 437.024094][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.161480][T11010] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 439.034771][T11030] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1596'. [ 439.116429][T11032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1597'. [ 440.369127][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.404331][T11051] warning: `syz.1.1602' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 444.282385][T11049] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 445.181042][T11085] usb usb7: usbfs: interface 0 claimed by hub while 'syz.0.1609' sets config #3 [ 447.533198][T11116] all: renamed from lo (while UP) [ 452.436190][T11164] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.1635'. [ 454.509455][ T7265] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 454.747192][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1639'. [ 454.986145][T11185] Invalid option length (1045252) for dns_resolver key [ 455.307297][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1639'. [ 455.340375][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1639'. [ 456.661994][T11205] xt_CONNSECMARK: invalid mode: 0 [ 459.744627][T11227] xt_policy: output policy not valid in PREROUTING and INPUT [ 465.255835][T11279] syzkaller0: entered promiscuous mode [ 465.278518][T11279] syzkaller0: entered allmulticast mode [ 466.889417][T11285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1675'. [ 467.372523][T11300] 8021q: adding VLAN 0 to HW filter on device bond6 [ 467.382122][T11303] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 467.967629][T11303] 8021q: adding VLAN 0 to HW filter on device bond6 [ 468.072090][T11303] bond6: (slave lo): making interface the new active one [ 468.169905][T11303] bond6: (slave lo): Enslaving as an active interface with an up link [ 468.233861][T11303] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 468.382862][T11306] batman_adv: batadv0: Adding interface: macvtap1 [ 468.430270][T11306] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.460850][T11306] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 468.635160][T11318] netlink: 'syz.0.1683': attribute type 11 has an invalid length. [ 468.644833][T11308] batman_adv: batadv0: Removing interface: macvtap1 [ 469.085620][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1685'. [ 469.462563][T11329] lo speed is unknown, defaulting to 1000 [ 470.075386][T11343] loop0: detected capacity change from 0 to 256 [ 474.697366][T11384] netlink: 'syz.1.1703': attribute type 1 has an invalid length. [ 474.876493][T11384] 8021q: adding VLAN 0 to HW filter on device bond7 [ 475.227861][T11386] bond7: (slave syz_tun): unknown ethtool speed (143) for port 1 (set it to 0) [ 475.309885][T11386] bond7: (slave syz_tun): Enslaving as a backup interface with an up link [ 475.380524][ T7273] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 476.274123][ T5811] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 476.588664][ T5811] usb 5-1: Using ep0 maxpacket: 8 [ 476.599171][T11388] bond7 (unregistering): (slave syz_tun): Removing an active aggregator [ 476.615340][ T5811] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.629317][T11388] bond7 (unregistering): (slave syz_tun): Releasing backup interface [ 476.648169][T11388] bond7 (unregistering): Released all slaves [ 476.660307][ T5811] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 476.673476][ T5811] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 476.684293][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.717383][ T5811] usb 5-1: config 0 descriptor?? [ 483.219690][ T5817] usb 5-1: USB disconnect, device number 3 [ 486.719062][ T7269] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 487.101520][T11443] syzkaller0: entered promiscuous mode [ 487.123503][T11443] syzkaller0: entered allmulticast mode [ 488.145609][T11453] syzkaller0: entered promiscuous mode [ 488.164618][T11453] syzkaller0: entered allmulticast mode [ 491.485717][T11494] netlink: 'syz.1.1734': attribute type 4 has an invalid length. [ 491.506413][T11494] netlink: 'syz.1.1734': attribute type 5 has an invalid length. [ 491.546862][T11494] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1734'. [ 492.204840][T11499] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 492.242994][T11498] macvtap1: entered promiscuous mode [ 492.253483][T11498] macvtap1: entered allmulticast mode [ 492.259353][T11498] veth1_vlan: entered allmulticast mode [ 492.301096][T11498] macvtap2: entered promiscuous mode [ 492.313578][T11498] macvtap2: entered allmulticast mode [ 492.964475][T11502] syzkaller0: entered promiscuous mode [ 492.977594][T11502] syzkaller0: entered allmulticast mode [ 495.172261][T11522] loop0: detected capacity change from 0 to 16 [ 495.220402][T11522] erofs: (device loop0): mounted with root inode @ nid 36. [ 495.598027][ T5817] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 495.823607][ T5817] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.833983][ T5817] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 495.844320][ T5817] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 495.853851][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.871974][ T5817] usb 1-1: config 0 descriptor?? [ 496.285813][ T5817] usb 1-1: USB disconnect, device number 8 [ 499.265736][T11580] netlink: 'syz.1.1757': attribute type 1 has an invalid length. [ 499.291502][T11580] netlink: 'syz.1.1757': attribute type 4 has an invalid length. [ 499.325409][T11580] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1757'. [ 499.350538][T11581] netlink: 'syz.1.1757': attribute type 1 has an invalid length. [ 499.364220][T11581] netlink: 'syz.1.1757': attribute type 4 has an invalid length. [ 499.375913][T11581] netlink: 9491 bytes leftover after parsing attributes in process `syz.1.1757'. [ 499.765000][T11591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1762'. [ 499.800489][T11591] 8021q: adding VLAN 0 to HW filter on device bond5 [ 500.673755][T11591] macvlan2: entered promiscuous mode [ 500.723797][T11591] macvlan2: entered allmulticast mode [ 500.771717][T11591] bond5: entered promiscuous mode [ 500.778965][T11591] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 500.963088][T11591] bond5: left promiscuous mode [ 501.710635][T11602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1765'. [ 501.804465][T11604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1766'. [ 501.818678][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.215505][T11615] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1769'. [ 502.265581][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1769'. [ 502.295527][T11615] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1769'. [ 504.437457][T11658] syzkaller0: entered promiscuous mode [ 504.477025][T11658] syzkaller0: entered allmulticast mode [ 504.499369][T11661] tipc: Enabled bearer , priority 0 [ 504.523556][T11657] tipc: Resetting bearer [ 504.588916][T11657] tipc: Disabling bearer [ 506.348677][T11681] bond6: (slave lo): Releasing active interface [ 506.370918][T11681] bond6: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 506.471361][T11681] bridge_slave_0: left allmulticast mode [ 506.478706][T11681] bridge_slave_0: left promiscuous mode [ 506.487808][T11681] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.546926][T11681] bridge_slave_1: left allmulticast mode [ 506.559667][T11681] bridge_slave_1: left promiscuous mode [ 506.566663][T11681] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.598610][T11681] veth0_to_bond: left promiscuous mode [ 506.605220][T11681] bridge8: port 1(veth0_to_bond) entered disabled state [ 506.651956][T11681] : (slave bond_slave_0): Releasing backup interface [ 506.709233][T11681] : (slave bond_slave_1): Releasing backup interface [ 506.859571][T11681] team0: Port device team_slave_1 removed [ 506.922490][T11681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.995230][T11681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.043249][T11681] : (slave wlan1): Releasing backup interface [ 507.077226][T11681] bond1: (slave veth3): Releasing active interface [ 507.583649][T11681] bond2: (slave bond3): Releasing backup interface [ 507.591245][T11681] bond3: left allmulticast mode [ 507.680446][T11681] bond5: (slave vlan2): Releasing active interface [ 507.832590][T11681] bond0: (slave bridge9): Releasing backup interface [ 507.864049][T11681] bond0: (slave bridge9): the permanent HWaddr of slave - 72:f3:d8:c5:57:e4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 507.930992][T11681] bridge9: left allmulticast mode [ 507.971818][T11681] bond0: (slave bridge10): Releasing backup interface [ 507.987543][T11681] bridge10: left allmulticast mode [ 508.073325][T11689] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 510.370347][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1795'. [ 510.389761][T11726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1795'. [ 515.395281][T11743] netlink: 'syz.3.1802': attribute type 1 has an invalid length. [ 515.592873][T11745] bond6: (slave bridge6): making interface the new active one [ 515.603134][T11745] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 515.679566][T11747] netlink: 'syz.1.1803': attribute type 4 has an invalid length. [ 515.875764][T11743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1802'. [ 515.899950][T11743] bond6: entered promiscuous mode [ 515.905850][T11743] bridge6: entered promiscuous mode [ 515.913255][T11743] bond6: entered allmulticast mode [ 515.919975][T11743] bridge6: entered allmulticast mode [ 515.937832][T11743] 8021q: adding VLAN 0 to HW filter on device bond6 [ 516.025469][ T7432] bond6: (slave bridge6): link status definitely down, disabling slave [ 516.066861][ T7432] bridge6: left promiscuous mode [ 516.086182][ T7432] bridge6: left allmulticast mode [ 516.118535][ T7432] bond6: now running without any active interface! [ 516.168901][T11758] loop4: detected capacity change from 0 to 512 [ 516.271681][T11758] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.1807: iget: bad i_size value: 38620345925642 [ 516.399378][T11758] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1807: couldn't read orphan inode 15 (err -117) [ 516.435132][T11758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.727136][T11772] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.1807: bg 0: block 5: invalid block bitmap [ 516.812402][T11772] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 312 with error 28 [ 516.855557][T11772] EXT4-fs (loop4): This should not happen!! Data will be lost [ 516.855557][T11772] [ 516.918173][T11772] EXT4-fs (loop4): Total free blocks count 0 [ 516.925355][T11772] EXT4-fs (loop4): Free/Dirty block details [ 516.968278][T11772] EXT4-fs (loop4): free_blocks=0 [ 516.974503][T11772] EXT4-fs (loop4): dirty_blocks=312 [ 516.985328][T11772] EXT4-fs (loop4): Block reservation details [ 516.992767][T11772] EXT4-fs (loop4): i_reserved_data_blocks=312 [ 517.285299][ T6490] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.208619][T11790] syzkaller0: entered promiscuous mode [ 518.224456][T11790] syzkaller0: entered allmulticast mode [ 518.438534][ T7432] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 523.602533][T11805] netlink: 'syz.3.1823': attribute type 4 has an invalid length. [ 523.638275][T11805] netlink: 'syz.3.1823': attribute type 4 has an invalid length. [ 523.717353][T11805] netlink: 'syz.3.1823': attribute type 4 has an invalid length. [ 526.950279][T11854] netlink: 'syz.3.1834': attribute type 3 has an invalid length. [ 534.041894][T11863] tipc: Enabling of bearer rejected, failed to enable media [ 535.572096][T11918] netlink: 'syz.3.1852': attribute type 1 has an invalid length. [ 535.801402][T11918] 8021q: adding VLAN 0 to HW filter on device bond7 [ 535.887108][T11920] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 535.948858][T11924] netlink: 'syz.1.1854': attribute type 1 has an invalid length. [ 536.295141][T11922] macvlan2: entered promiscuous mode [ 536.335087][T11922] macvlan2: entered allmulticast mode [ 536.839006][T11922] bond7: entered promiscuous mode [ 536.844123][T11922] veth0_to_bond: entered promiscuous mode [ 536.897703][T11922] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 536.958512][T11922] bond7: left promiscuous mode [ 536.964413][T11922] veth0_to_bond: left promiscuous mode [ 537.123316][T11927] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 537.156946][T11930] bond8: (slave gretap1): making interface the new active one [ 537.228544][T11930] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 537.291957][T11932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1854'. [ 537.340797][T11932] 8021q: adding VLAN 0 to HW filter on device bond8 [ 538.814248][T11952] bond6: (slave veth5): Releasing active interface [ 540.376654][T11971] loop4: detected capacity change from 0 to 128 [ 540.412036][T11971] FAT-fs (loop4): Unrecognized mount option "nfs(Azy" or missing value [ 540.746292][ T28] kauditd_printk_skb: 123 callbacks suppressed [ 540.746385][ T28] audit: type=1326 audit(1783063176.799:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.1.1870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 540.835516][ T28] audit: type=1326 audit(1783063176.799:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.1.1870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 540.958595][ T28] audit: type=1326 audit(1783063176.839:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.1.1870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 541.083056][ T28] audit: type=1326 audit(1783063176.839:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.1.1870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 541.179933][ T28] audit: type=1326 audit(1783063176.839:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.1.1870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 541.240812][ T28] audit: type=1326 audit(1783063176.839:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.1.1870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 541.320886][ T28] audit: type=1326 audit(1783063176.869:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.1.1870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 541.360343][ T28] audit: type=1326 audit(1783063176.869:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.1.1870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 542.197177][ T28] audit: type=1326 audit(1783063176.869:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.1.1870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 542.338546][ T28] audit: type=1326 audit(1783063176.869:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.1.1870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 542.595005][T11993] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 544.403266][T12010] bond1: (slave bridge3): Removing an active aggregator [ 544.421489][T12010] bond1: (slave bridge3): Releasing backup interface [ 544.515537][T12015] xt_nat: multiple ranges no longer supported [ 544.965737][T12010] bond1: (slave bridge3): the permanent HWaddr of slave - 8a:5b:49:f0:8f:38 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 544.984169][T12010] bridge3: left promiscuous mode [ 545.379296][T12010] bond1: (slave veth3): Releasing backup interface [ 546.348501][T12032] netlink: 'syz.1.1883': attribute type 3 has an invalid length. [ 549.002612][T12053] netlink: 'syz.0.1899': attribute type 10 has an invalid length. [ 549.044886][T12053] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 549.234486][T12058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1892'. [ 549.318595][T12058] bond8: entered promiscuous mode [ 549.323969][T12058] bond8: entered allmulticast mode [ 549.416010][T12062] bridge0: port 1(veth0_to_bridge) entered blocking state [ 549.431607][T12062] bridge0: port 1(veth0_to_bridge) entered disabled state [ 549.454049][T12062] veth0_to_bridge: entered allmulticast mode [ 549.484887][T12062] veth0_to_bridge: entered promiscuous mode [ 550.461884][T12071] ip6gretap0: entered promiscuous mode [ 550.482021][T12071] vlan5: entered promiscuous mode [ 554.278464][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 556.020657][T12121] input: syz0 as /devices/virtual/input/input7 [ 557.536534][T12139] lo speed is unknown, defaulting to 1000 [ 558.964186][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1921'. [ 559.016382][T12147] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.026425][T12147] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.035540][T12147] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.044434][T12147] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.149859][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1921'. [ 560.161936][T12156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1920'. [ 560.189628][T12156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1920'. [ 560.411188][T12157] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.459189][T12157] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.919424][T12161] netlink: 'syz.0.1924': attribute type 4 has an invalid length. [ 561.115415][T12161] netlink: 'syz.0.1924': attribute type 4 has an invalid length. [ 561.998311][T12172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1927'. [ 563.292237][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.784376][T12196] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 565.175339][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1946'. [ 565.764244][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 565.764261][ T28] audit: type=1326 audit(1783063201.819:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12226 comm="syz.1.1947" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 565.894896][ T28] audit: type=1326 audit(1783063201.869:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12226 comm="syz.1.1947" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 566.008306][ T28] audit: type=1326 audit(1783063201.869:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12226 comm="syz.1.1947" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 566.123531][ T28] audit: type=1326 audit(1783063201.869:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12226 comm="syz.1.1947" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 566.220302][ T28] audit: type=1326 audit(1783063201.869:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12226 comm="syz.1.1947" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 566.274305][ T28] audit: type=1326 audit(1783063201.869:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12226 comm="syz.1.1947" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 566.316116][ T28] audit: type=1326 audit(1783063201.879:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12226 comm="syz.1.1947" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 566.429424][ T28] audit: type=1326 audit(1783063201.879:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12226 comm="syz.1.1947" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 566.503851][ T28] audit: type=1326 audit(1783063201.879:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12226 comm="syz.1.1947" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 566.532538][ T28] audit: type=1326 audit(1783063201.879:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12226 comm="syz.1.1947" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 567.011338][T12245] syz.1.1954 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 567.053431][T12247] tipc: Enabled bearer , priority 2 [ 567.097982][T12247] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 567.123725][T12247] tipc: Disabling bearer [ 567.355394][T12249] netlink: 'syz.0.1956': attribute type 4 has an invalid length. [ 567.510745][T12249] netlink: 'syz.0.1956': attribute type 4 has an invalid length. [ 567.808550][T12261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1961'. [ 568.477764][T12279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1967'. [ 569.342236][T12289] autofs4:pid:12289:autofs_fill_super: called with bogus options [ 571.668347][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 571.668365][ T28] audit: type=1326 audit(1783063207.719:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.3.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f559de59 code=0x7ffc0000 [ 571.879279][ T28] audit: type=1326 audit(1783063207.729:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.3.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f559de59 code=0x7ffc0000 [ 571.978962][ T28] audit: type=1326 audit(1783063207.759:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.3.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f559de59 code=0x7ffc0000 [ 572.025985][ T28] audit: type=1326 audit(1783063207.759:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.3.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f559de59 code=0x7ffc0000 [ 572.095546][ T28] audit: type=1326 audit(1783063207.769:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.3.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f559de59 code=0x7ffc0000 [ 572.756583][ T28] audit: type=1326 audit(1783063207.769:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.3.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f51f559de59 code=0x7ffc0000 [ 572.792682][ T28] audit: type=1326 audit(1783063207.769:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.3.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f559de59 code=0x7ffc0000 [ 572.852745][ T28] audit: type=1326 audit(1783063207.769:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.3.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f559de59 code=0x7ffc0000 [ 572.918248][ T28] audit: type=1326 audit(1783063207.769:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.3.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f51f559de59 code=0x7ffc0000 [ 572.947510][ T28] audit: type=1326 audit(1783063207.769:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.3.1973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f51f559de59 code=0x7ffc0000 [ 577.260896][T12368] loop4: detected capacity change from 0 to 256 [ 578.418724][T12383] SET target dimension over the limit! [ 579.081862][T12390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1995'. [ 579.198635][T12389] netlink: 'syz.1.1994': attribute type 4 has an invalid length. [ 579.343809][T12390] netlink: 63 bytes leftover after parsing attributes in process `syz.0.1995'. [ 587.870283][T12444] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2010'. [ 587.908617][T12444] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2010'. [ 597.561067][T12528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 597.569388][T12528] IPv6: NLM_F_CREATE should be set when creating new route [ 604.414588][T12530] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.423889][T12530] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.433678][T12530] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.443497][T12530] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.591972][T12530] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.601371][T12530] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.610867][T12530] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.620427][T12530] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.772728][T12562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2045'. [ 604.802768][T12573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2047'. [ 604.901428][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2048'. [ 611.883327][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2065'. [ 612.569476][T12660] 8021q: adding VLAN 0 to HW filter on device bond8 [ 613.796939][T12665] bond8: entered promiscuous mode [ 613.843510][T12665] bond8: entered allmulticast mode [ 613.989291][T12660] vxcan1: entered promiscuous mode [ 616.161606][T12696] netlink: 'syz.1.2075': attribute type 5 has an invalid length. [ 617.192838][T12702] loop4: detected capacity change from 0 to 512 [ 617.519663][T12702] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2077: invalid indirect mapped block 2 (level 1) [ 617.544096][T12702] EXT4-fs (loop4): 1 truncate cleaned up [ 617.558817][T12702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.732506][ T6490] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.240383][T12747] netlink: 'syz.4.2093': attribute type 1 has an invalid length. [ 621.393974][T12747] 8021q: adding VLAN 0 to HW filter on device bond3 [ 621.598266][T12751] bond3: entered allmulticast mode [ 621.826939][T12747] bond3: (slave ip6gretap1): making interface the new active one [ 621.866857][T12747] ip6gretap1: entered allmulticast mode [ 621.901326][ T28] audit: type=1326 audit(1783063257.959:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.1.2095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 621.931940][T12747] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 622.032848][ T28] audit: type=1326 audit(1783063257.999:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.1.2095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 622.165002][ T28] audit: type=1326 audit(1783063257.999:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.1.2095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 622.274036][ T28] audit: type=1326 audit(1783063257.999:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.1.2095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 622.368279][T12765] syzkaller0: entered promiscuous mode [ 622.379641][ T28] audit: type=1326 audit(1783063258.019:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.1.2095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb7fd19de59 code=0x7ffc0000 [ 622.414178][T12765] syzkaller0: entered allmulticast mode [ 622.473262][ T28] audit: type=1326 audit(1783063258.089:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.1.2095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7fd15e68e code=0x7ffc0000 [ 622.608102][ T28] audit: type=1326 audit(1783063258.089:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.1.2095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7fd15e68e code=0x7ffc0000 [ 622.684506][ T28] audit: type=1326 audit(1783063258.089:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.1.2095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7fd15e68e code=0x7ffc0000 [ 622.798361][ T28] audit: type=1326 audit(1783063258.139:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.1.2095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7fd15e68e code=0x7ffc0000 [ 622.855500][T12767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2098'. [ 622.948271][ T28] audit: type=1326 audit(1783063258.159:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.1.2095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7fd15e68e code=0x7ffc0000 [ 623.255934][T12768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 623.325161][T12768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 623.448090][T12768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 623.478736][T12768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 623.519149][T12768] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 623.619016][T12770] bond10 (unregistering): (slave geneve2): Releasing backup interface [ 623.686122][T12770] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 623.705616][T12770] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 623.728071][T12770] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 623.743469][T12770] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 623.784629][T12770] bond10 (unregistering): Released all slaves [ 623.881613][T12780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2100'. [ 624.732370][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.913543][T12823] netlink: zone id is out of range [ 627.958278][T12823] netlink: zone id is out of range [ 627.973595][T12823] netlink: zone id is out of range [ 627.990935][T12823] netlink: zone id is out of range [ 628.007400][T12823] netlink: zone id is out of range [ 628.014774][T12823] netlink: zone id is out of range [ 628.038563][T12823] netlink: zone id is out of range [ 628.051643][T12823] netlink: zone id is out of range [ 628.070250][T12823] netlink: zone id is out of range [ 628.076681][T12823] netlink: zone id is out of range [ 629.468709][T12844] netlink: 'syz.4.2122': attribute type 1 has an invalid length. [ 629.672276][T12844] 8021q: adding VLAN 0 to HW filter on device bond4 [ 629.695496][T12843] netlink: 'syz.0.2121': attribute type 1 has an invalid length. [ 629.850912][T12843] 8021q: adding VLAN 0 to HW filter on device bond10 [ 629.889236][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 629.889285][ T28] audit: type=1800 audit(1783063265.939:906): pid=12833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2116" name="bus" dev="ramfs" ino=30333 res=0 errno=0 [ 630.011835][T12846] bond10: (slave syz_tun): making interface the new active one [ 630.052985][T12846] bond10: (slave syz_tun): Enslaving as an active interface with an up link [ 630.114130][T12847] bond4: (slave ip6gretap2): making interface the new active one [ 630.152289][T12847] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 630.189935][T12849] bond10: entered promiscuous mode [ 630.225686][T12849] syz_tun: entered promiscuous mode [ 630.273511][T12849] bond10: entered allmulticast mode [ 630.313712][T12849] syz_tun: entered allmulticast mode [ 633.224065][T12880] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.408545][T12880] dummy0: left promiscuous mode [ 634.496819][T12880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.636812][T12880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.577077][T12880] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 636.684020][T12880] bond2: left allmulticast mode [ 636.926279][T12880] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.945866][T12880] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.960507][T12880] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.978049][T12880] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.999475][T12880] geneve2: left promiscuous mode [ 637.389031][T12880] bridge5: left promiscuous mode [ 637.414966][T12880] ip6erspan0: left allmulticast mode [ 638.141573][T12880] bond6: left promiscuous mode [ 638.148554][T12880] bond6: left allmulticast mode [ 638.390810][T12880] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.402031][T12880] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.412854][T12880] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.423524][T12880] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.480284][T12880] bond8: left promiscuous mode [ 638.485151][T12880] bond8: left allmulticast mode [ 639.429074][T12918] netlink: 'syz.4.2140': attribute type 10 has an invalid length. [ 639.466231][T12918] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 647.214358][T12967] bridge0: port 4(veth0_to_bridge) entered blocking state [ 647.280351][T12967] bridge0: port 4(veth0_to_bridge) entered disabled state [ 647.356512][T12967] veth0_to_bridge: entered allmulticast mode [ 647.364237][T12967] veth0_to_bridge: entered promiscuous mode [ 652.707578][T13014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2173'. [ 757.706303][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 757.713365][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11/1:b..l P23/1:b..l [ 757.722855][ C0] rcu: (detected by 0, t=10502 jiffies, g=69509, q=42 ncpus=2) [ 757.730539][ C0] task:kworker/1:0 state:R running task stack:21608 pid:23 ppid:2 flags:0x00004000 [ 757.743033][ C0] Workqueue: events_power_efficient gc_worker [ 757.749366][ C0] Call Trace: [ 757.752731][ C0] [ 757.755786][ C0] __schedule+0x15ae/0x4660 [ 757.760482][ C0] ? asan.module_dtor+0x20/0x20 [ 757.765409][ C0] ? mark_lock+0x94/0x320 [ 757.769829][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 757.775866][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 757.781193][ C0] preempt_schedule_irq+0xbf/0x150 [ 757.786350][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 757.792118][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 757.798011][ C0] irqentry_exit+0x67/0x70 [ 757.802546][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 757.808685][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x19a/0x1d0 [ 757.815682][ C0] Code: f8 4d 85 e4 75 16 e8 45 3b c4 f8 eb 15 e8 3e 3b c4 f8 e8 29 ee c8 01 4d 85 e4 74 ea e8 2f 3b c4 f8 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25 [ 757.835374][ C0] RSP: 0018:ffffc900001d79a0 EFLAGS: 00000293 [ 757.841510][ C0] RAX: ffffffff88c2aa21 RBX: 0000000000000000 RCX: ffff88801ca55a00 [ 757.849543][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 757.857776][ C0] RBP: ffffc900001d7a50 R08: ffffffff911e7597 R09: 1ffffffff223ceb2 [ 757.865825][ C0] R10: dffffc0000000000 R11: fffffbfff223ceb3 R12: 0000000000000200 [ 757.873831][ C0] R13: dffffc0000000000 R14: 1ffff9200003af34 R15: dffffc0000000000 [ 757.881853][ C0] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 757.888159][ C0] ? nf_conntrack_hash_check_insert+0x900/0x900 [ 757.894469][ C0] gc_worker+0x314/0x14a0 [ 757.898856][ C0] ? gc_worker+0x266/0x14a0 [ 757.903424][ C0] ? init_conntrack+0xf40/0xf40 [ 757.908316][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 757.913663][ C0] ? process_scheduled_works+0x975/0x1600 [ 757.919450][ C0] ? process_scheduled_works+0x975/0x1600 [ 757.925215][ C0] process_scheduled_works+0xa60/0x1600 [ 757.930832][ C0] ? worker_attach_to_pool+0x370/0x370 [ 757.936336][ C0] ? assign_work+0x3cc/0x5d0 [ 757.940974][ C0] worker_thread+0xa5e/0xfe0 [ 757.945630][ C0] kthread+0x2fa/0x390 [ 757.949737][ C0] ? pr_cont_work+0x550/0x550 [ 757.954456][ C0] ? kthread_blkcg+0xd0/0xd0 [ 757.959089][ C0] ret_from_fork+0x48/0x80 [ 757.963598][ C0] ? kthread_blkcg+0xd0/0xd0 [ 757.968227][ C0] ret_from_fork_asm+0x11/0x20 [ 757.973082][ C0] [ 757.976133][ C0] task:kworker/u4:0 state:R running task stack:22056 pid:11 ppid:2 flags:0x00004000 [ 757.986982][ C0] Workqueue: bat_events batadv_nc_worker [ 757.992764][ C0] Call Trace: [ 757.996076][ C0] [ 757.999050][ C0] __schedule+0x15ae/0x4660 [ 758.003628][ C0] ? asan.module_dtor+0x20/0x20 [ 758.008516][ C0] ? mark_lock+0x94/0x320 [ 758.012890][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 758.018917][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 758.024244][ C0] preempt_schedule_irq+0xbf/0x150 [ 758.029394][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 758.035155][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 758.041004][ C0] irqentry_exit+0x67/0x70 [ 758.045467][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 758.051498][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 758.056821][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 758.076465][ C0] RSP: 0018:ffffc90000107a40 EFLAGS: 00000206 [ 758.082570][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 094fcfcf58e4f800 [ 758.090579][ C0] RDX: 0000000000000000 RSI: ffffffff8acadce0 RDI: ffffffff8b1cf820 [ 758.098583][ C0] RBP: ffffc90000107b48 R08: dffffc0000000000 R09: 1ffffffff223cea0 [ 758.106609][ C0] R10: dffffc0000000000 R11: fffffbfff223cea1 R12: 1ffff92000020f54 [ 758.114625][ C0] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000 [ 758.122658][ C0] ? batadv_nc_worker+0xd2/0x600 [ 758.127644][ C0] ? read_lock_is_recursive+0x20/0x20 [ 758.133080][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 758.139107][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 758.144171][ C0] ? batadv_nc_worker+0xd2/0x600 [ 758.149149][ C0] batadv_nc_worker+0xef/0x600 [ 758.153947][ C0] ? batadv_nc_worker+0xd2/0x600 [ 758.158933][ C0] ? process_scheduled_works+0x975/0x1600 [ 758.164693][ C0] process_scheduled_works+0xa60/0x1600 [ 758.170309][ C0] ? worker_attach_to_pool+0x370/0x370 [ 758.175833][ C0] ? assign_work+0x3cc/0x5d0 [ 758.180474][ C0] worker_thread+0xa5e/0xfe0 [ 758.185135][ C0] kthread+0x2fa/0x390 [ 758.189234][ C0] ? pr_cont_work+0x550/0x550 [ 758.193960][ C0] ? kthread_blkcg+0xd0/0xd0 [ 758.198583][ C0] ret_from_fork+0x48/0x80 [ 758.203042][ C0] ? kthread_blkcg+0xd0/0xd0 [ 758.207674][ C0] ret_from_fork_asm+0x11/0x20 [ 758.212494][ C0] [ 758.215542][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g69509 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 758.227892][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=35266 [ 758.235801][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g69509 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 758.247189][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 758.257185][ C0] rcu: RCU grace-period kthread stack dump: [ 758.263100][ C0] task:rcu_preempt state:I stack:26664 pid:17 ppid:2 flags:0x00004000 [ 758.272346][ C0] Call Trace: [ 758.275651][ C0] [ 758.278612][ C0] __schedule+0x15ae/0x4660 [ 758.283156][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 758.288225][ C0] ? lock_chain_count+0x20/0x20 [ 758.293122][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 758.298364][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 758.304298][ C0] ? asan.module_dtor+0x20/0x20 [ 758.309190][ C0] ? rcu_is_watching+0x15/0xb0 [ 758.314017][ C0] schedule+0xbd/0x170 [ 758.318136][ C0] schedule_timeout+0x188/0x2d0 [ 758.323028][ C0] ? console_conditional_schedule+0x40/0x40 [ 758.328971][ C0] ? update_process_times+0x1b0/0x1b0 [ 758.334389][ C0] ? prepare_to_swait_event+0x344/0x360 [ 758.340006][ C0] rcu_gp_fqs_loop+0x30d/0x1590 [ 758.344905][ C0] ? rcu_gp_kthread+0x3b0/0x3b0 [ 758.349791][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 758.355806][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 758.360886][ C0] ? rcu_gp_init+0x1530/0x1530 [ 758.365677][ C0] ? rcu_gp_cleanup+0xade/0xc30 [ 758.370572][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 758.375820][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 758.381075][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 758.385705][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 758.390850][ C0] ? __kthread_parkme+0x71/0x1c0 [ 758.395824][ C0] ? __kthread_parkme+0x15b/0x1c0 [ 758.400885][ C0] kthread+0x2fa/0x390 [ 758.405001][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 758.410152][ C0] ? kthread_blkcg+0xd0/0xd0 [ 758.414784][ C0] ret_from_fork+0x48/0x80 [ 758.419243][ C0] ? kthread_blkcg+0xd0/0xd0 [ 758.423873][ C0] ret_from_fork_asm+0x11/0x20 [ 758.428695][ C0] [ 758.431746][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 758.438095][ C0] Sending NMI from CPU 0 to CPUs 1: [ 758.443351][ C1] NMI backtrace for cpu 1 [ 758.443380][ C1] CPU: 1 PID: 5774 Comm: syz-executor Not tainted syzkaller #0 [ 758.443396][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 758.443405][ C1] RIP: 0010:rcu_is_watching+0x35/0xb0 [ 758.443432][ C1] Code: 05 68 01 93 7e e8 4b f6 1a 09 89 c3 83 f8 08 73 60 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 30 0a a9 8c 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 ac a2 6e 00 48 c7 c3 a8 6b 03 00 [ 758.443447][ C1] RSP: 0018:ffffc900001f0d40 EFLAGS: 00000806 [ 758.443461][ C1] RAX: 1ffffffff1952147 RBX: 0000000000000001 RCX: ea45e18f5227d600 [ 758.443473][ C1] RDX: ffff88807a0fbc00 RSI: ffffffff8b1cf800 RDI: ffffffff8b1cf7c0 [ 758.443486][ C1] RBP: ffffc900001f0eb8 R08: ffffffff8e8c6e6f R09: 1ffffffff1d18dcd [ 758.443498][ C1] R10: dffffc0000000000 R11: fffffbfff1d18dce R12: ffffffff88b3ca10 [ 758.443511][ C1] R13: ffff88805e99b340 R14: ffffffff8ca90a38 R15: dffffc0000000000 [ 758.443524][ C1] FS: 000055558cf85500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 758.443544][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 758.443555][ C1] CR2: 000055558cfa0a38 CR3: 000000006048b000 CR4: 00000000003506e0 [ 758.443570][ C1] Call Trace: [ 758.443576][ C1] [ 758.443583][ C1] __hrtimer_run_queues+0x48d/0xc10 [ 758.443612][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 758.443642][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 758.443687][ C1] ? hrtimer_interrupt+0x980/0x980 [ 758.443714][ C1] ? read_tsc+0x9/0x20 [ 758.443740][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 758.443770][ C1] hrtimer_interrupt+0x39d/0x980 [ 758.443800][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 758.443823][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 758.443844][ C1] [ 758.443849][ C1] [ 758.443854][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 758.443882][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x65/0xe0 [ 758.443928][ C1] Code: 57 41 56 41 54 53 48 8d 4c 09 01 48 8b 54 24 20 65 4c 8b 05 dd cd 7c 7e 45 31 c9 eb 08 49 ff c1 4c 39 c8 74 77 4e 8b 54 ce 10 <65> 44 8b 1d cb cd 7c 7e 41 81 e3 00 01 ff 00 74 13 41 81 fb 00 01 [ 758.443941][ C1] RSP: 0018:ffffc9000467f6d0 EFLAGS: 00000202 [ 758.443954][ C1] RAX: 0000000000000008 RBX: 0000000000000000 RCX: 0000000000000003 [ 758.443963][ C1] RDX: ffffffff813b2b18 RSI: ffffffff8cfa05c0 RDI: 0000000000000005 [ 758.443975][ C1] RBP: ffffc9000467f818 R08: ffff88807a0fbc00 R09: 0000000000000007 [ 758.443986][ C1] R10: 0000000000000009 R11: 0000000000000000 R12: ffffffff8f1cee78 [ 758.443997][ C1] R13: ffffc9000467f7c8 R14: 0000000000000005 R15: dffffc0000000000 [ 758.444013][ C1] ? unwind_next_frame+0x748/0x2990 [ 758.444033][ C1] unwind_next_frame+0x748/0x2990 [ 758.444056][ C1] ? vfs_rmdir+0x378/0x4b0 [ 758.444092][ C1] ? vfs_rmdir+0x378/0x4b0 [ 758.444106][ C1] ? stack_trace_save+0x100/0x100 [ 758.444127][ C1] arch_stack_walk+0x144/0x190 [ 758.444147][ C1] ? vfs_rmdir+0x378/0x4b0 [ 758.444164][ C1] stack_trace_save+0xaa/0x100 [ 758.444184][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 758.444207][ C1] ? debug_objects_fill_pool+0x8b/0x790 [ 758.444251][ C1] kasan_save_stack+0x3e/0x60 [ 758.444269][ C1] ? kasan_save_stack+0x3e/0x60 [ 758.444286][ C1] ? __kasan_record_aux_stack+0xaf/0xc0 [ 758.444307][ C1] ? call_rcu+0x153/0x900 [ 758.444327][ C1] ? evict+0x80e/0x8a0 [ 758.444351][ C1] ? vfs_rmdir+0x378/0x4b0 [ 758.444391][ C1] __kasan_record_aux_stack+0xaf/0xc0 [ 758.444413][ C1] ? inode_unpin_lru_isolating+0xb0/0xb0 [ 758.444433][ C1] call_rcu+0x153/0x900 [ 758.444455][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 758.444478][ C1] ? _raw_spin_unlock+0x40/0x40 [ 758.444498][ C1] ? kasan_check_range+0x89/0x290 [ 758.444520][ C1] ? rcu_force_quiescent_state+0x220/0x220 [ 758.444550][ C1] ? xa_destroy+0x1e7/0x2d0 [ 758.444596][ C1] ? shmem_destroy_inode+0xe0/0xe0 [ 758.444626][ C1] evict+0x80e/0x8a0 [ 758.444644][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 758.444665][ C1] ? proc_nr_inodes+0x230/0x230 [ 758.444685][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 758.444708][ C1] ? _raw_spin_unlock+0x28/0x40 [ 758.444732][ C1] vfs_rmdir+0x378/0x4b0 [ 758.444750][ C1] do_rmdir+0x29f/0x590 [ 758.444765][ C1] ? __check_object_size+0x4fc/0xa40 [ 758.444782][ C1] ? d_delete_notify+0x150/0x150 [ 758.444802][ C1] ? getname_flags+0x20a/0x500 [ 758.444828][ C1] __x64_sys_unlinkat+0xc4/0xe0 [ 758.444846][ C1] do_syscall_64+0x55/0xb0 [ 758.444876][ C1] ? clear_bhb_loop+0x40/0x90 [ 758.444890][ C1] ? clear_bhb_loop+0x40/0x90 [ 758.444905][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 758.444929][ C1] RIP: 0033:0x7fb7fd19cf77 [ 758.444949][ C1] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.444962][ C1] RSP: 002b:00007ffdf55109e8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 758.444978][ C1] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fb7fd19cf77 [ 758.444989][ C1] RDX: 0000000000000200 RSI: 00007ffdf5511b30 RDI: 00000000ffffff9c [ 758.445000][ C1] RBP: 00007fb7fd2332ca R08: 00000000000185d0 R09: 00000000ffffffff [ 758.445011][ C1] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffdf5511b30 [ 758.445021][ C1] R13: 00007fb7fd2332ca R14: 000000000009f698 R15: 00007ffdf5511b70 [ 758.445042][ C1]