last executing test programs: 2m24.884286658s ago: executing program 1 (id=2098): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000001500)=[{}]) 2m23.820286652s ago: executing program 1 (id=2107): pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$igmp(0x2, 0x3, 0x2) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x4) 2m22.855048573s ago: executing program 1 (id=2119): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) 2m22.612557439s ago: executing program 1 (id=2124): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240)={[{@dioread_nolock}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0xff, 0x4b2, &(0x7f0000000540)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./bus\x00', 0x0, 0x63d014, 0x0) r1 = creat(&(0x7f00000007c0)='./bus\x00', 0x182) write$UHID_INPUT(r1, &(0x7f0000000840)={0x8, {"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", 0x1000}}, 0x1006) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)="37f0dd03", 0x4}], 0x1) 2m21.501753494s ago: executing program 1 (id=2132): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x8) listen(r0, 0x5) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f00000001c0), 0x8) listen(r1, 0x9) 2m21.055497144s ago: executing program 1 (id=2137): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x0, 0x12, r0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd}, 0x94) 2m20.78596235s ago: executing program 32 (id=2137): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x0, 0x12, r0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd}, 0x94) 3.13801637s ago: executing program 2 (id=3574): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xffff, 0xfffffffffffffffe, 0x2e, 0xa50, 0xffff, 0xffff, 0x5, 0x7, 0x6, 0x100, 0x6, 0x5, 0x100, 0x40000000001, 0x0, 0x9], 0x1, 0x360200}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x4, 0x8001001, 0x20, @local, @empty, 0x700, 0x8000, 0x3ff, 0x3}}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf2, 0x5, 0x0, '\x00', 0x8001}) 2.947002814s ago: executing program 2 (id=3576): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 2.094716323s ago: executing program 3 (id=3581): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}], 0x1, 0x800) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.890211628s ago: executing program 0 (id=3583): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone3(&(0x7f0000000400)={0x802000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x1}, 0x58) 1.539000775s ago: executing program 0 (id=3585): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000700)="3fb8", 0x2}], 0x1}}], 0x1, 0x24000000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x320) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x11, 0x4) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/72, 0x48}, 0x6}], 0x41f, 0x40, 0x0) 1.415142268s ago: executing program 2 (id=3586): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x1, 0x355, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0x11e, 0x100000000000001) 1.074011126s ago: executing program 2 (id=3589): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r1, &(0x7f0000000980)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="c2", 0x1}], 0x1}], 0x1, 0x0) 1.006642617s ago: executing program 3 (id=3590): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c00000010000d0c26bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="b4000600400000002c0012800c0001006d6163766c616e001c0002000800090001800000080001001000001d0800010010000000140035006d6163766c616e30"], 0x7c}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000004c0)=0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 866.84895ms ago: executing program 3 (id=3592): r0 = fanotify_init(0x1, 0x101000) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xb574\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x48000039, r2, 0x0) r3 = dup(r2) fcntl$setlease(r3, 0x400, 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 780.170783ms ago: executing program 4 (id=3593): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000680)='@', &(0x7f0000000400)=@tcp6=r2, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 715.165174ms ago: executing program 2 (id=3594): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000000, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x1) 628.140326ms ago: executing program 2 (id=3595): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001440)="85", 0x1}], 0x1}}], 0x1, 0x40) 617.717686ms ago: executing program 4 (id=3596): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x24088040}, 0x40800) r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 599.197776ms ago: executing program 3 (id=3597): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8000) recvmsg$qrtr(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/161, 0xa1}], 0x1, 0x0, 0x0, 0x2000}, 0x1c, 0x0) sendmsg$kcm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)='@>', 0x2}], 0x1}, 0x0) 507.022209ms ago: executing program 0 (id=3598): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0x16}, 0x94) 485.392039ms ago: executing program 4 (id=3599): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 345.221382ms ago: executing program 4 (id=3601): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) 331.732862ms ago: executing program 0 (id=3602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0x4008080}, 0x40) 331.046352ms ago: executing program 3 (id=3603): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x6322, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/24, 0x18}, 0x2}], 0x400000000000091, 0x40012161, 0x0) 159.138226ms ago: executing program 0 (id=3604): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x84406d, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0) 158.950586ms ago: executing program 4 (id=3605): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x129240, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000600)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000000)={0x48, 0xa, r3, 0x0, r4}) 133.185247ms ago: executing program 3 (id=3606): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000300)='v', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 77.276278ms ago: executing program 4 (id=3607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000002980)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaa25080600010a000604"], 0x2e) 0s ago: executing program 0 (id=3608): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)='{', 0x1}], 0x1, 0x0, 0x0, 0x4048170}], 0x1, 0x24048825) r2 = accept(r1, 0x0, 0x0) recvmsg$can_j1939(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x1003) kernel console output (not intermixed with test programs): 42] BTRFS warning (device loop3): couldn't read tree root [ 170.464898][ T7642] BTRFS warning (device loop3): try to load backup roots slot 2 [ 170.480187][ T5774] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 170.507778][ T1105] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 170.518232][ T5774] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 170.535128][ T7642] BTRFS warning (device loop3): couldn't read tree root [ 170.556053][ T7642] BTRFS warning (device loop3): try to load backup roots slot 3 [ 170.604336][ T7642] BTRFS info (device loop3): enabling ssd optimizations [ 170.634590][ T7642] BTRFS info (device loop3): auto enabling async discard [ 170.679646][ T7642] BTRFS info (device loop3): rebuilding free space tree [ 170.810667][ T7642] BTRFS info (device loop3): checking UUID tree [ 171.018122][ T5775] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.486473][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.876478][ T28] audit: type=1326 audit(1783747086.936:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="syz.3.651" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x0 [ 171.912119][ T7704] loop1: detected capacity change from 0 to 256 [ 171.955074][ T7704] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 172.070647][ T28] audit: type=1800 audit(1783747087.126:61): pid=7704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.653" name="file1" dev="loop1" ino=1048617 res=0 errno=0 [ 172.409210][ T7714] bridge0: entered allmulticast mode [ 172.445166][ T7714] pim6reg: entered allmulticast mode [ 172.494961][ T7714] pim6reg: left allmulticast mode [ 172.509649][ T7714] bridge0: left allmulticast mode [ 174.766548][ T5817] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 174.952454][ T5817] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.971939][ T5817] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 174.986088][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 175.001147][ T5817] usb 3-1: Product: syz [ 175.007723][ T5817] usb 3-1: Manufacturer: syz [ 175.012387][ T5817] usb 3-1: SerialNumber: syz [ 175.267474][ T5817] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 175.635773][ T7801] loop1: detected capacity change from 0 to 128 [ 175.664727][ T7801] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 175.669193][ T5817] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 175.721572][ T7801] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 175.779298][ T9] usb 3-1: USB disconnect, device number 7 [ 175.805868][ T9] usblp0: removed [ 175.887132][ T5817] usb 4-1: Using ep0 maxpacket: 16 [ 175.903996][ T5817] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 175.935504][ T5817] usb 4-1: config 0 has no interface number 0 [ 175.966035][ T5817] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 175.996309][ T5817] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 176.026815][ T5817] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 176.062886][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.081923][ T5817] usb 4-1: Product: syz [ 176.091717][ T5817] usb 4-1: Manufacturer: syz [ 176.101770][ T5817] usb 4-1: SerialNumber: syz [ 176.119612][ T5817] usb 4-1: config 0 descriptor?? [ 176.135707][ T7792] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 176.160919][ T7792] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 176.411066][ T7792] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 176.426614][ T7792] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 177.486156][ T5817] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 177.505934][ T5817] asix: probe of 4-1:0.34 failed with error -71 [ 177.518724][ T5817] usb 4-1: USB disconnect, device number 7 [ 178.155918][ T7827] lo speed is unknown, defaulting to 1000 [ 178.169065][ T7827] lo speed is unknown, defaulting to 1000 [ 178.183559][ T7827] lo speed is unknown, defaulting to 1000 [ 178.200089][ T7829] bridge0: entered allmulticast mode [ 178.205910][ T7827] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 178.236807][ T7827] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 178.249230][ T7829] pim6reg: entered allmulticast mode [ 178.288236][ T7829] pim6reg: left allmulticast mode [ 178.293496][ T7829] bridge0: left allmulticast mode [ 178.370619][ T7827] lo speed is unknown, defaulting to 1000 [ 178.387567][ T7827] lo speed is unknown, defaulting to 1000 [ 178.409256][ T7827] lo speed is unknown, defaulting to 1000 [ 178.427913][ T7827] lo speed is unknown, defaulting to 1000 [ 178.609537][ T7836] loop2: detected capacity change from 0 to 512 [ 178.690184][ T7836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.921919][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.029274][ T7850] loop1: detected capacity change from 0 to 256 [ 179.172044][ T7850] FAT-fs (loop1): Directory bread(block 64) failed [ 179.205206][ T7850] FAT-fs (loop1): Directory bread(block 65) failed [ 179.222263][ T7850] FAT-fs (loop1): Directory bread(block 66) failed [ 179.243460][ T7850] FAT-fs (loop1): Directory bread(block 67) failed [ 179.267965][ T7850] FAT-fs (loop1): Directory bread(block 68) failed [ 179.289762][ T7850] FAT-fs (loop1): Directory bread(block 69) failed [ 179.314455][ T7850] FAT-fs (loop1): Directory bread(block 70) failed [ 179.328799][ T7850] FAT-fs (loop1): Directory bread(block 71) failed [ 179.368372][ T7850] FAT-fs (loop1): Directory bread(block 72) failed [ 179.390009][ T7850] FAT-fs (loop1): Directory bread(block 73) failed [ 180.274329][ T7872] loop2: detected capacity change from 0 to 4096 [ 180.367615][ T7872] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 180.549501][ T7872] ntfs3: loop2: Failed to load $Extend (-22). [ 180.555684][ T7872] ntfs3: loop2: Failed to initialize $Extend. [ 180.647793][ T28] audit: type=1800 audit(1783747095.716:62): pid=7872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.719" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 182.119832][ T7910] gretap0: entered promiscuous mode [ 182.126006][ T7910] vlan1: entered promiscuous mode [ 183.277260][ T7924] loop2: detected capacity change from 0 to 32768 [ 183.294080][ T7924] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.739 (7924) [ 183.333920][ T7924] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 183.361239][ T7924] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 183.382800][ T7924] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 183.408856][ T7924] BTRFS info (device loop2): use zstd compression, level 3 [ 183.426151][ T7924] BTRFS info (device loop2): using free space tree [ 183.556086][ T7945] overlayfs: failed to clone upperpath [ 183.622403][ T7924] BTRFS info (device loop2): enabling ssd optimizations [ 183.656108][ T7924] BTRFS info (device loop2): auto enabling async discard [ 184.049485][ T5774] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 185.141541][ T7991] loop1: detected capacity change from 0 to 512 [ 185.204298][ T7991] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 185.260835][ T7991] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.758: bad orphan inode 131083 [ 185.350493][ T7991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.575030][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.637210][ T8008] TCP: TCP_TX_DELAY enabled [ 185.713291][ T8012] loop1: detected capacity change from 0 to 512 [ 185.738193][ T8012] EXT4-fs: Ignoring removed oldalloc option [ 185.769476][ T8012] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 185.831075][ T8012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.872808][ T8012] ext4 filesystem being mounted at /176/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.995800][ T28] audit: type=1800 audit(1783747101.056:63): pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.766" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 186.317236][ T1207] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 186.528583][ T1207] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.546548][ T1207] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.561301][ T1207] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 186.579168][ T1207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 186.604054][ T1207] usb 2-1: SerialNumber: syz [ 186.854999][ T1207] usb 2-1: 0:2 : does not exist [ 186.880609][ T1207] usb 2-1: unit 3 not found! [ 186.898038][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'. [ 186.948297][ T1207] usb 2-1: USB disconnect, device number 10 [ 186.992633][ T8040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.776'. [ 187.035490][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.067316][ T8040] ip6erspan0: entered promiscuous mode [ 187.533619][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.104838][ T8072] tls_set_device_offload_rx: netdev not found [ 188.591669][ T8065] loop1: detected capacity change from 0 to 32768 [ 188.777834][ T8065] JBD2: Ignoring recovery information on journal [ 188.896601][ T8065] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 189.211133][ T8097] OCFS2: ERROR (device loop1): int ocfs2_change_extent_flag(handle_t *, struct ocfs2_extent_tree *, u32, u32, u32, struct ocfs2_alloc_context *, struct ocfs2_cached_dealloc_ctxt *, int, int): Owner 17058 has an extent at cpos 0 which can no longer be found [ 189.239012][ T8097] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 189.249151][ T8097] OCFS2: File system is now read-only. [ 189.254951][ T8097] (syz.1.787,8097,1):ocfs2_mark_extent_refcounted:2359 ERROR: status = -30 [ 189.263906][ T8097] (syz.1.787,8097,1):ocfs2_add_refcount_flag:3706 ERROR: status = -30 [ 189.272539][ T8097] (syz.1.787,8097,1):ocfs2_reflink_remap_extent:4570 ERROR: status = -30 [ 189.283024][ T8097] (syz.1.787,8097,1):ocfs2_reflink_remap_blocks:4694 ERROR: status = -30 [ 189.294043][ T8097] (syz.1.787,8097,1):ocfs2_remap_file_range:2746 ERROR: status = -30 [ 189.438515][ T8065] syz.1.787 (8065) used greatest stack depth: 18264 bytes left [ 189.627191][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 189.703833][ T8109] overlayfs: failed to clone upperpath [ 190.593025][ T8134] netlink: 'syz.1.812': attribute type 9 has an invalid length. [ 190.642758][ T8134] netlink: 44 bytes leftover after parsing attributes in process `syz.1.812'. [ 190.947447][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'. [ 190.970030][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.815'. [ 191.291278][ T8138] team0: Port device team_slave_0 removed [ 191.843881][ T8166] loop3: detected capacity change from 0 to 2048 [ 191.916602][ T8166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.082335][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.482530][ T8177] loop3: detected capacity change from 0 to 128 [ 192.525903][ T8177] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.556878][ T8177] ext4 filesystem being mounted at /203/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.663931][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.695574][ T8182] loop1: detected capacity change from 0 to 32768 [ 193.718547][ T8182] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.839 (8182) [ 193.796498][ T8182] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 193.825834][ T8182] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 193.846642][ T8182] BTRFS info (device loop1): setting nodatacow, compression disabled [ 193.870050][ T8182] BTRFS info (device loop1): force clearing of disk cache [ 193.890386][ T8182] BTRFS info (device loop1): turning off barriers [ 193.920877][ T8182] BTRFS info (device loop1): use no compression [ 193.939235][ T8182] BTRFS info (device loop1): disabling free space tree [ 193.959415][ T8182] BTRFS info (device loop1): enabling ssd optimizations [ 194.006468][ T8182] BTRFS info (device loop1): using spread ssd allocation scheme [ 194.024522][ T8182] BTRFS info (device loop1): not using ssd optimizations [ 194.036308][ T8182] BTRFS info (device loop1): not using spread ssd allocation scheme [ 194.247217][ T8182] BTRFS info (device loop1): rebuilding free space tree [ 194.308002][ T8182] BTRFS info (device loop1): disabling free space tree [ 194.315096][ T8182] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 194.413721][ T8182] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 194.518297][ T8182] BTRFS info (device loop1): checking UUID tree [ 194.530930][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.537478][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.620917][ T28] audit: type=1800 audit(1783747365.679:64): pid=8182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.839" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 195.044809][ T5773] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 196.268801][ T8236] loop1: detected capacity change from 0 to 40427 [ 196.290988][ T8236] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 196.299564][ T8236] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 196.335476][ T8236] F2FS-fs (loop1): invalid crc value [ 196.356544][ T8236] F2FS-fs (loop1): Found nat_bits in checkpoint [ 196.574236][ T8236] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 196.581416][ T8236] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 196.730711][ T8255] gretap1: entered allmulticast mode [ 196.765563][ T8255] team0: Port device gretap1 added [ 196.792391][ T8236] syz.1.848: attempt to access beyond end of device [ 196.792391][ T8236] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 196.823913][ T28] audit: type=1326 audit(1783747367.879:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.0.856" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcdfc19de59 code=0x0 [ 196.849043][ T8259] bridge0: port 3(team0) entered blocking state [ 196.855791][ T8259] bridge0: port 3(team0) entered disabled state [ 196.857371][ T8236] syz.1.848: attempt to access beyond end of device [ 196.857371][ T8236] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 196.898737][ T8259] team0: entered allmulticast mode [ 196.903941][ T8259] team_slave_1: entered allmulticast mode [ 196.957454][ T8259] team0: entered promiscuous mode [ 196.962692][ T8259] team_slave_1: entered promiscuous mode [ 196.973242][ T8259] gretap1: entered promiscuous mode [ 196.984520][ T8259] bridge0: port 3(team0) entered blocking state [ 196.991393][ T8259] bridge0: port 3(team0) entered forwarding state [ 197.241988][ T8267] loop3: detected capacity change from 0 to 2048 [ 197.262686][ T5773] syz-executor: attempt to access beyond end of device [ 197.262686][ T5773] loop1: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 197.300358][ T8267] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 197.314189][ T8267] NILFS (loop3): mounting unchecked fs [ 197.324117][ T5773] F2FS-fs (loop1): Issue discard(5637, 5637, 1) failed, ret: -5 [ 197.360155][ T5792] udevd[5792]: incorrect nilfs2 checksum on /dev/loop3 [ 197.410262][ T8267] NILFS (loop3): recovery complete [ 197.435633][ T8272] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.808289][ T8277] 9pnet: p9_errstr2errno: server reported unknown error õ1 [ 198.211049][ T8289] loop1: detected capacity change from 0 to 512 [ 198.287442][ T8289] EXT4-fs (loop1): orphan cleanup on readonly fs [ 198.362146][ T8289] EXT4-fs (loop1): 1 orphan inode deleted [ 198.370209][ T8289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 198.437189][ T8292] lo speed is unknown, defaulting to 1000 [ 198.455689][ T8289] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 198.479343][ T8289] ext4 filesystem being remounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.635168][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.951612][ T8303] netlink: 60 bytes leftover after parsing attributes in process `syz.1.873'. [ 198.964378][ T8303] netlink: 60 bytes leftover after parsing attributes in process `syz.1.873'. [ 199.292324][ T8313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.878'. [ 199.487616][ T8317] netlink: 40 bytes leftover after parsing attributes in process `syz.3.880'. [ 200.286443][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.911444][ T8358] input: syz0 as /devices/virtual/input/input9 [ 201.242349][ T8373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.896'. [ 201.290917][ T8373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.896'. [ 201.536352][ T5817] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 201.745629][ T5817] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 201.764892][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.900'. [ 201.813166][ T5817] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 201.852944][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.863878][ T8383] netlink: 60 bytes leftover after parsing attributes in process `syz.0.900'. [ 201.907229][ T5817] usb 2-1: config 0 descriptor?? [ 202.439213][ T5817] logitech 0003:046D:C29C.0008: unknown main item tag 0x0 [ 202.506537][ T5817] logitech 0003:046D:C29C.0008: unknown main item tag 0x0 [ 202.513790][ T5817] logitech 0003:046D:C29C.0008: unknown main item tag 0x0 [ 202.542757][ T5817] logitech 0003:046D:C29C.0008: unknown main item tag 0x0 [ 202.570559][ T5817] logitech 0003:046D:C29C.0008: unknown main item tag 0x0 [ 202.606447][ T5817] logitech 0003:046D:C29C.0008: unknown main item tag 0x0 [ 202.626128][ T5817] logitech 0003:046D:C29C.0008: unknown main item tag 0x0 [ 202.666372][ T5817] logitech 0003:046D:C29C.0008: unknown main item tag 0x0 [ 202.673600][ T5817] logitech 0003:046D:C29C.0008: unknown main item tag 0x0 [ 202.708692][ T5817] logitech 0003:046D:C29C.0008: unknown main item tag 0x0 [ 202.737817][ T5817] logitech 0003:046D:C29C.0008: unknown main item tag 0x0 [ 202.766373][ T5817] logitech 0003:046D:C29C.0008: unknown main item tag 0x0 [ 202.773602][ T5817] logitech 0003:046D:C29C.0008: item fetching failed at offset 26/36 [ 202.806207][ T5817] logitech 0003:046D:C29C.0008: parse failed [ 202.812785][ T5817] logitech: probe of 0003:046D:C29C.0008 failed with error -22 [ 202.876665][ T5817] usb 2-1: USB disconnect, device number 11 [ 203.413835][ T8427] netlink: 68 bytes leftover after parsing attributes in process `syz.3.913'. [ 203.817147][ T5840] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 203.998415][ T5840] usb 2-1: config 0 has no interfaces? [ 204.004172][ T5840] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 204.069897][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.142799][ T5840] usb 2-1: config 0 descriptor?? [ 204.249051][ T28] audit: type=1326 audit(1783747375.309:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8447 comm="syz.3.920" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x0 [ 204.418747][ T5840] usb 2-1: USB disconnect, device number 12 [ 204.703727][ T8460] lo speed is unknown, defaulting to 1000 [ 205.767520][ T8493] lo speed is unknown, defaulting to 1000 [ 206.796829][ T8521] lo speed is unknown, defaulting to 1000 [ 207.100353][ T8537] xt_hashlimit: size too large, truncated to 1048576 [ 207.796723][ T8552] netlink: 20 bytes leftover after parsing attributes in process `syz.3.944'. [ 211.398323][ T8598] lo speed is unknown, defaulting to 1000 [ 211.586345][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 211.766670][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 211.777195][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.788013][ T27] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 211.797923][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.817863][ T27] usb 4-1: config 0 descriptor?? [ 211.832013][ T27] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 212.002466][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.958'. [ 212.385273][ T8625] netlink: 25 bytes leftover after parsing attributes in process `syz.2.965'. [ 213.040196][ T27] gspca_vc032x: reg_w err -71 [ 213.058211][ T27] vc032x: probe of 4-1:0.0 failed with error -71 [ 213.071579][ T27] usb 4-1: USB disconnect, device number 8 [ 213.206015][ T8652] 9pnet_fd: Insufficient options for proto=fd [ 213.487368][ T8661] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.015909][ T8675] siw: device registration error -23 [ 214.750832][ T8701] loop1: detected capacity change from 0 to 256 [ 214.791062][ T8701] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 214.966202][ T8703] lo speed is unknown, defaulting to 1000 [ 215.032509][ T8707] siw: device registration error -23 [ 215.148200][ T8711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1002'. [ 216.654159][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1019'. [ 217.149779][ T8765] loop1: detected capacity change from 0 to 256 [ 217.172243][ T8765] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffff" or missing value [ 217.701568][ T8769] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1027'. [ 217.718568][ T8763] mmap: syz.2.1025 (8763) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 217.758929][ T8769] gretap0: entered promiscuous mode [ 217.868922][ T8769] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1027'. [ 217.888257][ T8769] 0ªî{X¹¦: renamed from gretap0 [ 217.923245][ T8769] 0ªî{X¹¦: left promiscuous mode [ 217.956314][ T8769] 0ªî{X¹¦: entered allmulticast mode [ 217.972883][ T8769] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 218.486626][ T8785] lo speed is unknown, defaulting to 1000 [ 219.118448][ T8785] vxcan3: entered promiscuous mode [ 220.066467][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 220.276506][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 220.298681][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.323392][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 220.345078][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 220.356818][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 220.373370][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.383090][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 220.391507][ T9] usb 2-1: SerialNumber: syz [ 220.428599][ T8818] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 220.436445][ T8818] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 220.465485][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 220.472915][ T9] hub: probe of 2-1:1.0 failed with error -5 [ 220.676048][ T8818] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 220.695650][ T8818] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 221.176812][ T9] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 221.676643][ T9] usb 2-1: USB disconnect, device number 13 [ 221.693794][ T9] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 221.724830][ T8881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1068'. [ 222.594755][ T8906] 9pnet_fd: Insufficient options for proto=fd [ 222.676303][ T5817] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 222.876421][ T5817] usb 4-1: Using ep0 maxpacket: 32 [ 222.885220][ T5817] usb 4-1: unable to get BOS descriptor or descriptor too short [ 222.899887][ T5817] usb 4-1: config 8 has an invalid interface number: 94 but max is 0 [ 222.920902][ T5817] usb 4-1: config 8 has no interface number 0 [ 222.952058][ T5817] usb 4-1: config 8 interface 94 has no altsetting 0 [ 222.968685][ T5817] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=fc.62 [ 222.996341][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.004437][ T5817] usb 4-1: Product: syz [ 223.017818][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1077'. [ 223.044585][ T5817] usb 4-1: Manufacturer: syz [ 223.066361][ T5817] usb 4-1: SerialNumber: syz [ 223.557900][ T5817] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 223.743915][ T8910] loop1: detected capacity change from 0 to 32768 [ 223.766684][ T5817] gspca_sn9c2028: read1 error -32 [ 223.775191][ T5817] gspca_sn9c2028: read1 error -32 [ 223.788397][ T8931] lo speed is unknown, defaulting to 1000 [ 223.853001][ T8910] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 223.959128][ T8910] XFS (loop1): Ending clean mount [ 224.043032][ T8] usb 4-1: USB disconnect, device number 9 [ 224.174979][ T5773] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 224.858167][ T8953] lo speed is unknown, defaulting to 1000 [ 225.146409][ T5837] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 225.372788][ T5837] usb 4-1: New USB device found, idVendor=0499, idProduct=101e, bcdDevice= 0.40 [ 225.399117][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.413011][ T5837] usb 4-1: Product: syz [ 225.421264][ T5837] usb 4-1: Manufacturer: syz [ 225.425942][ T5837] usb 4-1: SerialNumber: syz [ 225.834557][ T5837] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 225.855980][ T5837] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 225.885801][ T5837] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 225.906767][ T5837] snd-usb-audio: probe of 4-1:1.1 failed with error -2 [ 225.925679][ T5837] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 225.992302][ T5837] snd-usb-audio: probe of 4-1:1.2 failed with error -2 [ 226.021984][ T5837] usb 4-1: USB disconnect, device number 10 [ 226.043463][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.985174][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'. [ 227.007499][ T9014] vlan0: entered allmulticast mode [ 227.014513][ T9014] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 227.027078][ T9014] bridge0: port 3(vlan0) entered blocking state [ 227.046483][ T9014] bridge0: port 3(vlan0) entered disabled state [ 227.057538][ T9014] vlan0: entered promiscuous mode [ 227.062662][ T9014] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 227.376467][ T5817] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 227.577754][ T5817] usb 4-1: Using ep0 maxpacket: 16 [ 227.591413][ T5817] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 227.600719][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.608856][ T5817] usb 4-1: Product: syz [ 227.613174][ T5817] usb 4-1: Manufacturer: syz [ 227.618115][ T5817] usb 4-1: SerialNumber: syz [ 228.056427][ T5817] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 228.071615][ T5817] usb 4-1: USB disconnect, device number 11 [ 228.275521][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 228.286151][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 229.306853][ T28] audit: type=1326 audit(1783747400.359:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9055 comm="syz.3.1131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 229.361753][ T28] audit: type=1326 audit(1783747400.359:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9055 comm="syz.3.1131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 229.418421][ T9062] loop8: detected capacity change from 0 to 8 [ 229.467208][ T28] audit: type=1326 audit(1783747400.359:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9055 comm="syz.3.1131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 229.496513][ T9062] Dev loop8: unable to read RDB block 8 [ 229.516536][ T9062] loop8: unable to read partition table [ 229.533850][ T9062] loop8: partition table beyond EOD, truncated [ 229.555102][ T9062] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 229.572365][ T28] audit: type=1326 audit(1783747400.359:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9055 comm="syz.3.1131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 229.646685][ T28] audit: type=1326 audit(1783747400.369:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9055 comm="syz.3.1131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 229.700906][ T28] audit: type=1326 audit(1783747400.369:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9055 comm="syz.3.1131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 229.748370][ T28] audit: type=1326 audit(1783747400.369:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9055 comm="syz.3.1131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 229.826396][ T28] audit: type=1326 audit(1783747400.369:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9055 comm="syz.3.1131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 229.878512][ T28] audit: type=1326 audit(1783747400.369:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9055 comm="syz.3.1131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 229.943921][ T28] audit: type=1326 audit(1783747400.369:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9055 comm="syz.3.1131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 231.384455][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030cfa800: rx timeout, send abort [ 231.694179][ T9120] kvm: apic: phys broadcast and lowest prio [ 231.885047][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030cf8400: rx timeout, send abort [ 231.893717][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030cfa800: abort rx timeout. Force session deactivation [ 232.393438][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030cf8400: abort rx timeout. Force session deactivation [ 233.390703][ T9169] loop1: detected capacity change from 0 to 128 [ 233.416835][ T9169] EXT4-fs (loop1): Test dummy encryption mode enabled [ 233.504051][ T9169] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.539498][ T9169] ext4 filesystem being mounted at /261/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 233.657538][ T9178] overlayfs: failed to resolve './file0': -2 [ 233.938384][ T9169] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 234.154702][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.570755][ T9201] loop1: detected capacity change from 0 to 4096 [ 234.607238][ T9201] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 234.695462][ T9201] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 234.881554][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 234.881570][ T28] audit: type=1800 audit(1783747405.939:125): pid=9201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1185" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 238.042720][ T9294] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1215'. [ 238.094537][ T9295] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1215'. [ 238.378750][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1217'. [ 240.238822][ T5837] kernel write not supported for file bpf-prog (pid: 5837 comm: kworker/0:4) [ 240.689980][ T9358] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 241.860226][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1259'. [ 243.807344][ T9460] netlink: 'syz.1.1283': attribute type 11 has an invalid length. [ 244.325876][ T9474] sctp: [Deprecated]: syz.3.1290 (pid 9474) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.325876][ T9474] Use struct sctp_sack_info instead [ 244.552076][ T9481] overlayfs: failed to resolve './cgroup': -2 [ 244.698690][ T9484] fuse: Bad value for 'fd' [ 244.716092][ T9484] 9pnet_fd: Insufficient options for proto=fd [ 244.730505][ T9487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1297'. [ 245.061393][ T9498] netlink: 'syz.1.1301': attribute type 6 has an invalid length. [ 245.070116][ T9498] netlink: 'syz.1.1301': attribute type 7 has an invalid length. [ 245.079327][ T9498] netlink: 'syz.1.1301': attribute type 8 has an invalid length. [ 245.416452][ T9506] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1304'. [ 246.072321][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1313'. [ 246.689544][ T9553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.698333][ T9553] batadv_slave_0: entered promiscuous mode [ 246.704225][ T9553] batadv_slave_0: entered allmulticast mode [ 246.785305][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1323'. [ 246.834645][ T9557] bond0: entered promiscuous mode [ 246.841795][ T9557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.884662][ T9561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.901901][ T9561] bond0: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 246.913973][ T9561] bond0: (slave ip6gre2): Error -95 calling set_mac_address [ 248.883208][ T9600] loop1: detected capacity change from 0 to 32768 [ 248.921840][ T9600] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1339 (9600) [ 249.006702][ T9600] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 249.036641][ T9600] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 249.066339][ T9600] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 249.117048][ T9600] BTRFS info (device loop1): use zstd compression, level 3 [ 249.145725][ T9600] BTRFS info (device loop1): using free space tree [ 249.382934][ T9600] BTRFS info (device loop1): enabling ssd optimizations [ 249.447396][ T9600] BTRFS info (device loop1): auto enabling async discard [ 251.096699][ T5773] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 252.220563][ T9739] fuse: Bad value for 'fd' [ 252.227940][ T9739] 9pnet_fd: Insufficient options for proto=fd [ 254.274981][ T9793] bridge_slave_0: left allmulticast mode [ 254.306613][ T9793] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.335535][ T9793] bridge_slave_1: left allmulticast mode [ 254.356478][ T9793] bridge_slave_1: left promiscuous mode [ 254.376377][ T9793] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.428972][ T9793] bond0: (slave bond_slave_0): Releasing backup interface [ 254.475003][ T9793] bond0: (slave bond_slave_1): Releasing backup interface [ 254.667362][ T9793] team0: Port device team_slave_0 removed [ 254.705690][ T9793] team0: Port device team_slave_1 removed [ 254.726371][ T9793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.756414][ T9793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.812468][ T9793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.831115][ T9793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.878928][ T9793] vlan0: left promiscuous mode [ 254.885415][ T9793] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 254.904293][ T9793] bridge0: port 3(vlan0) entered disabled state [ 254.956609][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1392'. [ 254.997990][ T9799] vxlan1: entered promiscuous mode [ 255.976505][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.996997][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.003431][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.212128][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1404'. [ 256.452135][ T9829] loop1: detected capacity change from 0 to 512 [ 256.476977][ T9829] EXT4-fs: Ignoring removed bh option [ 256.534472][ T9829] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #11: comm syz.1.1406: corrupted in-inode xattr: bad e_name length [ 256.586612][ T9829] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1406: couldn't read orphan inode 11 (err -117) [ 256.663187][ T9829] EXT4-fs (loop1): 1 truncate cleaned up [ 256.690191][ T9829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.830411][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.673011][ T9858] atomic_op ffff88805e602198 conn xmit_atomic 0000000000000000 [ 258.289642][ T9874] tipc: Started in network mode [ 258.294846][ T9874] tipc: Node identity ac14140f, cluster identity 4711 [ 258.312721][ T9874] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 258.334424][ T9874] tipc: Enabled bearer , priority 10 [ 258.448524][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 258.586518][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 258.726488][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 258.876446][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 258.986219][ C0] sched: RT throttling activated [ 259.016375][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 259.156517][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 259.234009][ T9869] loop1: detected capacity change from 0 to 131072 [ 259.245525][ T9869] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 259.253826][ T9869] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 259.272224][ T9869] F2FS-fs (loop1): invalid crc value [ 259.296389][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 259.338672][ T9869] F2FS-fs (loop1): Found nat_bits in checkpoint [ 259.427721][ T9869] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 259.434933][ T9869] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 259.456257][ T5817] tipc: Node number set to 2886997007 [ 259.535990][ T28] audit: type=1800 audit(1783747430.589:126): pid=9869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1420" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 259.596627][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 259.866439][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 260.186926][ T9895] netlink: 'syz.0.1430': attribute type 1 has an invalid length. [ 260.274940][ T9895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.970402][ T5817] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 262.036713][ T5817] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 262.682086][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1456'. [ 263.566421][ C1] net_ratelimit: 4 callbacks suppressed [ 263.566475][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 264.140826][ T28] audit: type=1326 audit(1783747435.199:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9984 comm="syz.1.1465" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2ed9de59 code=0x7fc00000 [ 264.333164][T10010] lo speed is unknown, defaulting to 1000 [ 264.606467][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 265.021510][ T27] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 265.050356][ T27] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 265.646388][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 265.777962][T10047] netlink: 'syz.1.1490': attribute type 1 has an invalid length. [ 265.789813][T10049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.797979][T10049] IPv6: NLM_F_CREATE should be set when creating new route [ 265.805293][T10049] IPv6: NLM_F_CREATE should be set when creating new route [ 266.686362][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 267.475581][T10107] loop1: detected capacity change from 0 to 256 [ 267.612667][T10107] FAT-fs (loop1): Directory bread(block 64) failed [ 267.629602][T10107] FAT-fs (loop1): Directory bread(block 65) failed [ 267.656441][T10107] FAT-fs (loop1): Directory bread(block 66) failed [ 267.676607][T10107] FAT-fs (loop1): Directory bread(block 67) failed [ 267.683321][T10107] FAT-fs (loop1): Directory bread(block 68) failed [ 267.724317][T10107] FAT-fs (loop1): Directory bread(block 69) failed [ 267.731107][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 267.769110][T10107] FAT-fs (loop1): Directory bread(block 70) failed [ 267.775809][T10107] FAT-fs (loop1): Directory bread(block 71) failed [ 267.802907][T10107] FAT-fs (loop1): Directory bread(block 72) failed [ 267.816521][T10107] FAT-fs (loop1): Directory bread(block 73) failed [ 267.994114][T10107] syz.1.1518: attempt to access beyond end of device [ 267.994114][T10107] loop1: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 268.110521][ T28] audit: type=1326 audit(1783747439.169:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.2.1525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f739319de59 code=0x0 [ 268.742667][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1531'. [ 268.776458][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 269.806482][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 269.925170][T10176] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1545'. [ 269.943386][T10176] bridge0: port 3(team0) entered disabled state [ 269.950242][T10176] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.957671][T10176] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.013698][T10177] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1545'. [ 270.256621][T10183] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1548'. [ 270.846458][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 271.886401][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 272.926608][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 273.586138][T10272] loop1: detected capacity change from 0 to 32768 [ 273.596717][T10272] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1583 (10272) [ 273.644175][T10272] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 273.666791][T10272] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 273.675584][T10272] BTRFS info (device loop1): setting nodatasum [ 273.696310][T10272] BTRFS info (device loop1): metadata ratio 772 [ 273.702658][T10272] BTRFS info (device loop1): setting nodatacow, compression disabled [ 273.724798][T10272] BTRFS info (device loop1): turning on flush-on-commit [ 273.743084][T10272] BTRFS info (device loop1): setting datacow [ 273.752689][T10272] BTRFS info (device loop1): enabling disk space caching [ 273.765636][T10272] BTRFS info (device loop1): force clearing of disk cache [ 273.773334][T10272] BTRFS info (device loop1): disk space caching is enabled [ 273.911937][T10272] BTRFS info (device loop1): enabling ssd optimizations [ 273.936596][T10272] BTRFS info (device loop1): rebuilding free space tree [ 273.976934][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 274.026836][T10272] BTRFS info (device loop1): disabling free space tree [ 274.038452][T10272] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 274.066070][T10272] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 274.155873][ T28] audit: type=1800 audit(1783747445.209:129): pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1583" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 274.344173][ T5773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 275.006428][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 275.216770][T10321] loop1: detected capacity change from 0 to 40427 [ 275.238990][T10321] F2FS-fs (loop1): invalid crc value [ 275.267734][T10321] F2FS-fs (loop1): Found nat_bits in checkpoint [ 275.403627][T10321] F2FS-fs (loop1): Start checkpoint disabled! [ 275.449764][T10321] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 275.524642][T10321] overlayfs: conflicting lowerdir path [ 275.568755][T10321] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 275.817530][ T1095] kworker/u4:8: attempt to access beyond end of device [ 275.817530][ T1095] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 275.832143][ T1095] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 275.842243][ T1095] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 275.849593][ T1095] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 275.857929][ T1095] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 275.908360][T10334] overlayfs: failed to resolve './cgroup': -2 [ 276.046685][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 276.421668][T10346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1609'. [ 277.086441][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 278.126743][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 279.166715][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 279.358782][ T28] audit: type=1326 audit(1783747450.419:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10420 comm="syz.2.1637" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f739319de59 code=0x0 [ 279.584272][T10427] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1638'. [ 279.614473][T10427] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1638'. [ 280.206597][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 281.246582][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 282.286541][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 282.300836][T10481] loop1: detected capacity change from 0 to 32768 [ 282.376361][T10481] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 282.541947][T10481] XFS (loop1): Ending clean mount [ 282.608366][T10481] XFS (loop1): Quotacheck needed: Please wait. [ 282.750356][T10481] XFS (loop1): Quotacheck: Done. [ 283.201928][ T5773] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 283.326490][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 283.517338][T10535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1682'. [ 283.778667][T10548] bridge1: entered promiscuous mode [ 283.784038][T10548] bridge1: entered allmulticast mode [ 284.366458][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 284.659956][T10567] raw_sendmsg: syz.0.1696 forgot to set AF_INET. Fix it! [ 284.815085][T10571] lo speed is unknown, defaulting to 1000 [ 285.406559][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 286.229587][T10615] 9pnet_fd: Insufficient options for proto=fd [ 286.456502][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 287.243536][T10658] netlink: 'syz.3.1734': attribute type 4 has an invalid length. [ 287.301183][T10658] netlink: 'syz.3.1734': attribute type 4 has an invalid length. [ 287.496474][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 287.714907][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'. [ 287.753389][T10673] netlink: 'syz.1.1741': attribute type 26 has an invalid length. [ 287.804317][T10673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1741'. [ 287.826820][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'. [ 287.835848][T10673] netlink: 'syz.1.1741': attribute type 26 has an invalid length. [ 287.855130][T10673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1741'. [ 288.526540][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 289.041399][T10726] loop1: detected capacity change from 0 to 512 [ 289.065226][T10726] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 289.099690][T10726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.191365][T10726] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.1766: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 289.399832][ T5773] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 289.443827][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.566438][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 290.616549][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 291.646444][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 292.359493][T10810] process '/newroot/439/file0' started with executable stack [ 292.686565][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 292.902865][T10828] lo speed is unknown, defaulting to 1000 [ 293.174613][T10835] netlink: 'syz.3.1807': attribute type 1 has an invalid length. [ 293.289091][T10835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.375751][T10841] bond0: (slave geneve2): making interface the new active one [ 293.389818][T10841] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 293.429564][T10841] syz.3.1807 (10841) used greatest stack depth: 18040 bytes left [ 293.736477][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 294.766435][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 295.022347][T10871] loop1: detected capacity change from 0 to 40427 [ 295.045307][T10871] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 295.054933][T10871] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 295.084953][T10871] F2FS-fs (loop1): Found nat_bits in checkpoint [ 295.226774][T10871] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 295.234145][T10871] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 295.340536][ T28] audit: type=1804 audit(1783747466.389:131): pid=10871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1820" name="/newroot/376/file0/bus" dev="loop1" ino=10 res=1 errno=0 [ 295.806547][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 296.150350][T10924] input: syz0 as /devices/virtual/input/input10 [ 296.856482][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 296.922533][T10941] lo speed is unknown, defaulting to 1000 [ 296.997195][T10943] overlayfs: failed to clone upperpath [ 297.219826][ T28] audit: type=1326 audit(1783747468.279:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10940 comm="syz.2.1848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f739319de59 code=0x0 [ 297.381678][T10955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1852'. [ 297.503931][T10959] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1854'. [ 297.886498][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 297.978211][T10979] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1862'. [ 298.876307][ T5817] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 298.926492][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 299.096406][ T5817] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 299.116284][ T5817] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 299.154123][ T5817] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 299.163803][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.196515][ T5817] usb 2-1: Product: syz [ 299.200901][ T5817] usb 2-1: Manufacturer: syz [ 299.205543][ T5817] usb 2-1: SerialNumber: syz [ 299.225275][ T5817] usb 2-1: config 0 descriptor?? [ 299.237094][T11000] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 299.256160][T11000] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 299.501873][T11000] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 299.526576][T11000] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 299.976491][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 300.565060][ T5817] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 300.603271][ T5817] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, e6:2a:1b:e1:6d:df [ 300.638320][ T5817] usb 2-1: USB disconnect, device number 14 [ 300.657934][ T5817] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 301.006449][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 301.901273][T11068] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 301.917870][T11068] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 301.982330][T11068] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 302.004002][T11068] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 302.021883][T11068] overlayfs: d_ino too big (392, ino=9223372036854777891, xinobits=3) [ 302.048268][T11068] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 302.057421][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 302.065650][T11068] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 302.088464][T11071] overlayfs: failed to clone upperpath [ 302.098889][T11068] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 302.132062][T11068] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 302.149099][T11068] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 302.160915][T11068] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 302.173449][T11068] overlayfs: d_ino too big (instances, ino=4611686018427388063, xinobits=3) [ 302.458769][T11085] loop1: detected capacity change from 0 to 2048 [ 302.535727][T11085] loop1: p1 < > p4 < > [ 302.550527][T11085] loop1: partition table partially beyond EOD, truncated [ 302.571279][T11085] loop1: p4 start 42180 is beyond EOD, truncated [ 302.950722][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1910'. [ 302.972476][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1910'. [ 303.096453][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 303.221264][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1916'. [ 303.566676][T11126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1920'. [ 303.665482][T11129] netlink: 'syz.3.1921': attribute type 4 has an invalid length. [ 304.126430][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 304.944218][T11175] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1941'. [ 305.166445][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 305.601747][T11201] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1954'. [ 306.078687][T11218] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 306.088561][T11218] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 306.097798][T11218] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 306.106983][T11218] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 306.116131][T11218] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 306.125458][T11218] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 306.134679][T11218] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 306.143906][T11218] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 306.153117][T11218] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 306.176989][T11220] veth0: entered promiscuous mode [ 306.187461][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1963'. [ 306.306345][ T5817] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 306.497464][ T5817] usb 2-1: Using ep0 maxpacket: 16 [ 306.512888][T11224] netlink: 208052 bytes leftover after parsing attributes in process `syz.2.1965'. [ 306.531086][ T5817] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.557432][ T5817] usb 2-1: config 0 interface 0 has no altsetting 0 [ 306.564489][ T5817] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 306.577600][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.605035][ T5817] usb 2-1: config 0 descriptor?? [ 307.053449][ T5817] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 307.461252][ T28] audit: type=1326 audit(1783747478.519:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.3.1975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 307.507920][ T5837] usb 2-1: USB disconnect, device number 15 [ 307.541930][ T28] audit: type=1326 audit(1783747478.519:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.3.1975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 307.595320][ T28] audit: type=1326 audit(1783747478.519:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.3.1975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 307.642637][ T28] audit: type=1326 audit(1783747478.549:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.3.1975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 307.696308][ T28] audit: type=1326 audit(1783747478.589:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.3.1975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff6ad35e68e code=0x7ffc0000 [ 307.735808][ T28] audit: type=1326 audit(1783747478.589:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.3.1975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff6ad35e68e code=0x7ffc0000 [ 307.776365][ T28] audit: type=1326 audit(1783747478.599:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.3.1975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff6ad35e68e code=0x7ffc0000 [ 307.822573][ T28] audit: type=1326 audit(1783747478.629:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.3.1975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff6ad35e68e code=0x7ffc0000 [ 307.860558][ T28] audit: type=1326 audit(1783747478.629:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.3.1975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff6ad35e68e code=0x7ffc0000 [ 307.885868][T11257] netlink: 'syz.0.1978': attribute type 1 has an invalid length. [ 307.894079][T11257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 307.901446][T11257] IPv6: NLM_F_CREATE should be set when creating new route [ 307.908768][T11257] IPv6: NLM_F_CREATE should be set when creating new route [ 307.916856][ T28] audit: type=1326 audit(1783747478.629:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.3.1975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff6ad35e68e code=0x7ffc0000 [ 307.944062][T11257] netlink: 'syz.0.1978': attribute type 1 has an invalid length. [ 307.953274][T11257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 307.960587][T11257] IPv6: NLM_F_CREATE should be set when creating new route [ 308.143271][T11262] loop1: detected capacity change from 0 to 1024 [ 308.155001][T11262] EXT4-fs: Ignoring removed bh option [ 308.189189][T11262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.340116][T11262] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 308.365068][T11262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.005757][T11286] loop1: detected capacity change from 0 to 1024 [ 309.182259][ T72] hfsplus: b-tree write err: -5, ino 25 [ 309.202228][ T72] hfsplus: b-tree write err: -5, ino 4 [ 309.220078][ T72] hfsplus: b-tree write err: -5, ino 2 [ 309.522960][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1999'. [ 309.662805][T11311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2001'. [ 309.859833][T11319] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 309.865874][T11319] syzkaller0: owner set to 0 [ 310.366522][ C1] net_ratelimit: 3324 callbacks suppressed [ 310.366543][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 311.406345][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 311.711284][T11350] loop1: detected capacity change from 0 to 256 [ 311.805334][T11350] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 312.381164][T11376] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2029'. [ 312.446355][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 313.486352][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 313.551693][T11399] loop1: detected capacity change from 0 to 512 [ 313.564695][T11399] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 313.595127][T11399] EXT4-fs error (device loop1): ext4_quota_enable:7144: comm syz.1.2040: inode #65536: comm syz.1.2040: iget: illegal inode # [ 313.628351][T11399] EXT4-fs error (device loop1): ext4_quota_enable:7147: comm syz.1.2040: Bad quota inode: 65536, type: 2 [ 313.648583][T11399] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-117, ino=65536). Please run e2fsck to fix. [ 313.665492][T11399] EXT4-fs (loop1): mount failed [ 313.905774][T11392] overlayfs: failed to clone upperpath [ 313.915419][T11392] overlayfs: failed to clone upperpath [ 314.146766][ T27] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 314.374839][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 314.382010][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 314.396699][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.421642][ T27] usb 2-1: config 0 descriptor?? [ 314.526348][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 314.641299][T11432] 9pnet: p9_errstr2errno: server reported unknown error n$Ž[ [ 314.641299][T11432] Q&|xù [ 315.492090][ T27] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 315.576355][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 315.705081][ T27] usb 2-1: USB disconnect, device number 16 [ 316.517561][T11508] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 316.606340][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 316.824017][T11515] bridge2: entered promiscuous mode [ 316.856780][T11515] bridge2: entered allmulticast mode [ 317.419783][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.426401][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.646497][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 318.078736][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 318.078753][ T28] audit: type=1326 audit(1783747489.139:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11539 comm="syz.1.2098" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee2ed9de59 code=0x0 [ 318.696449][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 318.840212][T11556] ip6gre1: entered promiscuous mode [ 318.845512][T11556] ip6gre1: entered allmulticast mode [ 319.125319][T11565] team0: entered promiscuous mode [ 319.136339][T11565] team_slave_0: entered promiscuous mode [ 319.148155][T11565] team_slave_1: entered promiscuous mode [ 319.165570][T11565] batadv_slave_0: entered promiscuous mode [ 319.181632][T11564] batadv_slave_0: left promiscuous mode [ 319.196667][T11564] team0: left promiscuous mode [ 319.204952][T11564] team_slave_0: left promiscuous mode [ 319.220177][T11564] team_slave_1: left promiscuous mode [ 319.726487][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 319.981945][T11586] netlink: 'syz.1.2119': attribute type 4 has an invalid length. [ 320.020301][T11586] netlink: 'syz.1.2119': attribute type 4 has an invalid length. [ 320.299008][T11596] loop1: detected capacity change from 0 to 512 [ 320.312237][T11596] EXT4-fs: Ignoring removed oldalloc option [ 320.356426][T11596] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 320.425154][T11596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.466486][T11596] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.594384][T11596] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 23: comm syz.1.2124: lblock 5 mapped to illegal pblock 23 (length 1) [ 320.662719][T11596] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 320.706828][T11596] EXT4-fs error (device loop1): ext4_write_dquot:6933: comm syz.1.2124: Failed to commit dquot type 0 [ 320.756320][T11596] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #4: block 29: comm syz.1.2124: lblock 5 mapped to illegal pblock 29 (length 1) [ 320.776359][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 320.800354][T11596] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 320.832709][T11596] EXT4-fs error (device loop1): ext4_write_dquot:6933: comm syz.1.2124: Failed to commit dquot type 1 [ 320.881282][T11596] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Out of memory [ 320.926952][T11596] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #18: comm syz.1.2124: mark_inode_dirty error [ 320.955675][T11596] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 23: comm syz.1.2124: lblock 5 mapped to illegal pblock 23 (length 1) [ 320.988797][T11596] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 321.011186][T11596] EXT4-fs error (device loop1): ext4_write_dquot:6933: comm syz.1.2124: Failed to commit dquot type 0 [ 321.047916][T11596] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #4: block 29: comm syz.1.2124: lblock 5 mapped to illegal pblock 29 (length 1) [ 321.088150][T11596] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 321.121662][T11596] EXT4-fs error (device loop1): ext4_write_dquot:6933: comm syz.1.2124: Failed to commit dquot type 1 [ 321.197951][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2131'. [ 321.223810][T11614] netlink: 'syz.0.2131': attribute type 26 has an invalid length. [ 321.256429][T11614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2131'. [ 321.276039][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2131'. [ 321.296348][T11614] netlink: 'syz.0.2131': attribute type 26 has an invalid length. [ 321.317406][T11614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2131'. [ 321.566001][ T7657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.806336][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 322.542545][ T28] audit: type=1326 audit(1783747493.569:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.3.2145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff6ad39de59 code=0x0 [ 322.617961][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 322.630235][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 322.642125][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 322.653834][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 322.663321][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 322.671174][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 322.736622][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 322.746685][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 322.764348][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 322.776345][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 322.784343][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 322.791964][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 322.846751][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 322.935507][T11646] lo speed is unknown, defaulting to 1000 [ 323.427113][T11646] chnl_net:caif_netlink_parms(): no params data found [ 323.637654][T11646] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.644939][T11646] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.679028][T11646] bridge_slave_0: entered allmulticast mode [ 323.686272][T11646] bridge_slave_0: entered promiscuous mode [ 323.708126][T11646] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.715352][T11646] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.747204][T11646] bridge_slave_1: entered allmulticast mode [ 323.754815][T11646] bridge_slave_1: entered promiscuous mode [ 323.853756][T11646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.882544][T11646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.896543][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 323.944012][T11646] team0: Port device team_slave_0 added [ 323.960343][T11646] team0: Port device team_slave_1 added [ 324.015647][T11646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.027410][T11646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.054917][T11646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.069922][T11646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.086239][T11646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.136240][T11646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.231012][T11646] hsr_slave_0: entered promiscuous mode [ 324.238070][T11646] hsr_slave_1: entered promiscuous mode [ 324.244586][T11646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.253099][T11646] Cannot create hsr debugfs directory [ 324.622879][T11646] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 324.641481][T11646] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 324.672778][T11646] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 324.694989][T11646] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 324.846591][ T5781] Bluetooth: hci3: command tx timeout [ 324.893949][T11646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.916119][T11646] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.926379][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 324.960776][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.968032][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.028366][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.035578][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.577735][T11646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.966402][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 326.190228][T11646] veth0_vlan: entered promiscuous mode [ 326.239707][T11646] veth1_vlan: entered promiscuous mode [ 326.304905][T11646] veth0_macvtap: entered promiscuous mode [ 326.322313][T11646] veth1_macvtap: entered promiscuous mode [ 326.361346][T11646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.396400][T11646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.412177][T11646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.422859][T11646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.440463][T11646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.469454][T11646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.506378][T11646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.526256][T11646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.537962][T11646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.548091][T11646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.558812][T11646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.575833][T11646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.610621][T11646] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.631119][T11646] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.640092][T11646] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.649063][T11646] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.793557][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.814144][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.873004][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.882419][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.926637][ T5781] Bluetooth: hci3: command tx timeout [ 327.006520][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 327.487345][T11774] netlink: 'syz.4.2194': attribute type 11 has an invalid length. [ 327.504237][T11774] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2194'. [ 327.546331][T11774] netlink: 'syz.4.2194': attribute type 11 has an invalid length. [ 327.565997][T11774] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2194'. [ 327.988110][ T28] audit: type=1326 audit(1783747499.039:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11792 comm="syz.4.2204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62ed99de59 code=0x0 [ 328.056467][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 328.246645][T11803] ip6gre2: entered promiscuous mode [ 328.251945][T11803] ip6gre2: entered allmulticast mode [ 328.729574][T11825] ip6gre1: entered promiscuous mode [ 328.734947][T11825] ip6gre1: entered allmulticast mode [ 329.007034][ T5781] Bluetooth: hci3: command tx timeout [ 329.086687][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 330.126375][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 330.921359][T11862] loop4: detected capacity change from 0 to 40427 [ 330.941052][T11862] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 330.950385][T11862] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 330.970972][T11862] F2FS-fs (loop4): Found nat_bits in checkpoint [ 331.043907][T11862] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 331.051350][T11862] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 331.086641][ T5781] Bluetooth: hci3: command tx timeout [ 331.122487][ T28] audit: type=1804 audit(1783747502.179:195): pid=11862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2234" name="/newroot/10/file0/bus" dev="loop4" ino=10 res=1 errno=0 [ 331.166357][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 331.444327][T11880] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2244'. [ 332.216376][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 332.676126][T11923] lo speed is unknown, defaulting to 1000 [ 333.246376][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 333.378789][T11936] IPv6: sit2: Disabled Multicast RS [ 333.396129][ T28] audit: type=1326 audit(1783747504.449:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11922 comm="syz.0.2262" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcdfc19de59 code=0x0 [ 333.652306][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2269'. [ 334.286373][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 334.617243][T11968] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.760009][T11970] lo speed is unknown, defaulting to 1000 [ 334.904490][T11971] loop4: detected capacity change from 0 to 8192 [ 335.055012][ T28] audit: type=1326 audit(1783747506.109:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.4.2279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62ed99de59 code=0x0 [ 335.326553][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 336.366384][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 336.609020][T12011] loop4: detected capacity change from 0 to 8192 [ 336.657378][T12011] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 336.716285][T12011] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 336.760848][T12011] REISERFS (device loop4): using ordered data mode [ 336.799784][T12011] reiserfs: using flush barriers [ 336.837006][T12011] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 336.905383][T12011] REISERFS (device loop4): checking transaction log (loop4) [ 337.183784][T12011] REISERFS (device loop4): Using tea hash to sort names [ 337.208752][T12011] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 337.416418][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 337.622591][T12037] netlink: 'syz.2.2309': attribute type 4 has an invalid length. [ 338.177428][T12048] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2312'. [ 338.446363][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 338.633324][T12054] loop4: detected capacity change from 0 to 512 [ 338.700777][T12054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.970800][T11646] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.282455][T12074] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2323'. [ 339.486364][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 340.396338][T12108] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2338'. [ 340.526388][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 340.663300][T12095] loop4: detected capacity change from 0 to 40427 [ 340.686078][T12095] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 340.703203][T12095] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 340.725595][T12095] F2FS-fs (loop4): invalid crc value [ 340.960313][T12095] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 340.980583][T12095] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 341.268392][T11646] syz-executor: attempt to access beyond end of device [ 341.268392][T11646] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 341.305618][T11646] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 341.348977][T11646] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 341.566412][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 342.547423][T12143] netlink: 208052 bytes leftover after parsing attributes in process `syz.0.2351'. [ 342.606358][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 343.646485][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 344.486415][T12192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2375'. [ 344.540463][T12192] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2375'. [ 344.686376][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 344.736929][T12198] loop4: detected capacity change from 0 to 256 [ 344.765398][T12198] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 344.778137][T12198] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 344.814600][T12198] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xdca9dc68, utbl_chksum : 0xe619d30d) [ 344.921750][T12205] netlink: 'syz.0.2378': attribute type 1 has an invalid length. [ 345.106497][T12205] bond2: entered promiscuous mode [ 345.130209][T12205] 8021q: adding VLAN 0 to HW filter on device bond2 [ 345.213019][T12207] 8021q: adding VLAN 0 to HW filter on device bond2 [ 345.234638][T12207] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 345.267999][T12207] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 345.320197][T12207] bond2: (slave gre1): making interface the new active one [ 345.333853][T12207] gre1: entered promiscuous mode [ 345.346032][T12207] bond2: (slave gre1): Enslaving as an active interface with an up link [ 345.736491][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 346.731562][T12252] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2395'. [ 346.766365][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 347.547340][T12277] overlayfs: failed to clone upperpath [ 347.725625][T12282] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2410'. [ 347.806364][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 348.270240][T12268] overlayfs: failed to clone upperpath [ 348.291109][T12268] overlayfs: failed to clone upperpath [ 348.486617][T12287] loop4: detected capacity change from 0 to 32768 [ 348.515645][T12287] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 348.676126][T12287] XFS (loop4): Ending clean mount [ 348.695709][T12287] XFS (loop4): Quotacheck needed: Please wait. [ 348.767625][T12287] XFS (loop4): Quotacheck: Done. [ 348.846400][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 349.159082][T11646] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 349.886682][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 350.007286][T12308] netdevsim netdevsim3 netdevsim1: IPsec offload requires 128 bit authentication [ 350.046472][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 350.575442][T12336] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 350.593971][T12336] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 350.635633][T12336] ovl_remap_lower_ino: 32 callbacks suppressed [ 350.635654][T12336] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 350.651614][T12336] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 350.684419][T12336] overlayfs: d_ino too big (54, ino=9223372036854776104, xinobits=3) [ 350.719201][T12336] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 350.752890][T12336] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 350.786701][T12336] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 350.795237][T12336] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 350.820989][T12336] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 350.845776][T12336] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 350.855606][T12336] overlayfs: d_ino too big (instances, ino=4611686018427388063, xinobits=3) [ 351.235472][T12356] netlink: 'syz.3.2436': attribute type 1 has an invalid length. [ 351.304137][T12356] bond1: entered promiscuous mode [ 351.316795][T12356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.352794][T12364] loop4: detected capacity change from 0 to 128 [ 351.366569][T12364] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 351.462369][T12357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.469873][T12357] bond1: (slave gre3): The slave device specified does not support setting the MAC address [ 351.486819][T12357] bond1: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 351.504037][T12364] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 351.521205][T12357] bond1: (slave gre3): making interface the new active one [ 351.536613][T12357] gre3: entered promiscuous mode [ 351.541762][T12364] FAT-fs (loop4): Filesystem has been set read-only [ 351.553666][T12357] bond1: (slave gre3): Enslaving as an active interface with an up link [ 351.679257][T11646] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 352.302042][T12375] overlayfs: failed to clone lowerpath [ 352.329868][T12375] overlayfs: failed to clone lowerpath [ 352.631771][T12379] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.2446'. [ 353.606509][ T6383] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.646370][ T6383] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.854745][ T6383] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.896223][ T6383] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.103052][ T6383] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.126839][ T6383] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.294216][ T6383] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.323590][ T6383] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.545562][T12404] loop4: detected capacity change from 0 to 32768 [ 354.643825][ T6383] tipc: Disabling bearer [ 354.687330][T12404] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 354.697216][ T6383] tipc: Left network mode [ 354.758453][T12404] XFS (loop4): Ending clean mount [ 354.846952][ T28] audit: type=1800 audit(1783747525.899:198): pid=12404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2458" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 354.939804][ T28] audit: type=1800 audit(1783747525.999:199): pid=12426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2458" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 355.303436][T11646] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 357.236511][T12489] loop3: detected capacity change from 0 to 7 [ 357.263189][T12489] Dev loop3: unable to read RDB block 7 [ 357.285208][T12489] loop3: AHDI p1 [ 357.301608][T12489] loop3: partition table partially beyond EOD, truncated [ 357.566415][ T6383] hsr_slave_0: left promiscuous mode [ 357.601609][ T6383] hsr_slave_1: left promiscuous mode [ 359.068134][ T5817] IPVS: starting estimator thread 0... [ 359.186639][T12521] IPVS: using max 20 ests per chain, 48000 per kthread [ 360.395322][ T6383] bond0 (unregistering): Released all slaves [ 360.460826][ T6383] bridge0 (unregistering): left allmulticast mode [ 363.497048][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 364.345245][T12657] loop4: detected capacity change from 0 to 256 [ 364.406038][T12657] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 364.446368][T12657] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 364.468878][T12657] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 365.133419][T12684] loop4: detected capacity change from 0 to 1024 [ 365.161715][T12684] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 365.206449][T12684] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 365.253209][T12684] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 365.294183][T12684] EXT4-fs error (device loop4): ext4_get_journal_inode:5820: inode #5: comm syz.4.2540: unexpected bad inode w/o EXT4_IGET_BAD [ 365.352639][T12684] EXT4-fs (loop4): no journal found [ 365.369234][T12684] EXT4-fs (loop4): can't get journal size [ 365.393620][T12684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 365.664456][T11646] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.722394][T12703] overlayfs: failed to clone upperpath [ 366.553693][T12714] loop4: detected capacity change from 0 to 40427 [ 366.565994][T12714] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 366.574952][T12714] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 366.602300][T12714] F2FS-fs (loop4): invalid crc value [ 366.608884][T12714] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 366.640472][T12714] F2FS-fs (loop4): Found nat_bits in checkpoint [ 366.742753][T12714] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 366.750909][T12714] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 366.967410][T11646] syz-executor: attempt to access beyond end of device [ 366.967410][T11646] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 367.025846][T11646] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 368.397120][T12781] lo speed is unknown, defaulting to 1000 [ 370.301600][ T28] audit: type=1326 audit(1783747541.359:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.3.2570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 370.386282][ T28] audit: type=1326 audit(1783747541.359:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.3.2570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 370.449691][ T28] audit: type=1326 audit(1783747541.439:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.3.2570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 370.515004][ T28] audit: type=1326 audit(1783747541.439:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.3.2570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 370.636558][ T28] audit: type=1326 audit(1783747541.439:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.3.2570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 370.726084][ T28] audit: type=1326 audit(1783747541.489:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.3.2570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 370.786700][ T28] audit: type=1326 audit(1783747541.499:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.3.2570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 370.863623][T12827] overlayfs: failed to clone upperpath [ 370.887647][ T28] audit: type=1326 audit(1783747541.499:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.3.2570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 370.944691][T12830] input: syz1 as /devices/virtual/input/input11 [ 370.984940][ T28] audit: type=1326 audit(1783747541.499:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.3.2570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 371.066545][ T28] audit: type=1326 audit(1783747541.499:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.3.2570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 371.407205][T12844] loop4: detected capacity change from 0 to 2048 [ 371.453731][T12844] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 372.144660][T12871] pim6reg: entered allmulticast mode [ 372.195477][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.265623][T12879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.096807][T12896] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2596'. [ 373.143836][T12896] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2596'. [ 373.404507][T12904] overlayfs: failed to clone upperpath [ 373.605257][T12912] overlayfs: failed to clone lowerpath [ 373.634987][T12912] overlayfs: failed to clone lowerpath [ 374.958589][T12948] loop4: detected capacity change from 0 to 1024 [ 374.970153][T12948] EXT4-fs: Ignoring removed bh option [ 375.016287][T12948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 375.050995][T12948] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.228282][T11646] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 375.973875][T12986] lo speed is unknown, defaulting to 1000 [ 376.026057][T12991] trusted_key: syz.0.2635 sent an empty control message without MSG_MORE. [ 376.475124][ T27] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 376.515751][ T27] hid-generic 0006:0004:0009.000C: hidraw0: VIRTUAL HID v0.04 Device [syz0] on syz1 [ 376.544611][T13013] overlayfs: failed to clone lowerpath [ 376.550433][T13009] loop4: detected capacity change from 0 to 2048 [ 376.598444][T13009] UDF-fs: error (device loop4): udf_read_tagged: block 256: CRC length 65535 exceeds block size [ 376.615975][T13015] overlayfs: failed to clone lowerpath [ 376.655807][T13009] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 1344: 0x15 != 0x00 [ 376.706800][T13009] UDF-fs: warning (device loop4): udf_fill_super: No fileset found [ 377.045755][T13024] lo speed is unknown, defaulting to 1000 [ 377.726864][T13050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.806379][T13050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.854595][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.861296][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.606769][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 386.157787][T13303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2717'. [ 386.381300][T13307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2718'. [ 386.411579][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2718'. [ 386.441651][T13307] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.451421][T13307] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.460370][T13307] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.469206][T13307] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.492699][T13307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2718'. [ 386.506491][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2718'. [ 386.726791][T13315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.734295][T13315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.800712][T13315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.816510][T13315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.184853][T13451] loop4: detected capacity change from 0 to 4096 [ 390.287775][T13460] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 390.327034][T13459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.334331][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 390.334346][ T28] audit: type=1800 audit(1783747564.391:286): pid=13451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2758" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 390.369144][T13459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.399322][T13459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.822843][T13473] lo speed is unknown, defaulting to 1000 [ 391.329695][T13472] loop4: detected capacity change from 0 to 32768 [ 391.398712][T13472] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 391.502593][T13472] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 391.589827][T13472] XFS (loop4): Starting recovery (logdev: internal) [ 391.633428][T13472] XFS (loop4): Ending recovery (logdev: internal) [ 391.999152][T11646] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 393.307927][ T5817] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 393.728849][ T5817] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.739228][ T5817] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 393.766239][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.779390][ T5817] usb 5-1: config 0 descriptor?? [ 393.810454][ T5817] pwc: Askey VC010 type 2 USB webcam detected. [ 394.198872][ T5817] pwc: recv_control_msg error -32 req 02 val 2b00 [ 394.227402][ T5817] pwc: recv_control_msg error -32 req 02 val 2700 [ 394.240894][ T5817] pwc: recv_control_msg error -32 req 02 val 2c00 [ 394.248652][ T5817] pwc: recv_control_msg error -32 req 04 val 1000 [ 394.464459][ T5817] pwc: recv_control_msg error -71 req 04 val 1400 [ 394.486582][ T5817] pwc: recv_control_msg error -71 req 02 val 2000 [ 394.493621][ T5817] pwc: recv_control_msg error -71 req 02 val 2100 [ 394.517017][ T5817] pwc: recv_control_msg error -71 req 04 val 1500 [ 394.536470][ T5817] pwc: recv_control_msg error -71 req 02 val 2500 [ 394.543570][ T5817] pwc: recv_control_msg error -71 req 02 val 2400 [ 394.559351][ T5817] pwc: recv_control_msg error -71 req 02 val 2600 [ 394.573895][ T5817] pwc: recv_control_msg error -71 req 02 val 2900 [ 394.592001][ T5817] pwc: recv_control_msg error -71 req 02 val 2800 [ 394.616441][ T5817] pwc: recv_control_msg error -71 req 04 val 1100 [ 394.636846][ T5817] pwc: recv_control_msg error -71 req 04 val 1200 [ 394.667932][ T5817] pwc: Registered as video103. [ 394.697796][ T5817] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 394.781901][ T5817] usb 5-1: USB disconnect, device number 2 [ 395.053391][T13589] netlink: 'syz.3.2808': attribute type 1 has an invalid length. [ 395.103621][T13589] 8021q: adding VLAN 0 to HW filter on device bond2 [ 395.117687][T13592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2809'. [ 395.191047][T13589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.208110][T13589] bond2: (slave bond0): Enslaving as a backup interface with an up link [ 395.230008][ T1105] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 395.367536][ T72] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 396.118415][T13617] overlayfs: failed to clone upperpath [ 396.965270][T13651] bridge0: port 3(syz_tun) entered blocking state [ 396.974506][T13651] bridge0: port 3(syz_tun) entered disabled state [ 396.986502][T13651] syz_tun: entered allmulticast mode [ 397.016566][T13651] syz_tun: entered promiscuous mode [ 397.024998][T13651] bridge0: port 3(syz_tun) entered blocking state [ 397.031632][T13651] bridge0: port 3(syz_tun) entered forwarding state [ 397.097960][T13654] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 397.141323][T13653] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 397.174290][T13658] netlink: 'syz.3.2832': attribute type 1 has an invalid length. [ 397.257461][T13658] 8021q: adding VLAN 0 to HW filter on device bond3 [ 397.293603][T13660] veth1_vlan: left promiscuous mode [ 397.361137][T13660] veth1_vlan: entered promiscuous mode [ 397.403882][T13660] bond3: (slave macvlan1): making interface the new active one [ 397.441592][T13660] bond3: (slave macvlan1): Enslaving as an active interface with an up link [ 398.525696][T13713] netlink: 'syz.0.2851': attribute type 1 has an invalid length. [ 398.682352][T13716] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 398.722507][T13716] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 398.731976][T13716] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 398.740956][T13716] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 398.754502][T13716] bond3: (slave geneve2): making interface the new active one [ 398.765791][T13716] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 398.776799][T13720] netlink: 'syz.2.2852': attribute type 1 has an invalid length. [ 398.800010][T13720] netlink: 'syz.2.2852': attribute type 4 has an invalid length. [ 398.812364][T13720] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.2852'. [ 399.924431][ T28] audit: type=1326 audit(1783747573.981:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.2.2870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f739319de59 code=0x0 [ 399.994369][T13766] loop4: detected capacity change from 0 to 2048 [ 400.019917][T13766] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 400.059708][T13766] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 400.344513][ T28] audit: type=1326 audit(1783747574.401:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13773 comm="syz.0.2873" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcdfc19de59 code=0x0 [ 400.704902][T13785] overlayfs: failed to clone upperpath [ 401.313213][T13819] netlink: 'syz.0.2889': attribute type 1 has an invalid length. [ 401.345177][T13819] 8021q: adding VLAN 0 to HW filter on device bond4 [ 401.408831][T13819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.419387][T13819] bond4: (slave bond0): Enslaving as a backup interface with a down link [ 402.407867][T13857] syz.0.2907 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 403.325912][T13885] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 403.926897][T13910] lo speed is unknown, defaulting to 1000 [ 404.494811][ T28] audit: type=1326 audit(1783747578.551:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13909 comm="syz.4.2926" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62ed99de59 code=0x0 [ 405.425050][T13946] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2938'. [ 406.244379][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2950'. [ 406.273819][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2950'. [ 406.369775][ T28] audit: type=1326 audit(1783747580.411:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13979 comm="syz.2.2952" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f739319de59 code=0x0 [ 407.669552][ T28] audit: type=1326 audit(1783747581.731:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14030 comm="syz.4.2973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62ed99de59 code=0x0 [ 408.055564][T14039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2976'. [ 408.071454][T14039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2976'. [ 408.272914][T14044] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 408.339749][ T28] audit: type=1326 audit(1783747582.401:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14045 comm="syz.2.2978" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739319de59 code=0x7ffc0000 [ 408.367653][ T28] audit: type=1326 audit(1783747582.401:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14045 comm="syz.2.2978" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739319de59 code=0x7ffc0000 [ 408.407883][ T28] audit: type=1326 audit(1783747582.431:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14045 comm="syz.2.2978" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f739319de59 code=0x7ffc0000 [ 408.455898][ T28] audit: type=1326 audit(1783747582.431:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14045 comm="syz.2.2978" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739319de59 code=0x7ffc0000 [ 408.483210][ T28] audit: type=1326 audit(1783747582.431:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14045 comm="syz.2.2978" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739319de59 code=0x7ffc0000 [ 408.536293][ T28] audit: type=1326 audit(1783747582.451:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14045 comm="syz.2.2978" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f739319de59 code=0x7ffc0000 [ 408.591084][ T28] audit: type=1326 audit(1783747582.451:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14045 comm="syz.2.2978" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739319de59 code=0x7ffc0000 [ 408.619328][ T28] audit: type=1326 audit(1783747582.451:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14045 comm="syz.2.2978" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739319de59 code=0x7ffc0000 [ 408.694368][T14053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2982'. [ 408.932404][T14061] lo speed is unknown, defaulting to 1000 [ 410.869926][T14144] lo speed is unknown, defaulting to 1000 [ 411.028071][T14150] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 411.028071][T14150] The task syz.3.3017 (14150) triggered the difference, watch for misbehavior. [ 412.001188][T14172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3027'. [ 412.218515][T14178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3030'. [ 412.256418][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3030'. [ 412.282248][T14178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3030'. [ 412.311839][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3030'. [ 412.460849][T14185] netlink: 'syz.4.3032': attribute type 4 has an invalid length. [ 412.604748][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3035'. [ 414.487539][T14261] fuse: Bad value for 'fd' [ 416.326819][ T28] kauditd_printk_skb: 1300 callbacks suppressed [ 416.326835][ T28] audit: type=1326 audit(1783747590.391:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14302 comm="syz.3.3080" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 416.400889][ T28] audit: type=1326 audit(1783747590.421:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14302 comm="syz.3.3080" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 416.452984][ T28] audit: type=1326 audit(1783747590.431:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14302 comm="syz.3.3080" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 416.534429][ T28] audit: type=1326 audit(1783747590.431:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14302 comm="syz.3.3080" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 416.580065][ T28] audit: type=1326 audit(1783747590.431:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14302 comm="syz.3.3080" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 416.610745][ T28] audit: type=1326 audit(1783747590.431:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14302 comm="syz.3.3080" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 416.640433][ T28] audit: type=1326 audit(1783747590.431:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14302 comm="syz.3.3080" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 416.695459][ T28] audit: type=1326 audit(1783747590.431:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14302 comm="syz.3.3080" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff6ad35e68e code=0x7ffc0000 [ 416.735650][ T28] audit: type=1326 audit(1783747590.431:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14302 comm="syz.3.3080" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff6ad35e68e code=0x7ffc0000 [ 416.762359][ T28] audit: type=1326 audit(1783747590.431:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14302 comm="syz.3.3080" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ad39de59 code=0x7ffc0000 [ 417.583050][T14343] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3096'. [ 417.796891][T14353] netlink: 'syz.3.3100': attribute type 1 has an invalid length. [ 417.804903][T14353] netlink: 'syz.3.3100': attribute type 22 has an invalid length. [ 417.930204][T14358] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3102'. [ 418.071523][T14366] overlayfs: failed to clone upperpath [ 419.542814][T14407] overlayfs: failed to clone upperpath [ 419.750510][T14415] io-wq is not configured for unbound workers [ 419.983566][T14425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3130'. [ 421.278910][ T5837] lo speed is unknown, defaulting to 1000 [ 421.767543][T14477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3151'. [ 422.730893][T14503] netlink: 'syz.4.3160': attribute type 1 has an invalid length. [ 422.774313][T14503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.820056][T14505] bond1: (slave ip6erspan0): making interface the new active one [ 422.854810][T14505] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 424.991476][T14548] netlink: 'syz.4.3178': attribute type 2 has an invalid length. [ 425.180622][T14552] "syz.4.3179" (14552) uses obsolete ecb(arc4) skcipher [ 425.377355][T14554] overlayfs: failed to clone upperpath [ 425.901290][T14567] netlink: 'syz.2.3185': attribute type 4 has an invalid length. [ 425.927364][T14567] netlink: 'syz.2.3185': attribute type 4 has an invalid length. [ 426.679501][T14592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3195'. [ 426.709094][T14592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3195'. [ 426.897573][T14603] overlayfs: failed to resolve './file0': -2 [ 426.918404][T14606] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3202'. [ 426.947952][T14606] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3202'. [ 427.845017][T14646] gretap0: entered promiscuous mode [ 429.615324][T14716] overlayfs: failed to clone upperpath [ 430.259742][T14736] overlayfs: failed to clone upperpath [ 432.073150][T14761] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 433.725212][T14771] netlink: 'syz.4.3269': attribute type 4 has an invalid length. [ 433.761677][T14771] netlink: 'syz.4.3269': attribute type 4 has an invalid length. [ 434.244808][T14788] netlink: 'syz.4.3276': attribute type 1 has an invalid length. [ 434.263655][T14788] netlink: 'syz.4.3276': attribute type 1 has an invalid length. [ 434.408618][T14792] geneve2: entered promiscuous mode [ 434.809195][T14804] tipc: Failed to remove unknown binding: 66,1,1/0:2022239289/2022239291 [ 434.825180][T14804] tipc: Failed to remove unknown binding: 66,1,1/0:2022239289/2022239291 [ 434.835601][T14806] overlayfs: failed to clone upperpath [ 435.524458][T14833] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3295'. [ 436.253736][T14854] overlayfs: failed to clone upperpath [ 436.812110][T14878] gretap0: entered promiscuous mode [ 437.609459][T14907] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3325'. [ 438.653065][T14929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3333'. [ 438.676963][T14929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3333'. [ 439.420629][T14958] batadv_slave_1: entered promiscuous mode [ 439.439015][T14957] batadv_slave_1: left promiscuous mode [ 439.534048][T14963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3346'. [ 440.292273][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.298828][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.544883][T15017] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1432098721/1432098723 [ 441.570662][T15017] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1432098721/1432098723 [ 442.838767][T15062] tipc: Failed to remove unknown binding: 66,1,1/0:172517064/172517066 [ 442.856765][T15062] tipc: Failed to remove unknown binding: 66,1,1/0:172517064/172517066 [ 443.865988][T15087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3401'. [ 445.086877][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 445.086894][ T28] audit: type=1326 audit(1783747619.141:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15105 comm="syz.0.3406" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfc19de59 code=0x7ffc0000 [ 445.162016][ T28] audit: type=1326 audit(1783747619.141:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15105 comm="syz.0.3406" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfc19de59 code=0x7ffc0000 [ 445.206503][ T28] audit: type=1326 audit(1783747619.141:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15105 comm="syz.0.3406" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcdfc19de59 code=0x7ffc0000 [ 445.231174][ T28] audit: type=1326 audit(1783747619.141:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15105 comm="syz.0.3406" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfc19de59 code=0x7ffc0000 [ 445.257279][ T28] audit: type=1326 audit(1783747619.141:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15105 comm="syz.0.3406" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fcdfc19de59 code=0x7ffc0000 [ 445.297460][ T28] audit: type=1326 audit(1783747619.151:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15105 comm="syz.0.3406" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfc19de59 code=0x7ffc0000 [ 445.339370][ T28] audit: type=1326 audit(1783747619.181:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15105 comm="syz.0.3406" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdfc15e68e code=0x7ffc0000 [ 445.366578][ T28] audit: type=1326 audit(1783747619.181:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15105 comm="syz.0.3406" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdfc15e68e code=0x7ffc0000 [ 445.393358][ T28] audit: type=1326 audit(1783747619.181:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15105 comm="syz.0.3406" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfc19de59 code=0x7ffc0000 [ 445.431417][ T28] audit: type=1326 audit(1783747619.181:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15105 comm="syz.0.3406" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfc19de59 code=0x7ffc0000 [ 445.707188][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3405'. [ 446.844809][T15158] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3417'. [ 446.867688][T15158] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3417'. [ 447.499009][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 447.751728][T15179] overlayfs: failed to clone upperpath [ 448.369236][T15200] overlayfs: failed to clone upperpath [ 448.445490][T15203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3438'. [ 448.458991][T15203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3438'. [ 448.651185][T15213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3443'. [ 449.736920][T15245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3456'. [ 450.494218][T15269] sock: sock_timestamping_bind_phc: sock not bind to device [ 452.416389][T15312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3484'. [ 452.767677][T15321] tipc: Enabling of bearer rejected, failed to enable media [ 452.921720][T15325] all: renamed from bridge_slave_1 (while UP) [ 452.957450][T15327] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3491'. [ 454.486876][T15373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3509'. [ 454.543393][T15373] veth1_macvtap: left promiscuous mode [ 454.831443][ T9537] kernel write not supported for file bpf-prog (pid: 9537 comm: kworker/0:6) [ 455.040518][T15389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3514'. [ 455.361069][T15404] batadv_slave_1: entered promiscuous mode [ 455.393972][T15403] batadv_slave_1: left promiscuous mode [ 455.867274][T15419] vlan1: entered allmulticast mode [ 455.872483][T15419] bond0: entered allmulticast mode [ 455.907429][T15419] geneve2: entered allmulticast mode [ 456.070518][T15426] overlayfs: failed to clone upperpath [ 456.349041][T15433] netlink: 'syz.3.3532': attribute type 12 has an invalid length. [ 456.380707][T15433] netlink: 'syz.3.3532': attribute type 29 has an invalid length. [ 456.410907][T15433] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3532'. [ 456.446089][T15433] netlink: 'syz.3.3532': attribute type 1 has an invalid length. [ 456.478514][T15433] netlink: 'syz.3.3532': attribute type 2 has an invalid length. [ 456.508811][T15433] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3532'. [ 456.534127][T15437] netlink: 'syz.3.3532': attribute type 12 has an invalid length. [ 456.573370][T15437] netlink: 'syz.3.3532': attribute type 29 has an invalid length. [ 456.596210][T15437] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3532'. [ 456.605403][T15437] netlink: 'syz.3.3532': attribute type 1 has an invalid length. [ 456.638525][T15437] netlink: 'syz.3.3532': attribute type 2 has an invalid length. [ 456.661805][T15437] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3532'. [ 456.888006][T15449] overlayfs: failed to clone upperpath [ 457.533843][T15472] overlayfs: failed to clone upperpath [ 457.544692][T15472] overlayfs: failed to clone upperpath [ 457.669601][T15476] gre3: entered promiscuous mode [ 458.280028][T15501] overlayfs: failed to clone upperpath [ 458.514898][T15515] Core dump to core aborted: cannot preserve file permissions [ 461.861587][T15587] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3590'. [ 462.775303][ T12] [ 462.777721][ T12] ============================================ [ 462.783901][ T12] WARNING: possible recursive locking detected [ 462.790098][ T12] syzkaller #0 Not tainted [ 462.794543][ T12] -------------------------------------------- [ 462.800722][ T12] kworker/u4:1/12 is trying to acquire lock: [ 462.806730][ T12] ffffe8ffffd318e8 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x624/0xa40 [ 462.816114][ T12] [ 462.816114][ T12] but task is already holding lock: [ 462.823510][ T12] ffffe8ffffc32000 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4bf/0xa40 [ 462.832796][ T12] [ 462.832796][ T12] other info that might help us debug this: [ 462.840892][ T12] Possible unsafe locking scenario: [ 462.840892][ T12] [ 462.848374][ T12] CPU0 [ 462.851680][ T12] ---- [ 462.854991][ T12] lock(&pd_list->lock); [ 462.859359][ T12] lock(&pd_list->lock); [ 462.863729][ T12] [ 462.863729][ T12] *** DEADLOCK *** [ 462.863729][ T12] [ 462.871905][ T12] May be due to missing lock nesting notation [ 462.871905][ T12] [ 462.880279][ T12] 3 locks held by kworker/u4:1/12: [ 462.885422][ T12] #0: ffff88801d658938 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 462.897589][ T12] #1: ffffc90000117d00 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 462.909491][ T12] #2: ffffe8ffffc32000 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4bf/0xa40 [ 462.919222][ T12] [ 462.919222][ T12] stack backtrace: [ 462.925147][ T12] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 462.932562][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 462.942659][ T12] Workqueue: pencrypt_parallel padata_parallel_worker [ 462.949492][ T12] Call Trace: [ 462.952805][ T12] [ 462.955769][ T12] dump_stack_lvl+0x18c/0x250 [ 462.960659][ T12] ? show_regs_print_info+0x20/0x20 [ 462.965918][ T12] ? print_deadlock_bug+0x435/0x5d0 [ 462.971191][ T12] __lock_acquire+0x6809/0x7d80 [ 462.976087][ T12] ? __lock_acquire+0x7d80/0x7d80 [ 462.981160][ T12] ? do_raw_spin_unlock+0x121/0x230 [ 462.986420][ T12] ? verify_lock_unused+0x140/0x140 [ 462.991665][ T12] ? mark_lock+0x94/0x320 [ 462.996044][ T12] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 463.002068][ T12] ? __lock_acquire+0x7d80/0x7d80 [ 463.007143][ T12] lock_acquire+0x19e/0x420 [ 463.011795][ T12] ? padata_do_serial+0x624/0xa40 [ 463.016877][ T12] ? lockdep_hardirqs_on+0x98/0x150 [ 463.022126][ T12] ? queue_work_on+0x19a/0x1f0 [ 463.026963][ T12] ? read_lock_is_recursive+0x20/0x20 [ 463.032382][ T12] ? __rwlock_init+0x150/0x150 [ 463.037214][ T12] ? generic_gcmaes_encrypt+0x289/0x3d0 [ 463.042849][ T12] _raw_spin_lock+0x2e/0x40 [ 463.047484][ T12] ? padata_do_serial+0x624/0xa40 [ 463.052556][ T12] padata_do_serial+0x624/0xa40 [ 463.057460][ T12] ? padata_parallel_worker+0x44/0x1c0 [ 463.063061][ T12] padata_parallel_worker+0x6f/0x1c0 [ 463.068398][ T12] ? process_scheduled_works+0x975/0x1600 [ 463.074177][ T12] process_scheduled_works+0xa60/0x1600 [ 463.079791][ T12] ? worker_attach_to_pool+0x370/0x370 [ 463.085313][ T12] ? assign_work+0x3cc/0x5d0 [ 463.090061][ T12] worker_thread+0xa5e/0xfe0 [ 463.094716][ T12] kthread+0x2fa/0x390 [ 463.098829][ T12] ? pr_cont_work+0x550/0x550 [ 463.103556][ T12] ? kthread_blkcg+0xd0/0xd0 [ 463.108204][ T12] ret_from_fork+0x48/0x80 [ 463.112663][ T12] ? kthread_blkcg+0xd0/0xd0 [ 463.117306][ T12] ret_from_fork_asm+0x11/0x20 [ 463.122170][ T12]