last executing test programs: 6m34.722200361s ago: executing program 2 (id=424): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0432"], 0xc) 6m33.837461379s ago: executing program 2 (id=426): r0 = socket$inet(0xa, 0x801, 0x84) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc8b93000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r4 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000080)=0x8) 6m32.743949453s ago: executing program 2 (id=428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x207, &(0x7f0000000c40)="$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") setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x130, 0xa, 0xd0e0000, 0x130, 0x100, 0x1c8, 0x1d8, 0x1d8, 0x1c8, 0x1d8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {}, 0x11}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x2}, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) pread64(0xffffffffffffffff, &(0x7f0000032400)=""/102357, 0x18fd5, 0x1c29) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES64, @ANYBLOB="f9ffffffffffff"], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@broadcast, @in6=@mcast1}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fffb59c00"/20, @ANYRES32=0x0, @ANYBLOB="63100400000000002800128008000100736974001c00028008000300e00000010600080005000000080002007f000001"], 0x48}, 0x1, 0x0, 0x0, 0x9000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 6m32.344942712s ago: executing program 2 (id=433): mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 6m31.567184358s ago: executing program 2 (id=439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) 6m29.920147503s ago: executing program 2 (id=443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r1, 0x109, 0x70bd2b, 0x25df9bfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8085}, 0x0) 6m29.318051586s ago: executing program 32 (id=443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r1, 0x109, 0x70bd2b, 0x25df9bfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8085}, 0x0) 9.40802999s ago: executing program 3 (id=2177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) 8.244024325s ago: executing program 0 (id=2193): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r4, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 8.131674347s ago: executing program 0 (id=2196): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008506ba50639c1973d8500b1c26a1", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) sendmsg$nl_route(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) sendmsg$NFT_BATCH(r0, 0x0, 0x84001) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c00000010001b6f00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 8.018752359s ago: executing program 0 (id=2199): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c", 0xca}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea", 0x73}, {&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9", 0xc6}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r3, 0x0, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x10000, 0x2, 0x8000000, 0x2000, &(0x7f0000001000/0x2000)=nil}) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.811949844s ago: executing program 0 (id=2201): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x8000026, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x30}}, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x4}}}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x9, 0x2) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x81}, 0xa) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) 7.612061748s ago: executing program 0 (id=2205): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') fsmount(0xffffffffffffffff, 0x0, 0x81) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8905, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6.243160967s ago: executing program 3 (id=2220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003f80)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}]}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20044841}, 0x802) 5.847924266s ago: executing program 3 (id=2224): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r4, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 5.501960083s ago: executing program 3 (id=2229): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) 5.218215019s ago: executing program 3 (id=2231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003f80)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}]}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20044841}, 0x802) 4.948025665s ago: executing program 3 (id=2233): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)="c1c03939be00006bd353d299b9dd90737d0471", &(0x7f0000001a40), 0x1000009, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000006c0)=""/145, &(0x7f0000000480), &(0x7f0000000780), 0x4, r0}, 0x38) 2.592005475s ago: executing program 4 (id=2247): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 1.955911939s ago: executing program 4 (id=2250): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, 0x0, 0x0) listen(r1, 0x9) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 1.792369132s ago: executing program 4 (id=2252): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r4, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 1.636123635s ago: executing program 4 (id=2254): r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000000080)={0x8, {"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", 0x102b}}, 0x2000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000003240)={'sit0\x00', {0x2, 0x4e21, @empty}}) socket$inet6(0xa, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x170bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0xb881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) sendto$packet(r1, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @local}, 0x14) 1.466831829s ago: executing program 4 (id=2255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) 1.190554445s ago: executing program 1 (id=2257): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x1000007fd) mount$fuse(0x0, 0x0, 0x0, 0x10, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x10, 0x11c20040, 0x0, 0x0, 0x1, 0x2001, 0x0, 0x0, 0x10, 0x2}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffffe, 0x3, {0x8000000000000, 0x0, 0x0, 0x94, 0x80002, 0xffff, {0xfffffffffffffffd, 0xf7fffffffffffffc, 0x0, 0x0, 0x80000000, 0xfffffffffffffffd, 0xfffffffb, 0x0, 0x0, 0x6000, 0xb, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1842, 0x136) 999.752219ms ago: executing program 1 (id=2258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003f80)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}]}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20044841}, 0x802) 834.691442ms ago: executing program 1 (id=2259): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, 0x0, 0x0) listen(r1, 0x9) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 389.109672ms ago: executing program 4 (id=2260): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r1, {0x10}, {0xa, 0x8}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0x880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 338.534893ms ago: executing program 1 (id=2261): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r4, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 259.641064ms ago: executing program 1 (id=2262): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x8, {"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", 0x102b}}, 0x2000) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000003240)={'sit0\x00', {0x2, 0x4e21, @empty}}) socket$inet6(0xa, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x170bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0xb881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @local}, 0x14) 162.681986ms ago: executing program 0 (id=2209): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) listen(0xffffffffffffffff, 0x5) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) mmap(&(0x7f0000835000/0x2000)=nil, 0x2000, 0x1000001, 0x2010, r0, 0x0) 0s ago: executing program 1 (id=2263): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000030000000000000000"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1}}}}, 0x0) kernel console output (not intermixed with test programs): 5608][ T6361] loop2: detected capacity change from 0 to 32768 [ 152.105175][ T6379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.105628][ T6361] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 152.352200][ T6396] EXT4-fs error (device loop0): __ext4_get_inode_loc:4496: comm syz.0.98: Invalid inode table block 5 in block_group 0 [ 152.836024][ T6397] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 152.845582][ T6397] overlayfs: missing 'lowerdir' [ 152.895416][ T6401] loop1: detected capacity change from 0 to 512 [ 152.950876][ T5088] Bluetooth: hci3: ACL packet for unknown connection handle 1211 [ 153.009338][ T6401] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 153.279177][ T6396] EXT4-fs (loop0): Remounting filesystem read-only [ 153.479500][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.939871][ T6361] XFS (loop2): Ending clean mount [ 154.117532][ T6361] XFS (loop2): Quotacheck needed: Please wait. [ 154.526271][ T6361] XFS (loop2): Quotacheck: Done. [ 154.758302][ T6401] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 154.776630][ T5777] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 154.969151][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.337521][ T6415] loop3: detected capacity change from 0 to 1024 [ 155.395180][ T6415] hfsplus: failed to load root directory [ 155.470609][ T6419] syz.2.102 uses obsolete (PF_INET,SOCK_PACKET) [ 156.070526][ T6423] loop1: detected capacity change from 0 to 4096 [ 156.212897][ T6424] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.339238][ T6426] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 156.694142][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 157.093418][ T6438] loop1: detected capacity change from 0 to 16 [ 157.109429][ T6438] erofs: (device loop1): mounted with root inode @ nid 36. [ 157.178288][ T6410] loop0: detected capacity change from 0 to 40427 [ 157.198215][ T6410] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (262145, 24) [ 157.207581][ T6410] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 157.218184][ T6410] F2FS-fs (loop0): invalid crc value [ 157.242225][ T6410] F2FS-fs (loop0): invalid crc value [ 157.247601][ T6410] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 158.808119][ T6443] loop1: detected capacity change from 0 to 32768 [ 158.851230][ T6443] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.115 (6443) [ 158.939553][ T6443] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 158.954563][ T6443] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 158.965689][ T6443] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 158.978267][ T6443] BTRFS info (device loop1): use zstd compression, level 3 [ 158.987736][ T6443] BTRFS info (device loop1): using free space tree [ 159.136596][ T6443] BTRFS info (device loop1): enabling ssd optimizations [ 159.150858][ T6443] BTRFS info (device loop1): auto enabling async discard [ 159.182817][ T28] audit: type=1326 audit(1782824807.118:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09839ce59 code=0x7ffc0000 [ 159.319617][ T28] audit: type=1326 audit(1782824807.138:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09839ce59 code=0x7ffc0000 [ 159.434159][ T28] audit: type=1326 audit(1782824807.138:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09839ce59 code=0x7ffc0000 [ 160.030624][ T28] audit: type=1326 audit(1782824807.138:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb09839ce59 code=0x7ffc0000 [ 160.220909][ T28] audit: type=1326 audit(1782824807.138:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09839ce59 code=0x7ffc0000 [ 160.336090][ T28] audit: type=1326 audit(1782824807.138:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09839ce59 code=0x7ffc0000 [ 160.467359][ T28] audit: type=1326 audit(1782824807.138:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09839ce59 code=0x7ffc0000 [ 160.595814][ T28] audit: type=1326 audit(1782824807.138:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09839ce59 code=0x7ffc0000 [ 160.706437][ T28] audit: type=1326 audit(1782824807.138:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09839ce59 code=0x7ffc0000 [ 160.795429][ T28] audit: type=1326 audit(1782824807.138:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fb09839ce59 code=0x7ffc0000 [ 161.257641][ T5781] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 161.394122][ T6483] loop2: detected capacity change from 0 to 32768 [ 161.467743][ T5906] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 161.792029][ T6488] loop0: detected capacity change from 0 to 1024 [ 161.851633][ T6488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.947370][ T6488] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 162.118856][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.198758][ T6505] loop3: detected capacity change from 0 to 8 [ 163.210341][ T6506] loop0: detected capacity change from 0 to 8 [ 163.294955][ T6505] unable to read inode lookup table [ 163.346378][ T6510] overlayfs: failed to resolve './file0': -2 [ 163.505004][ T6510] loop2: detected capacity change from 0 to 4096 [ 163.747592][ T6506] SQUASHFS error: xz decompression failed, data probably corrupt [ 163.760587][ T6506] SQUASHFS error: Failed to read block 0x108: -5 [ 163.767142][ T6506] SQUASHFS error: Unable to read metadata cache entry [106] [ 163.812338][ T6505] loop3: detected capacity change from 0 to 1024 [ 163.870945][ T6506] SQUASHFS error: Unable to read inode 0x11f [ 164.070981][ T6505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.149599][ T6510] EXT4-fs: Ignoring removed i_version option [ 164.155873][ T6510] EXT4-fs: Ignoring removed oldalloc option [ 164.171982][ T6510] EXT4-fs (loop2): Test dummy encryption mode enabled [ 164.183737][ T6510] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 164.267625][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.666492][ T6521] loop0: detected capacity change from 0 to 32768 [ 164.700853][ T6521] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.135 (6521) [ 164.737485][ T6521] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.747845][ T6521] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 164.756718][ T6521] BTRFS info (device loop0): turning on sync discard [ 164.763662][ T6521] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 164.773146][ T6521] BTRFS info (device loop0): use zstd compression, level 3 [ 164.780421][ T6521] BTRFS info (device loop0): turning on async discard [ 164.787610][ T6521] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 164.798330][ T6521] BTRFS info (device loop0): trying to use backup root at mount time [ 164.806626][ T6521] BTRFS info (device loop0): enabling auto defrag [ 164.813177][ T6521] BTRFS info (device loop0): using free space tree [ 165.331376][ T146] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 165.508401][ T6521] BTRFS error (device loop0): failed to load root extent [ 165.515636][ T6521] BTRFS warning (device loop0): try to load backup roots slot 1 [ 165.527596][ T146] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 165.620761][ T6521] BTRFS warning (device loop0): couldn't read tree root [ 165.627855][ T6521] BTRFS warning (device loop0): try to load backup roots slot 2 [ 165.637450][ T11] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 165.698033][ T6521] BTRFS warning (device loop0): couldn't read tree root [ 165.705173][ T6521] BTRFS warning (device loop0): try to load backup roots slot 3 [ 165.830917][ T6521] BTRFS info (device loop0): enabling ssd optimizations [ 165.839436][ T6521] BTRFS info (device loop0): rebuilding free space tree [ 165.874786][ T6521] BTRFS info (device loop0): checking UUID tree [ 167.112566][ T5785] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 167.262310][ T6519] loop1: detected capacity change from 0 to 32768 [ 167.301351][ T6519] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.133 (6519) [ 167.364397][ T5905] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (5905) [ 168.475483][ T6566] random: crng reseeded on system resumption [ 168.743528][ T6566] loop2: detected capacity change from 0 to 4096 [ 168.745535][ T6566] __ntfs_error: 75 callbacks suppressed [ 168.745549][ T6566] ntfs: (device loop2): parse_options(): The fmask option requires an argument. [ 169.357128][ T5910] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 172.477750][ T6592] binder: 6591:6592 ioctl c0306201 200000000080 returned -14 [ 172.500046][ T6592] binder: 6591:6592 ioctl c0306201 2000000003c0 returned -14 [ 172.702868][ T6602] loop3: detected capacity change from 0 to 1024 [ 172.711701][ T6602] EXT4-fs: Ignoring removed bh option [ 172.721299][ T6602] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 172.751380][ T6606] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 172.781638][ T6602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.905278][ T6602] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.157: Invalid inode table block 5 in block_group 0 [ 172.943882][ T6602] EXT4-fs (loop3): Remounting filesystem read-only [ 175.462645][ T6600] loop0: detected capacity change from 0 to 32768 [ 175.817263][ T6600] BTRFS error (device loop0): open_ctree failed: -4 [ 176.647855][ T6569] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (6569) [ 176.787080][ T6630] loop2: detected capacity change from 0 to 512 [ 176.856608][ T6630] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 176.884703][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.894047][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'. [ 176.921267][ T6630] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 176.951133][ T6636] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.960210][ T6636] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.969122][ T6636] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.977902][ T6636] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.990274][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'. [ 177.006451][ T6630] EXT4-fs (loop2): 1 truncate cleaned up [ 177.052170][ T6630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.164122][ T6640] loop3: detected capacity change from 0 to 512 [ 177.213215][ T6640] FAT-fs (loop3): Unrecognized mount option "shorgid=" or missing value [ 177.338986][ T6642] loop1: detected capacity change from 0 to 16 [ 177.381865][ T6642] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 177.473345][ T5906] udevd[5906]: incorrect cramfs checksum on /dev/loop1 [ 177.563551][ T6644] loop3: detected capacity change from 0 to 64 [ 177.752520][ T6644] overlayfs: upper fs needs to support d_type. [ 177.811093][ T6644] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 177.818208][ T6644] overlayfs: failed to set xattr on upper [ 177.824025][ T6644] overlayfs: ...falling back to redirect_dir=nofollow. [ 177.831065][ T6644] overlayfs: ...falling back to index=off. [ 177.836933][ T6644] overlayfs: ...falling back to uuid=null. [ 178.118955][ T5906] udevd[5906]: incorrect cramfs checksum on /dev/loop1 [ 178.234999][ T6634] loop0: detected capacity change from 0 to 32768 [ 178.252231][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.322286][ T6634] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.166 (6634) [ 178.677075][ T5906] udevd[5906]: incorrect cramfs checksum on /dev/loop1 [ 178.745905][ T6634] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 178.790825][ T6634] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 178.829991][ T6634] BTRFS info (device loop0): using free space tree [ 179.140927][ T6634] BTRFS info (device loop0): enabling ssd optimizations [ 179.197804][ T6634] BTRFS info (device loop0): auto enabling async discard [ 179.330280][ T5906] udevd[5906]: incorrect cramfs checksum on /dev/loop1 [ 179.351996][ T5789] Trying to free block not in datazone [ 179.396638][ T5789] Trying to free block not in datazone [ 179.524230][ T5785] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 180.066103][ T6682] netlink: 20 bytes leftover after parsing attributes in process `syz.3.177'. [ 180.165852][ T6682] nbd: socks must be embedded in a SOCK_ITEM attr [ 181.109077][ T27] IPVS: starting estimator thread 0... [ 181.359861][ T6691] IPVS: using max 24 ests per chain, 57600 per kthread [ 181.642291][ T6697] loop1: detected capacity change from 0 to 2048 [ 181.658245][ T6699] loop3: detected capacity change from 0 to 256 [ 181.732126][ T6697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.807503][ T6699] FAT-fs (loop3): Directory bread(block 64) failed [ 181.899252][ T6702] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 181.957493][ T6699] FAT-fs (loop3): Directory bread(block 65) failed [ 181.975838][ T6699] FAT-fs (loop3): Directory bread(block 66) failed [ 181.994916][ T6699] FAT-fs (loop3): Directory bread(block 67) failed [ 182.034447][ T6699] FAT-fs (loop3): Directory bread(block 68) failed [ 182.054070][ T6699] FAT-fs (loop3): Directory bread(block 69) failed [ 182.239855][ T6704] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 182.247373][ T6704] overlayfs: failed to verify upper root origin [ 182.258936][ T5088] Bluetooth: hci1: ACL packet for unknown connection handle 1211 [ 182.371977][ T6699] FAT-fs (loop3): Directory bread(block 70) failed [ 182.382205][ T6699] FAT-fs (loop3): Directory bread(block 71) failed [ 182.437094][ T6699] FAT-fs (loop3): Directory bread(block 72) failed [ 182.456471][ T6699] FAT-fs (loop3): Directory bread(block 73) failed [ 182.619780][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.632304][ T6695] mkiss: ax0: crc mode is auto. [ 182.737825][ T6709] loop1: detected capacity change from 0 to 16 [ 182.763111][ T6709] erofs: (device loop1): mounted with root inode @ nid 36. [ 182.788622][ T6709] syz.1.183: attempt to access beyond end of device [ 182.788622][ T6709] loop1: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 182.804499][ T6709] syz.1.183: attempt to access beyond end of device [ 182.804499][ T6709] loop1: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 184.270756][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 184.325833][ T6720] loop1: detected capacity change from 0 to 32768 [ 184.338054][ T6729] capability: warning: `syz.0.190' uses deprecated v2 capabilities in a way that may be insecure [ 184.348945][ T6720] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.186 (6720) [ 184.380626][ T6720] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 184.391874][ T6729] overlayfs: upper fs does not support file handles, falling back to index=off. [ 184.401472][ T6720] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 184.415412][ T6720] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 184.431033][ T23] usb 4-1: device descriptor read/64, error -71 [ 184.448040][ T6720] BTRFS info (device loop1): use zstd compression, level 3 [ 184.464158][ T6720] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 184.487760][ T6720] BTRFS info (device loop1): use lzo compression, level 0 [ 184.496374][ T6720] BTRFS info (device loop1): using free space tree [ 184.587769][ T6720] BTRFS info (device loop1): enabling ssd optimizations [ 184.599772][ T6743] loop0: detected capacity change from 0 to 2048 [ 184.610780][ T6720] BTRFS info (device loop1): auto enabling async discard [ 184.720794][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 184.721830][ T6743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.034038][ T23] usb 4-1: device descriptor read/64, error -71 [ 185.073493][ T5781] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 185.454293][ T6751] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 185.651182][ T23] usb usb4-port1: attempt power cycle [ 185.722173][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.735790][ T6569] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop1 scanned by udevd (6569) [ 186.084515][ T6762] loop0: detected capacity change from 0 to 512 [ 186.169439][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 186.248920][ T23] usb 4-1: device descriptor read/8, error -71 [ 186.520947][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 186.554746][ T23] usb 4-1: device descriptor read/8, error -71 [ 186.737924][ T23] usb usb4-port1: unable to enumerate USB device [ 187.153650][ T6768] loop0: detected capacity change from 0 to 4096 [ 187.198177][ T6769] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.540776][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 187.644166][ T6779] loop1: detected capacity change from 0 to 64 [ 187.900711][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 187.938159][ T23] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 187.947276][ T23] usb 4-1: config 251 has an invalid descriptor of length 255, skipping remainder of the config [ 188.609722][ T23] usb 4-1: config 251 has no interface number 0 [ 188.616522][ T23] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 188.626842][ T23] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 188.637159][ T23] usb 4-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 188.649206][ T23] usb 4-1: config 251 interface 202 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.664359][ T23] usb 4-1: config 251 interface 202 has no altsetting 0 [ 188.674972][ T23] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 188.684472][ T23] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 188.692984][ T23] usb 4-1: Product: syz [ 188.697178][ T23] usb 4-1: SerialNumber: syz [ 188.788823][ T6668] Set syz1 is full, maxelem 65536 reached [ 188.904093][ T6795] sit1: entered promiscuous mode [ 188.926971][ T6795] sit1: entered allmulticast mode [ 188.937832][ T23] cxacru 4-1:251.202: usbatm_usb_probe: bind failed: -19! [ 188.963914][ T23] usb 4-1: USB disconnect, device number 6 [ 189.225692][ T6802] loop2: detected capacity change from 0 to 764 [ 189.673033][ T6811] syzkaller0: entered promiscuous mode [ 189.686420][ T6811] syzkaller0: entered allmulticast mode [ 190.327709][ T6807] loop3: detected capacity change from 0 to 40427 [ 190.719204][ T6807] F2FS-fs (loop3): invalid crc value [ 190.998805][ T6807] F2FS-fs (loop3): Found nat_bits in checkpoint [ 191.067926][ T6807] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 191.234025][ T6827] loop1: detected capacity change from 0 to 1024 [ 191.347066][ T6817] loop0: detected capacity change from 0 to 32768 [ 191.384421][ T5789] syz-executor: attempt to access beyond end of device [ 191.384421][ T5789] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 191.401663][ T6817] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.214 (6817) [ 191.453679][ T3418] hfsplus: b-tree write err: -5, ino 3 [ 191.466096][ T5789] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 191.493228][ T6817] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.530868][ T6817] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 191.570045][ T6817] BTRFS info (device loop0): setting nodatacow, compression disabled [ 191.590600][ T6817] BTRFS info (device loop0): turning on flush-on-commit [ 191.597731][ T6817] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 191.623972][ T6817] BTRFS info (device loop0): use lzo compression, level 0 [ 191.648941][ T6817] BTRFS info (device loop0): setting nodatasum [ 191.671241][ T6817] BTRFS info (device loop0): use no compression [ 191.697899][ T6817] BTRFS info (device loop0): trying to use backup root at mount time [ 191.735601][ T6817] BTRFS info (device loop0): max_inline at 0 [ 191.741793][ T6817] BTRFS info (device loop0): using free space tree [ 191.825226][ T6829] loop1: detected capacity change from 0 to 4096 [ 191.899303][ T11] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 191.938581][ T6817] BTRFS warning (device loop0): couldn't read tree root [ 191.972376][ T6817] BTRFS warning (device loop0): try to load backup roots slot 1 [ 191.991297][ T6829] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 192.003494][ T3534] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 192.031629][ T6817] BTRFS warning (device loop0): couldn't read tree root [ 192.057263][ T6817] BTRFS warning (device loop0): try to load backup roots slot 2 [ 192.101836][ T3418] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 192.250925][ T6817] BTRFS warning (device loop0): couldn't read tree root [ 192.257923][ T6817] BTRFS warning (device loop0): try to load backup roots slot 3 [ 192.863365][ T6817] BTRFS info (device loop0): enabling ssd optimizations [ 192.870938][ T6817] BTRFS info (device loop0): auto enabling async discard [ 192.917596][ T6817] BTRFS info (device loop0): rebuilding free space tree [ 193.021762][ T6817] BTRFS info (device loop0): checking UUID tree [ 193.057894][ T6817] BTRFS warning (device loop0): failed to start uuid_rescan task [ 193.111093][ T6817] BTRFS warning (device loop0): failed to check the UUID tree: -4 [ 193.310270][ T6817] BTRFS error (device loop0): open_ctree failed: -4 [ 194.446856][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.453477][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.780968][ T6872] loop0: detected capacity change from 0 to 64 [ 195.273277][ T6874] netlink: 112 bytes leftover after parsing attributes in process `syz.2.225'. [ 195.930816][ T1982] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 196.120904][ T1982] usb 2-1: device descriptor read/64, error -71 [ 196.541612][ T1982] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 196.730774][ T1982] usb 2-1: device descriptor read/64, error -71 [ 196.753204][ T6884] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 196.760309][ T6884] binder: 6883:6884 ioctl 4018620d 200000000040 returned -1 [ 196.851471][ T1982] usb usb2-port1: attempt power cycle [ 197.561289][ T1982] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 197.601737][ T1982] usb 2-1: device descriptor read/8, error -71 [ 197.697995][ T6904] loop3: detected capacity change from 0 to 512 [ 197.762568][ T6904] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.236: inode has both inline data and extents flags [ 197.784538][ T6904] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.236: couldn't read orphan inode 15 (err -117) [ 197.800063][ T6904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.901066][ T1982] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 198.062340][ T6908] loop0: detected capacity change from 0 to 4096 [ 198.158236][ T6908] ntfs3: Unknown parameter 'noacsrules' [ 198.306549][ T6915] netlink: 28 bytes leftover after parsing attributes in process `syz.2.238'. [ 198.954088][ T1982] usb 2-1: device descriptor read/8, error -71 [ 199.080963][ T1982] usb usb2-port1: unable to enumerate USB device [ 199.122272][ T6569] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 199.133980][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.253885][ T6919] loop1: detected capacity change from 0 to 4096 [ 199.278285][ T6919] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 199.554876][ T6919] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 200.199720][ T6924] sctp: failed to load transform for md5: -2 [ 200.652133][ T6938] loop1: detected capacity change from 0 to 64 [ 200.710363][ T6938] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 206.490571][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 206.496765][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 206.502888][ T5088] Bluetooth: hci1: command 0x0406 tx timeout [ 206.807981][ T6947] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.817284][ T6947] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.826092][ T6947] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.834912][ T6947] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.916288][ T6947] team0: Port device vxlan0 added [ 206.935679][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.247'. [ 207.151955][ T6952] ipvlan2: entered allmulticast mode [ 207.239195][ T6952] syz_tun: entered allmulticast mode [ 208.282318][ T6974] loop3: detected capacity change from 0 to 2048 [ 208.349937][ T6974] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.299643][ T6983] loop2: detected capacity change from 0 to 32768 [ 210.317356][ T6983] XFS: ikeep mount option is deprecated. [ 210.336718][ T6983] XFS: noattr2 mount option is deprecated. [ 210.379832][ T6983] XFS (loop2): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems. [ 211.486899][ T6990] loop1: detected capacity change from 0 to 40427 [ 211.542801][ T6990] F2FS-fs (loop1): invalid crc value [ 211.554141][ T6990] F2FS-fs (loop1): Found nat_bits in checkpoint [ 212.029265][ T6990] F2FS-fs (loop1): Start checkpoint disabled! [ 212.635000][ T7013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.264'. [ 212.703245][ T7013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.819241][ T7013] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 213.027959][ T7021] loop1: detected capacity change from 0 to 4096 [ 213.079028][ T7021] EXT4-fs: inline encryption not supported [ 213.127877][ T7021] EXT4-fs: Ignoring removed i_version option [ 213.189070][ T7021] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 213.230604][ T7021] EXT4-fs (loop1): Test dummy encryption mode enabled [ 213.261748][ T7021] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c128, mo2=0003] [ 213.329225][ T7021] System zones: 0-5 [ 213.349263][ T7029] loop0: detected capacity change from 0 to 512 [ 213.382274][ T7029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.400855][ T7021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.504436][ T7029] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 213.593246][ T7029] EXT4-fs error (device loop0): ext4_readdir:223: inode #12: comm syz.0.268: path (unknown): directory fails checksum at offset 0 [ 213.757659][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.835831][ T7038] loop3: detected capacity change from 0 to 256 [ 214.076843][ T7021] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 214.194015][ T7044] loop0: detected capacity change from 0 to 4096 [ 214.349644][ T7044] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 214.377476][ T7044] ntfs3: loop0: Failed to load $Extend (-22). [ 214.425207][ T7044] ntfs3: loop0: Failed to initialize $Extend. [ 215.293940][ T7057] loop0: detected capacity change from 0 to 512 [ 215.338183][ T7057] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 215.391791][ T7057] EXT4-fs (loop0): 1 truncate cleaned up [ 215.472031][ T7057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.389892][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.584734][ T7065] loop3: detected capacity change from 0 to 128 [ 216.642439][ T7065] omfs: sysblock number (f784317bf884317b) is out of range [ 216.850953][ T7073] tipc: Started in network mode [ 216.862287][ T7073] tipc: Node identity ac1414aa, cluster identity 4711 [ 216.877691][ T7073] tipc: Enabled bearer , priority 10 [ 217.215696][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.368147][ T7071] loop3: detected capacity change from 0 to 32768 [ 217.407586][ T7071] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 217.520594][ T7075] loop2: detected capacity change from 0 to 32768 [ 217.546140][ T7075] (syz.2.282,7075,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 217.573099][ T7071] XFS (loop3): Ending clean mount [ 217.823466][ T5789] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 217.847002][ T7075] (syz.2.282,7075,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 218.042105][ T7091] loop1: detected capacity change from 0 to 512 [ 218.108869][ T5854] tipc: Node number set to 2886997162 [ 218.394736][ T7091] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 218.403563][ T7091] System zones: 1-12 [ 218.413035][ T7091] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.285: Directory hole found for htree index block 0 [ 218.431546][ T7091] EXT4-fs (loop1): Remounting filesystem read-only [ 218.438421][ T7091] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 218.446956][ T7091] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 218.456534][ T7091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.746039][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.749963][ T7075] JBD2: Ignoring recovery information on journal [ 218.874359][ T7075] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 218.990331][ T7106] loop1: detected capacity change from 0 to 8 [ 219.064363][ T7106] SQUASHFS error: xz decompression failed, data probably corrupt [ 219.100914][ T7106] SQUASHFS error: Failed to read block 0x108: -5 [ 219.125265][ T7106] SQUASHFS error: Unable to read metadata cache entry [106] [ 219.156857][ T7106] SQUASHFS error: Unable to read inode 0x11f [ 219.251500][ T7110] loop3: detected capacity change from 0 to 512 [ 219.640059][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 219.658773][ T7117] loop1: detected capacity change from 0 to 2048 [ 220.140161][ T7117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.027609][ T7031] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 221.050774][ T5790] Bluetooth: hci1: ACL packet for unknown connection handle 1211 [ 221.104125][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.591992][ T5790] Bluetooth: hci1: SCO packet for unknown connection handle 1414 [ 221.611925][ T7127] syz0: rxe_newlink: already configured on bond_slave_0 [ 221.774264][ T7133] loop3: detected capacity change from 0 to 256 [ 221.816071][ T1982] IPVS: starting estimator thread 0... [ 222.211609][ T7136] IPVS: using max 16 ests per chain, 38400 per kthread [ 222.240036][ T7133] FAT-fs (loop3): Directory bread(block 64) failed [ 222.358491][ T7133] FAT-fs (loop3): Directory bread(block 65) failed [ 222.563541][ T7133] FAT-fs (loop3): Directory bread(block 66) failed [ 222.570135][ T7133] FAT-fs (loop3): Directory bread(block 67) failed [ 222.576856][ T7133] FAT-fs (loop3): Directory bread(block 68) failed [ 222.583452][ T7133] FAT-fs (loop3): Directory bread(block 69) failed [ 222.590091][ T7133] FAT-fs (loop3): Directory bread(block 70) failed [ 222.607090][ T7133] FAT-fs (loop3): Directory bread(block 71) failed [ 222.647683][ T7133] FAT-fs (loop3): Directory bread(block 72) failed [ 222.671439][ T7133] FAT-fs (loop3): Directory bread(block 73) failed [ 222.925706][ T7144] loop1: detected capacity change from 0 to 2048 [ 223.017180][ T7145] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.054614][ T7155] loop1: detected capacity change from 0 to 128 [ 224.118087][ T7155] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 224.167924][ T7159] loop3: detected capacity change from 0 to 16 [ 224.186856][ T28] audit: type=1326 audit(1782824872.118:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.1.300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f004779ce59 code=0x0 [ 224.233712][ T7159] erofs: (device loop3): mounted with root inode @ nid 36. [ 224.333158][ T7160] FAT-fs (loop1): error, corrupted directory (invalid i_start) [ 224.370743][ T7160] FAT-fs (loop1): Filesystem has been set read-only [ 224.524635][ T7164] loop3: detected capacity change from 0 to 4096 [ 224.533827][ T7164] ntfs: (device loop3): parse_options(): Invalid uid option argument: 0x0000000000000000 [ 225.542300][ T5781] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 225.728724][ T7173] loop1: detected capacity change from 0 to 16 [ 225.791671][ T7173] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 225.840388][ T6954] udevd[6954]: incorrect cramfs checksum on /dev/loop1 [ 225.876619][ T6954] udevd[6954]: incorrect cramfs checksum on /dev/loop1 [ 226.340468][ T7185] loop1: detected capacity change from 0 to 64 [ 226.353530][ T7185] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 226.523876][ T6954] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 226.793635][ T7179] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.803205][ T7179] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.983810][ T7179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.828863][ T7179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.722149][ T7179] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.733783][ T7179] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.750708][ T7179] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.759616][ T7179] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.778716][ T7229] loop2: detected capacity change from 0 to 1764 [ 230.912193][ T7214] tipc: Enabling of bearer rejected, failed to enable media [ 231.460219][ T7200] libceph: connect (1)[c::]:6789 error -101 [ 231.553899][ T7200] libceph: mon0 (1)[c::]:6789 connect error [ 231.672066][ T7204] libceph: connect (1)[c::]:6789 error -101 [ 231.701611][ T7204] libceph: mon0 (1)[c::]:6789 connect error [ 231.961148][ T7237] ceph: No mds server is up or the cluster is laggy [ 231.982398][ T7204] libceph: connect (1)[c::]:6789 error -101 [ 232.000951][ T7204] libceph: mon0 (1)[c::]:6789 connect error [ 232.225779][ T7251] loop3: detected capacity change from 0 to 256 [ 232.324795][ T7239] loop2: detected capacity change from 0 to 32768 [ 232.414248][ T7239] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 232.454379][ T7239] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 232.479428][ T7256] loop3: detected capacity change from 0 to 512 [ 232.525690][ T7256] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.333: inode has both inline data and extents flags [ 232.557905][ T7256] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.333: couldn't read orphan inode 15 (err -117) [ 232.575236][ T7256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.678931][ T7239] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 232.715509][ T7204] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 232.744948][ T7204] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 233.542075][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.567309][ T7204] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 822ms [ 233.595336][ T7204] gfs2: fsid=syz:syz.0: jid=0: Done [ 233.603396][ T7239] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 233.877769][ T7266] PKCS7: Unknown OID: [4] 0.0 [ 233.882868][ T7266] PKCS7: Only support pkcs7_signedData type [ 234.053674][ T7239] gfs2: fsid=syz:syz.0: found 1 quota changes [ 234.074088][ T7239] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 234.074088][ T7239] inode = 0 2340 [ 234.074088][ T7239] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 417 [ 234.110778][ T7239] gfs2: fsid=syz:syz.0: G: s:SH n:2/924 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 234.120049][ T7239] gfs2: fsid=syz:syz.0: H: s:SH f:AH e:0 p:7239 [syz.2.328] inode_permission+0x23d/0x480 [ 234.143623][ T7239] gfs2: fsid=syz:syz.0: I: n:0/2340 t:4 f:0x00 d:0x00000000 s:0 p:0 [ 234.154951][ T7239] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 234.171321][ T7239] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 234.184687][ T7239] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 234.191910][ T7239] gfs2: fsid=syz:syz.0: File system withdrawn [ 234.198179][ T7239] CPU: 0 PID: 7239 Comm: syz.2.328 Not tainted syzkaller #0 [ 234.205487][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 234.215570][ T7239] Call Trace: [ 234.218862][ T7239] [ 234.221807][ T7239] dump_stack_lvl+0x18c/0x250 [ 234.226599][ T7239] ? show_regs_print_info+0x20/0x20 [ 234.231825][ T7239] ? load_image+0x420/0x420 [ 234.236356][ T7239] ? kobject_uevent_env+0x368/0x890 [ 234.241585][ T7239] gfs2_withdraw+0xe16/0x1400 [ 234.246302][ T7239] ? gfs2_lm+0x240/0x240 [ 234.250569][ T7239] ? preempt_schedule+0xc0/0xd0 [ 234.255446][ T7239] ? gfs2_consist_inode_i+0xf5/0x110 [ 234.260759][ T7239] gfs2_inode_refresh+0xb3c/0x11a0 [ 234.265896][ T7239] ? gfs2_inode_metasync+0xf0/0xf0 [ 234.271034][ T7239] ? gfs2_glock_nq+0xe2e/0x1440 [ 234.275905][ T7239] gfs2_instantiate+0x162/0x220 [ 234.280786][ T7239] gfs2_glock_wait+0x1d4/0x2a0 [ 234.285576][ T7239] gfs2_permission+0x254/0x450 [ 234.290356][ T7239] ? gfs2_lookupi+0x640/0x640 [ 234.295067][ T7239] ? inode_permission+0x23d/0x480 [ 234.300111][ T7239] ? do_raw_spin_unlock+0x121/0x230 [ 234.305336][ T7239] ? gfs2_lookupi+0x640/0x640 [ 234.310027][ T7239] inode_permission+0x23d/0x480 [ 234.314912][ T7239] may_open+0x2e9/0x440 [ 234.319093][ T7239] path_openat+0x26f5/0x3270 [ 234.323718][ T7239] ? do_sys_openat2+0xda/0x1d0 [ 234.328503][ T7239] ? __x64_sys_openat+0x139/0x160 [ 234.333546][ T7239] ? verify_lock_unused+0x140/0x140 [ 234.338762][ T7239] ? do_filp_open+0x430/0x430 [ 234.343488][ T7239] do_filp_open+0x1f2/0x430 [ 234.348011][ T7239] ? vfs_tmpfile+0x480/0x480 [ 234.352619][ T7239] ? _raw_spin_unlock+0x28/0x40 [ 234.357474][ T7239] ? alloc_fd+0x590/0x640 [ 234.361809][ T7239] do_sys_openat2+0x134/0x1d0 [ 234.366494][ T7239] ? do_sys_open+0xe0/0xe0 [ 234.370909][ T7239] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 234.376980][ T7239] ? lock_chain_count+0x20/0x20 [ 234.381829][ T7239] __x64_sys_openat+0x139/0x160 [ 234.386679][ T7239] do_syscall_64+0x55/0xb0 [ 234.391093][ T7239] ? clear_bhb_loop+0x40/0x90 [ 234.395764][ T7239] ? clear_bhb_loop+0x40/0x90 [ 234.400434][ T7239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.406340][ T7239] RIP: 0033:0x7f8b89d5d68e [ 234.410758][ T7239] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 234.430358][ T7239] RSP: 002b:00007f8b8ad1ada8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 234.438769][ T7239] RAX: ffffffffffffffda RBX: 00007f8b8ad1b6c0 RCX: 00007f8b89d5d68e [ 234.446757][ T7239] RDX: 0000000000010000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 234.454726][ T7239] RBP: 0000200000000040 R08: 0000000000000000 R09: 0000000000000000 [ 234.462695][ T7239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000240 [ 234.470661][ T7239] R13: 00007f8b8ad1aea0 R14: 00000000000125b6 R15: 0000200000000000 [ 234.478650][ T7239] [ 236.129180][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 236.398755][ T7317] loop2: detected capacity change from 0 to 16 [ 236.427257][ T7317] erofs: (device loop2): mounted with root inode @ nid 36. [ 238.238914][ T7331] loop3: detected capacity change from 0 to 4096 [ 238.309241][ T7331] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 238.407816][ T7331] ntfs3: loop3: Failed to load $Extend (-22). [ 238.475192][ T7331] ntfs3: loop3: Failed to initialize $Extend. [ 241.956046][ T7372] loop2: detected capacity change from 0 to 256 [ 241.982599][ T7372] exfat: Deprecated parameter 'utf8' [ 241.988064][ T7372] exfat: Deprecated parameter 'namecase' [ 242.105163][ T7372] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbb52f927, utbl_chksum : 0xe619d30d) [ 244.909619][ T7389] loop2: detected capacity change from 0 to 512 [ 244.948024][ T7389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.968012][ T7392] loop3: detected capacity change from 0 to 512 [ 245.049466][ T7389] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 245.125066][ T7392] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #15: comm syz.3.375: corrupted inode contents [ 245.240398][ T7389] EXT4-fs error (device loop2): ext4_validate_block_bitmap:421: comm syz.2.374: bg 0: bad block bitmap checksum [ 245.257578][ T7392] EXT4-fs (loop3): Remounting filesystem read-only [ 245.267913][ T7392] EXT4-fs (loop3): 1 orphan inode deleted [ 245.298889][ T7392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.313464][ T7389] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Filesystem failed CRC [ 247.053543][ T7402] overlayfs: failed to clone upperpath [ 247.566946][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.967792][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.279557][ T7408] loop2: detected capacity change from 0 to 1024 [ 248.526518][ T3418] hfsplus: b-tree write err: -5, ino 3 [ 248.536653][ T5777] hfsplus: node 4:3 still has 2 user(s)! [ 248.668817][ T7424] loop3: detected capacity change from 0 to 512 [ 248.720556][ T7424] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2805: inode #11: comm syz.3.387: corrupted xattr block 95: invalid header [ 248.755552][ T7424] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.387: bg 0: block 7: invalid block bitmap [ 248.805118][ T7424] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 248.833269][ T7424] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2971: inode #11: comm syz.3.387: corrupted xattr block 95: invalid header [ 249.010157][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'. [ 249.123739][ T7424] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 249.277434][ T7433] binder: 7430:7433 ioctl c0306201 200000000080 returned -14 [ 249.343482][ T7424] EXT4-fs (loop3): 1 orphan inode deleted [ 249.472958][ T7433] binder: 7430:7433 ioctl c0306201 2000000003c0 returned -14 [ 249.489570][ T7424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.637986][ T7437] bridge_slave_0: mtu greater than device maximum [ 249.665111][ T7437] syz.2.392: attempt to access beyond end of device [ 249.665111][ T7437] loop5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 249.690881][ T7437] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 249.718077][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.913770][ T7460] 9pnet_virtio: no channels available for device syz [ 255.450552][ T7503] netlink: 'syz.2.410': attribute type 1 has an invalid length. [ 255.596071][ T7503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.659434][ T7505] vlan2: entered allmulticast mode [ 255.668264][ T7505] bridge0: entered allmulticast mode [ 255.687553][ T7505] bond1: (slave vlan2): making interface the new active one [ 255.704669][ T7505] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 255.885005][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.970892][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.062494][ T5790] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 260.908918][ T7546] loop3: detected capacity change from 0 to 512 [ 261.028351][ T7546] EXT4-fs: Ignoring removed mblk_io_submit option [ 261.060921][ T7546] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 261.217497][ T7546] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 261.232501][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'. [ 261.242065][ T7546] System zones: 1-12 [ 261.381697][ T7546] EXT4-fs (loop3): 1 truncate cleaned up [ 261.390371][ T7546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.121877][ T7558] sctp: failed to load transform for md5: -2 [ 262.372799][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.452528][ T7572] loop2: detected capacity change from 0 to 16 [ 262.495046][ T7572] erofs: (device loop2): mounted with root inode @ nid 36. [ 262.604287][ T7572] IPv6: sit1: Disabled Multicast RS [ 262.805230][ T7583] netlink: 'syz.3.434': attribute type 10 has an invalid length. [ 262.828949][ T7583] syz_tun: entered promiscuous mode [ 262.854190][ T7583] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 262.867923][ T7584] loop2: detected capacity change from 0 to 4096 [ 262.904012][ T7584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 263.014846][ T7584] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 263.060023][ T7584] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 263.092517][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 263.115025][ T7584] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.433: Failed to acquire dquot type 1 [ 263.187524][ T7584] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 264.253678][ T7591] loop3: detected capacity change from 0 to 32768 [ 264.282398][ T7591] XFS (loop3): invalid logbufsize: 8 [not 16k,32k,64k,128k or 256k] [ 265.439990][ T3418] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.646110][ T3418] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.777430][ T3418] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.008276][ T3418] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.151755][ T7613] overlayfs: failed to resolve './file0': -2 [ 266.462239][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 266.473211][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 266.482734][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 266.503785][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 266.512241][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 266.519734][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 267.194808][ T7611] loop3: detected capacity change from 0 to 32768 [ 267.226577][ T3418] tipc: Disabling bearer [ 267.319251][ T7611] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.446 (7611) [ 267.345542][ T3418] tipc: Left network mode [ 268.267369][ T7611] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 268.310860][ T7611] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 268.351995][ T7611] BTRFS info (device loop3): turning off barriers [ 268.398587][ T7611] BTRFS info (device loop3): setting nodatasum [ 268.435904][ T7611] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 268.487240][ T7611] BTRFS info (device loop3): use zstd compression, level 3 [ 268.505361][ T7611] BTRFS info (device loop3): using free space tree [ 268.602150][ T5790] Bluetooth: hci0: command tx timeout [ 269.178236][ T5789] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 269.919392][ T7617] chnl_net:caif_netlink_parms(): no params data found [ 269.980494][ T7669] loop3: detected capacity change from 0 to 512 [ 270.001434][ T7669] EXT4-fs: Ignoring removed nobh option [ 270.105866][ T7669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.155512][ T7669] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 270.380529][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.680944][ T5790] Bluetooth: hci0: command tx timeout [ 271.574622][ T7617] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.622606][ T7617] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.665656][ T7617] bridge_slave_0: entered allmulticast mode [ 271.689125][ T7617] bridge_slave_0: entered promiscuous mode [ 271.741787][ T7617] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.779485][ T7617] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.852050][ T7617] bridge_slave_1: entered allmulticast mode [ 271.890954][ T7617] bridge_slave_1: entered promiscuous mode [ 272.274816][ T7617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.438511][ T7617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.591068][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.462'. [ 272.760807][ T5790] Bluetooth: hci0: command tx timeout [ 272.762754][ T7617] team0: Port device team_slave_0 added [ 272.850852][ T7617] team0: Port device team_slave_1 added [ 273.087016][ T3418] hsr_slave_0: left promiscuous mode [ 273.101654][ T3418] hsr_slave_1: left promiscuous mode [ 273.317340][ T3418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.330855][ T3418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.353203][ T3418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.474270][ T3418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.652255][ T3418] bridge_slave_1: left allmulticast mode [ 273.724590][ T3418] bridge_slave_1: left promiscuous mode [ 273.801660][ T3418] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.943430][ T3418] bridge_slave_0: left allmulticast mode [ 273.949133][ T3418] bridge_slave_0: left promiscuous mode [ 273.980722][ T3418] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.061435][ T3418] veth1_macvtap: left promiscuous mode [ 274.070968][ T3418] veth0_macvtap: left promiscuous mode [ 274.076634][ T3418] veth1_vlan: left promiscuous mode [ 274.094703][ T7721] loop3: detected capacity change from 0 to 32768 [ 274.101595][ T3418] veth0_vlan: left promiscuous mode [ 274.123493][ T7721] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 274.246965][ T7498] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 274.549534][ T3418] bond1 (unregistering): (slave vlan2): Releasing active interface [ 274.787756][ T7733] loop3: detected capacity change from 0 to 512 [ 274.807768][ T7733] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 274.845032][ T5790] Bluetooth: hci0: command tx timeout [ 275.389761][ T3418] bond1 (unregistering): Released all slaves [ 277.457711][ T3418] team0 (unregistering): Port device team_slave_1 removed [ 277.520621][ T3418] team0 (unregistering): Port device team_slave_0 removed [ 277.574222][ T3418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.639834][ T3418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.294562][ T3418] bond0 (unregistering): Released all slaves [ 280.736285][ T7617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.749617][ T7617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.788504][ T7617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.996903][ T7617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.050918][ T7617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.122259][ T7617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.579113][ T7617] hsr_slave_0: entered promiscuous mode [ 284.635898][ T7617] hsr_slave_1: entered promiscuous mode [ 284.796706][ T7617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.823160][ T7617] Cannot create hsr debugfs directory [ 286.299809][ T7617] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 286.384735][ T7617] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 286.450095][ T7617] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 286.507435][ T7617] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 287.525961][ T7617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.617912][ T7617] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.703786][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.711006][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.791569][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.798722][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.123832][ T7772] loop3: detected capacity change from 0 to 32768 [ 288.826105][ T7617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.853439][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.486'. [ 291.984124][ T7617] veth0_vlan: entered promiscuous mode [ 292.036913][ T7617] veth1_vlan: entered promiscuous mode [ 292.157697][ T7617] veth0_macvtap: entered promiscuous mode [ 292.210567][ T7617] veth1_macvtap: entered promiscuous mode [ 292.504850][ T7617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.616648][ T7617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.754234][ T7617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.786336][ T7617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.797840][ T7617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.813318][ T7617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.829406][ T7617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.845987][ T7617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.868187][ T7617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.963459][ T7617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.028665][ T7617] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.097896][ T7617] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.138405][ T7617] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.170938][ T7617] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.241194][ T7861] loop3: detected capacity change from 0 to 4096 [ 293.404701][ T7861] ntfs: volume version 3.1. [ 293.459811][ T3483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.498520][ T3483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.162646][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.198828][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.103189][ T5854] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 297.358614][ T5854] usb 4-1: device descriptor read/64, error -71 [ 297.657291][ T5854] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 300.106910][ T5854] usb 4-1: device descriptor read/64, error -71 [ 300.926947][ T5854] usb usb4-port1: attempt power cycle [ 301.105454][ T7922] loop3: detected capacity change from 0 to 128 [ 301.174007][ T7922] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 301.400992][ T7922] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 301.529928][ T7922] fscrypt (loop3, inode 12): Unsupported encryption flags (0x9e) [ 301.707079][ T5789] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 301.906482][ T7942] fuse: Bad value for 'fd' [ 306.134160][ T5790] Bluetooth: hci2: Malformed LE Event: 0x0b [ 309.416030][ T8000] loop4: detected capacity change from 0 to 256 [ 310.052356][ T8000] FAT-fs (loop4): Directory bread(block 64) failed [ 310.086366][ T8000] FAT-fs (loop4): Directory bread(block 65) failed [ 310.105335][ T8000] FAT-fs (loop4): Directory bread(block 66) failed [ 310.112586][ T8000] FAT-fs (loop4): Directory bread(block 67) failed [ 310.119534][ T8000] FAT-fs (loop4): Directory bread(block 68) failed [ 310.170989][ T8000] FAT-fs (loop4): Directory bread(block 69) failed [ 310.221903][ T8000] FAT-fs (loop4): Directory bread(block 70) failed [ 310.234714][ T8000] FAT-fs (loop4): Directory bread(block 71) failed [ 310.291070][ T8000] FAT-fs (loop4): Directory bread(block 72) failed [ 310.297654][ T8000] FAT-fs (loop4): Directory bread(block 73) failed [ 313.159098][ T8027] loop3: detected capacity change from 0 to 512 [ 313.210729][ T8027] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 313.219886][ T8027] System zones: 1-12 [ 313.235086][ T8027] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.535: Directory hole found for htree index block 0 [ 313.285529][ T8027] EXT4-fs (loop3): Remounting filesystem read-only [ 313.340902][ T8027] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 313.358820][ T8027] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 313.368423][ T8027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.313098][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.463442][ T8042] netlink: 52 bytes leftover after parsing attributes in process `syz.3.537'. [ 314.504907][ T5790] Bluetooth: hci0: Malformed LE Event: 0x0d [ 315.114624][ T8066] loop4: detected capacity change from 0 to 128 [ 316.882077][ T8094] IPVS: ip_vs_add_dest(): server weight less than zero [ 316.998096][ T8080] loop4: detected capacity change from 0 to 32768 [ 317.015199][ T8080] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.548 (8080) [ 317.165614][ T8080] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 317.274166][ T8080] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 317.325732][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.342251][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.478077][ T8080] BTRFS info (device loop4): enabling auto defrag [ 317.623568][ T8080] BTRFS info (device loop4): use no compression [ 317.763199][ T8080] BTRFS info (device loop4): force clearing of disk cache [ 317.841699][ T8080] BTRFS info (device loop4): max_inline at 4096 [ 317.880223][ T8080] BTRFS info (device loop4): disabling free space tree [ 318.864563][ T8080] BTRFS error (device loop4): open_ctree failed: -4 [ 319.218275][ T7794] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by udevd (7794) [ 319.490431][ T8120] loop3: detected capacity change from 0 to 32768 [ 319.601900][ T8120] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 319.690939][ T8120] XFS (loop3): Ending clean mount [ 319.831813][ T8120] XFS (loop3): Quotacheck needed: Please wait. [ 320.024439][ T8120] XFS (loop3): Quotacheck: Done. [ 320.078937][ T8166] overlayfs: failed to resolve './file0': -2 [ 320.197803][ T5789] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 320.335427][ T8170] netlink: 'syz.0.569': attribute type 29 has an invalid length. [ 320.367402][ T8155] loop4: detected capacity change from 0 to 32768 [ 320.374524][ T8170] netlink: 'syz.0.569': attribute type 29 has an invalid length. [ 320.393704][ T8171] netlink: 'syz.0.569': attribute type 29 has an invalid length. [ 320.417513][ T8155] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.566 (8155) [ 320.451694][ T8170] netlink: 'syz.0.569': attribute type 29 has an invalid length. [ 320.484402][ T8170] netlink: 'syz.0.569': attribute type 29 has an invalid length. [ 320.487008][ T8155] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 320.611240][ T8155] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 320.620343][ T8155] BTRFS info (device loop4): using free space tree [ 320.811499][ T8155] BTRFS info (device loop4): enabling ssd optimizations [ 320.834306][ T8155] BTRFS info (device loop4): auto enabling async discard [ 320.999300][ T7617] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 321.171879][ T7794] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (7794) [ 322.365632][ T8212] loop3: detected capacity change from 0 to 8192 [ 322.513292][ T8218] PKCS7: Unknown OID: [4] 0.0 [ 322.518025][ T8218] PKCS7: Only support pkcs7_signedData type [ 322.526093][ T8212] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 322.591770][ T8212] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 322.657948][ T8212] REISERFS (device loop3): using ordered data mode [ 322.671012][ T8223] loop4: detected capacity change from 0 to 16 [ 322.685565][ T8212] reiserfs: using flush barriers [ 322.691324][ T8223] erofs: (device loop4): mounted with root inode @ nid 36. [ 322.719851][ T8212] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 322.809196][ T8212] REISERFS (device loop3): checking transaction log (loop3) [ 322.915658][ T8212] REISERFS (device loop3): Using r5 hash to sort names [ 322.952746][ T8212] REISERFS (device loop3): using 3.5.x disk format [ 322.962602][ T8212] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 324.030494][ T8247] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 327.462160][ T8307] CUSE: unknown device info "€" [ 327.477562][ T8307] CUSE: zero length info key specified [ 327.964464][ T8307] loop4: detected capacity change from 0 to 32768 [ 327.999525][ T8307] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 328.123102][ T8307] XFS (loop4): Ending clean mount [ 328.151227][ T8307] XFS (loop4): Quotacheck needed: Please wait. [ 328.225289][ T8307] XFS (loop4): Quotacheck: Done. [ 328.630459][ T8353] XFS (loop4): User initiated shutdown received. [ 328.670200][ T8353] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 328.733226][ T8353] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 329.126251][ T8307] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 329.141474][ T8353] syz.4.611 (8353) used greatest stack depth: 17896 bytes left [ 333.595491][ T8568] netlink: 96 bytes leftover after parsing attributes in process `syz.3.691'. [ 333.676246][ T8568] netlink: 56 bytes leftover after parsing attributes in process `syz.3.691'. [ 336.829859][ T28] audit: type=1326 audit(1782824984.758:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.0.731" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb09839ce59 code=0x0 [ 343.479203][ T8821] netlink: 56 bytes leftover after parsing attributes in process `syz.1.771'. [ 344.338176][ T28] audit: type=1326 audit(1782824992.268:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8826 comm="syz.4.773" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f843c19ce59 code=0x0 [ 344.416628][ T8834] 9pnet_virtio: no channels available for device syz [ 345.145575][ T8836] 9pnet_virtio: no channels available for device syz [ 349.996616][ T8915] 9pnet_virtio: no channels available for device syz [ 350.300903][ T5854] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 350.511045][ T5854] usb 4-1: Using ep0 maxpacket: 32 [ 350.525703][ T5854] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 350.538911][ T5854] usb 4-1: config 0 has no interface number 0 [ 350.550338][ T5854] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 350.566344][ T5854] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 350.578606][ T5854] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 350.602563][ T5854] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 350.626330][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.634934][ T5854] usb 4-1: Product: syz [ 350.639241][ T5854] usb 4-1: Manufacturer: syz [ 350.644323][ T5854] usb 4-1: SerialNumber: syz [ 350.665637][ T5854] usb 4-1: config 0 descriptor?? [ 350.673663][ T8916] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 350.701400][ T5854] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input9 [ 350.980061][ T7206] usb 4-1: USB disconnect, device number 10 [ 351.288016][ T8927] orangefs_mount: mount request failed with -4 [ 352.029071][ T8945] 9pnet_virtio: no channels available for device syz [ 353.601030][ T8968] 9pnet_virtio: no channels available for device syz [ 353.645095][ T8968] overlayfs: failed to clone upperpath [ 354.644440][ T8999] 9pnet_virtio: no channels available for device syz [ 354.660814][ T9002] overlayfs: failed to clone upperpath [ 355.201032][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.849'. [ 355.271921][ T5790] Bluetooth: hci3: unexpected event for opcode 0x0405 [ 356.067528][ T9075] netlink: 'syz.4.869': attribute type 1 has an invalid length. [ 356.170010][ T9075] bond1: entered promiscuous mode [ 356.199057][ T9075] bond1: entered allmulticast mode [ 356.219704][ T9075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.243269][ T5790] Bluetooth: hci2: unexpected subevent 0x19 length: 24 < 28 [ 356.264277][ T9077] erspan1: entered allmulticast mode [ 356.278001][ T9077] bond1: (slave erspan1): making interface the new active one [ 356.285716][ T9077] erspan1: entered promiscuous mode [ 356.293435][ T9077] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 356.302849][ T7206] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 356.519079][ T7206] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 356.528796][ T7206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.539211][ T7206] usb 4-1: Product: syz [ 356.547244][ T7206] usb 4-1: Manufacturer: syz [ 356.558977][ T7206] usb 4-1: SerialNumber: syz [ 356.575444][ T7206] usb 4-1: config 0 descriptor?? [ 356.829519][ T7206] usb 4-1: USB disconnect, device number 11 [ 357.611268][ T5790] Bluetooth: hci3: Malformed LE Event: 0x0b [ 358.240896][ T5790] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 359.159822][ T9169] autofs4:pid:9169:autofs_fill_super: called with bogus options [ 359.379557][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.913'. [ 359.473838][ T5784] Bluetooth: hci2: adv larger than maximum supported [ 359.697039][ T9201] netlink: 16 bytes leftover after parsing attributes in process `syz.4.921'. [ 359.749879][ T9205] tipc: Enabling of bearer rejected, failed to enable media [ 360.398725][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'. [ 360.917078][ T5784] Bluetooth: hci1: Dropping invalid advertising data [ 360.926880][ T5784] Bluetooth: hci1: Malformed LE Event: 0x02 [ 361.161073][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 361.956376][ T5790] Bluetooth: hci2: unexpected event for opcode 0x0c0d [ 362.131373][ T9300] 9pnet_virtio: no channels available for device 127.0.0.1 [ 362.385373][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.965'. [ 363.647799][ T9337] 9pnet_virtio: no channels available for device syz [ 364.460791][ T5854] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 364.658210][ T5854] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 364.667440][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 364.675915][ T5854] usb 4-1: Product: syz [ 364.680092][ T5854] usb 4-1: Manufacturer: syz [ 364.685125][ T5854] usb 4-1: SerialNumber: syz [ 364.692369][ T5854] usb 4-1: config 0 descriptor?? [ 364.710902][ T5854] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 364.719246][ T5854] dvb-usb: bulk message failed: -22 (2/0) [ 364.738299][ T5854] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 364.748855][ T5854] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 364.758684][ T5854] usb 4-1: media controller created [ 364.785378][ T5854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 364.805827][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'. [ 364.924429][ T5854] cxusb: set interface failed [ 364.942880][ T5854] dvb-usb: bulk message failed: -22 (1/0) [ 365.007006][ T5854] DVB: Unable to find symbol mt352_attach() [ 365.021425][ T5854] dvb-usb: bulk message failed: -22 (5/0) [ 365.028624][ T5854] zl10353_read_register: readreg error (reg=127, ret==-121) [ 365.042547][ T5854] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 365.121342][ T5854] rc_core: IR keymap rc-dvico-mce not found [ 365.127295][ T5854] Registered IR keymap rc-empty [ 365.144580][ T5854] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 365.162156][ T5854] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input10 [ 365.176556][ T5854] dvb-usb: schedule remote query interval to 100 msecs. [ 365.190903][ T5854] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 365.210993][ T5854] usb 4-1: USB disconnect, device number 12 [ 365.324785][ T5854] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 365.336339][ T9387] netlink: 'syz.0.995': attribute type 1 has an invalid length. [ 365.894857][ T9430] ipvlan2: entered allmulticast mode [ 365.902085][ T9430] batadv0: entered allmulticast mode [ 365.909233][ T9430] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 366.194816][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1009'. [ 367.297331][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1021'. [ 367.341258][ T9475] 9pnet_virtio: no channels available for device syz [ 367.928926][ T5790] Bluetooth: hci3: unexpected subevent 0x03 length: 24 > 9 [ 368.001069][ T5790] Bluetooth: hci0: unexpected event for opcode 0x202d [ 368.140610][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1042'. [ 368.182388][ T9513] bridge_slave_1 (unregistering): left allmulticast mode [ 368.189489][ T9513] bridge_slave_1 (unregistering): left promiscuous mode [ 368.197025][ T9513] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.365366][ T9524] tipc: Enabling of bearer rejected, failed to enable media [ 368.460085][ T9528] xt_hashlimit: size too large, truncated to 1048576 [ 368.551857][ T9532] ¾x9ÿ: renamed from bridge_slave_0 [ 368.719666][ T9542] 9pnet_virtio: no channels available for device syz [ 368.991791][ T9550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1055'. [ 369.049979][ T9550] bond1: entered promiscuous mode [ 369.072445][ T9550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.216665][ T9550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.240300][ T9550] bond1: (slave sit2): The slave device specified does not support setting the MAC address [ 369.274863][ T9550] bond1: (slave sit2): Error -95 calling set_mac_address [ 369.700874][ T9563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.737302][ T9563] batadv_slave_0: entered promiscuous mode [ 370.320266][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1069'. [ 370.360142][ T9582] bond0: entered promiscuous mode [ 370.380366][ T9582] bond_slave_0: entered promiscuous mode [ 370.402852][ T9582] bond_slave_1: entered promiscuous mode [ 370.423023][ T9582] batadv_slave_0: entered promiscuous mode [ 371.350164][ T9613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.183414][ T9622] 9pnet_virtio: no channels available for device syz [ 372.570191][ T9632] overlayfs: failed to clone upperpath [ 378.983368][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.989723][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.674364][ T9661] input: syz1 as /devices/virtual/input/input11 [ 380.270727][ T27] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 380.312681][ T5784] Bluetooth: Wrong link type (-22) [ 380.471059][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 380.479901][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.491266][ T27] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 380.500266][ T27] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 380.509992][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.536153][ T27] usb 4-1: config 0 descriptor?? [ 380.576655][ T5784] Bluetooth: Frame is too long (len 12, expected len 4) [ 381.216682][ T9705] batadv_slave_0: entered promiscuous mode [ 381.226143][ T5784] Bluetooth: hci2: ACL packet for unknown connection handle 1211 [ 382.081493][ T5784] Bluetooth: Wrong link type (-22) [ 383.156660][ T7205] usb 4-1: USB disconnect, device number 13 [ 383.410979][ T5784] Bluetooth: Frame is too long (len 12, expected len 4) [ 384.537829][ T9729] loop3: detected capacity change from 0 to 4096 [ 384.686492][ T9730] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 386.016323][ T5784] Bluetooth: hci0: ACL packet for unknown connection handle 1211 [ 386.611205][ T9771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.642140][ T9771] batadv_slave_0: entered promiscuous mode [ 391.720713][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 391.965932][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 392.504157][ T28] audit: type=1326 audit(1782825040.438:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.1.1134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004779ce59 code=0x7ffc0000 [ 392.535027][ T28] audit: type=1326 audit(1782825040.438:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.1.1134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004779ce59 code=0x7ffc0000 [ 392.560630][ T28] audit: type=1326 audit(1782825040.438:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.1.1134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004779ce59 code=0x7ffc0000 [ 392.586951][ T28] audit: type=1326 audit(1782825040.438:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.1.1134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004779ce59 code=0x7ffc0000 [ 392.619822][ T28] audit: type=1326 audit(1782825040.438:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.1.1134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f004779ce59 code=0x7ffc0000 [ 392.818570][ T28] audit: type=1326 audit(1782825040.438:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.1.1134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004779ce59 code=0x7ffc0000 [ 393.090524][ T28] audit: type=1326 audit(1782825040.438:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.1.1134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004779ce59 code=0x7ffc0000 [ 393.114763][ T28] audit: type=1326 audit(1782825040.438:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.1.1134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004779ce59 code=0x7ffc0000 [ 393.190219][ T28] audit: type=1326 audit(1782825040.438:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.1.1134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f004779ce59 code=0x7ffc0000 [ 393.240457][ T28] audit: type=1326 audit(1782825040.438:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.1.1134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004779ce59 code=0x7ffc0000 [ 401.629301][ T7204] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 407.380919][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 407.380999][ T28] audit: type=1326 audit(1782825055.318:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.4.1154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843c19ce59 code=0x7ffc0000 [ 407.416296][ T28] audit: type=1326 audit(1782825055.318:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.4.1154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843c19ce59 code=0x7ffc0000 [ 407.442225][ T28] audit: type=1326 audit(1782825055.318:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.4.1154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843c19ce59 code=0x7ffc0000 [ 407.466671][ T28] audit: type=1326 audit(1782825055.308:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.4.1154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843c19ce59 code=0x7ffc0000 [ 407.490439][ T9853] loop3: detected capacity change from 0 to 32768 [ 407.491437][ T28] audit: type=1326 audit(1782825055.318:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.4.1154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f843c19ce59 code=0x7ffc0000 [ 407.500082][ T9853] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 407.536385][ T28] audit: type=1326 audit(1782825055.318:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.4.1154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843c19ce59 code=0x7ffc0000 [ 407.587154][ T28] audit: type=1326 audit(1782825055.318:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.4.1154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843c19ce59 code=0x7ffc0000 [ 407.598329][ T9820] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 407.611831][ T28] audit: type=1326 audit(1782825055.318:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.4.1154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843c19ce59 code=0x7ffc0000 [ 407.650841][ T28] audit: type=1326 audit(1782825055.318:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.4.1154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843c19ce59 code=0x7ffc0000 [ 407.695822][ T28] audit: type=1326 audit(1782825055.318:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9851 comm="syz.4.1154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f843c19ce59 code=0x7ffc0000 [ 410.383231][ T5790] Bluetooth: Wrong link type (-22) [ 410.389421][ T5790] Bluetooth: hci1: link tx timeout [ 410.396569][ T5790] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 411.285340][ T9873] loop3: detected capacity change from 0 to 32768 [ 411.293950][ T9873] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1160 (9873) [ 411.333796][ T9873] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 411.344275][ T9873] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 411.353253][ T9873] BTRFS info (device loop3): turning on sync discard [ 411.360017][ T9873] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 411.369449][ T9873] BTRFS info (device loop3): use zstd compression, level 3 [ 411.376768][ T9873] BTRFS info (device loop3): turning on async discard [ 411.383599][ T9873] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 411.394513][ T9873] BTRFS info (device loop3): trying to use backup root at mount time [ 411.402969][ T9873] BTRFS info (device loop3): enabling auto defrag [ 411.409439][ T9873] BTRFS info (device loop3): using free space tree [ 411.474172][ T5790] Bluetooth: Frame is too long (len 12, expected len 4) [ 411.698443][ T42] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 411.872770][ T9873] BTRFS error (device loop3): failed to load root extent [ 411.879888][ T9873] BTRFS warning (device loop3): try to load backup roots slot 1 [ 411.890592][ T13] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 412.109244][ T9873] BTRFS warning (device loop3): couldn't read tree root [ 412.116302][ T9873] BTRFS warning (device loop3): try to load backup roots slot 2 [ 412.171202][ T9419] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 412.338210][ T9873] BTRFS warning (device loop3): couldn't read tree root [ 412.345366][ T9873] BTRFS warning (device loop3): try to load backup roots slot 3 [ 412.458697][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 412.480093][ T9873] BTRFS info (device loop3): enabling ssd optimizations [ 412.489816][ T9873] BTRFS info (device loop3): rebuilding free space tree [ 413.755954][ T9873] BTRFS info (device loop3): checking UUID tree [ 414.251281][ T5789] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 416.872604][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 416.872617][ T28] audit: type=1326 audit(1782825064.808:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.3.1166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f9d9ce59 code=0x7ffc0000 [ 416.950740][ T28] audit: type=1326 audit(1782825064.808:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.3.1166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f9d9ce59 code=0x7ffc0000 [ 416.986512][ T28] audit: type=1326 audit(1782825064.808:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.3.1166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f9d9ce59 code=0x7ffc0000 [ 417.011241][ T28] audit: type=1326 audit(1782825064.808:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.3.1166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f9d9ce59 code=0x7ffc0000 [ 417.037529][ T28] audit: type=1326 audit(1782825064.838:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.3.1166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f9d9ce59 code=0x7ffc0000 [ 417.062712][ T28] audit: type=1326 audit(1782825064.838:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.3.1166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2f9d9ce59 code=0x7ffc0000 [ 417.088161][ T28] audit: type=1326 audit(1782825064.838:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.3.1166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f9d9ce59 code=0x7ffc0000 [ 417.112672][ T28] audit: type=1326 audit(1782825064.838:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.3.1166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f9d9ce59 code=0x7ffc0000 [ 417.138150][ T28] audit: type=1326 audit(1782825064.838:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.3.1166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f9d9ce59 code=0x7ffc0000 [ 417.171044][ T28] audit: type=1326 audit(1782825064.848:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.3.1166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fc2f9d9ce59 code=0x7ffc0000 [ 421.052178][ T5784] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 421.717799][ T5784] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 423.733917][ T5784] Bluetooth: hci2: ACL packet for unknown connection handle 1211 [ 424.990780][ T23] IPVS: starting estimator thread 0... [ 425.105687][ T9981] IPVS: using max 19 ests per chain, 45600 per kthread [ 429.143732][T10009] IPVS: sh: FWM 3 0x00000003 - no destination available [ 429.151020][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 429.160275][T10009] IPVS: sh: FWM 3 0x00000003 - no destination available [ 429.167418][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 429.837821][T10015] overlayfs: upper fs does not support file handles, falling back to index=off. [ 431.236506][T10025] loop3: detected capacity change from 0 to 2048 [ 431.393087][T10025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.843797][T10030] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 431.869491][T10030] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 431.885117][T10030] overlayfs: failed to verify upper root origin [ 432.111069][ T5784] Bluetooth: hci3: ACL packet for unknown connection handle 1211 [ 432.592006][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.994803][T10044] loop3: detected capacity change from 0 to 16 [ 433.005900][T10044] erofs: (device loop3): mounted with root inode @ nid 36. [ 433.857753][T10044] syz.3.1207: attempt to access beyond end of device [ 433.857753][T10044] loop3: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 433.942097][T10044] syz.3.1207: attempt to access beyond end of device [ 433.942097][T10044] loop3: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 435.363262][ T27] IPVS: starting estimator thread 0... [ 435.467520][T10057] IPVS: using max 17 ests per chain, 40800 per kthread [ 435.902939][T10063] overlayfs: failed to clone upperpath [ 436.127188][T10062] mkiss: ax0: crc mode is auto. [ 436.753262][ T5790] Bluetooth: hci0: ACL packet for unknown connection handle 1211 [ 437.622341][T10079] loop3: detected capacity change from 0 to 32768 [ 437.634936][T10079] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 438.347612][T10070] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 438.611014][T10096] loop3: detected capacity change from 0 to 2048 [ 438.738063][T10096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.269567][T10107] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 439.287176][T10107] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 439.294359][T10107] overlayfs: failed to verify upper root origin [ 439.939954][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 1211 [ 439.953508][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.197529][T10112] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 440.215479][T10112] binder: 10111:10112 ioctl 4018620d 200000000040 returned -1 [ 440.221142][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.223781][T10116] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1236'. [ 440.229921][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.553827][T10119] overlayfs: failed to clone upperpath [ 440.598552][T10124] syzkaller0: entered promiscuous mode [ 440.610941][T10124] syzkaller0: entered allmulticast mode [ 440.986949][T10130] loop3: detected capacity change from 0 to 512 [ 442.678100][T10146] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1242'. [ 442.855998][T10148] loop3: detected capacity change from 0 to 64 [ 444.707805][T10159] overlayfs: failed to clone upperpath [ 445.713704][T10164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1247'. [ 446.218758][T10180] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1252'. [ 449.202575][T10209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1258'. [ 449.213147][T10209] syz_tun: Device is already in use. [ 449.334709][T10212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1265'. [ 452.384725][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 453.600382][T10253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1270'. [ 453.621326][T10253] ipvlan2: entered allmulticast mode [ 453.626664][T10253] syz_tun: entered allmulticast mode [ 454.625963][T10264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1273'. [ 455.023933][ T5790] Bluetooth: Frame is too long (len 12, expected len 4) [ 455.766710][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 457.254979][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1286'. [ 457.956772][T10310] ipvlan2: entered allmulticast mode [ 457.970014][T10310] syz_tun: entered allmulticast mode [ 459.383984][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 460.271310][T10346] loop3: detected capacity change from 0 to 4096 [ 461.085066][T10346] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 461.170552][T10346] ntfs3: loop3: Failed to load $Extend (-22). [ 461.185613][T10346] ntfs3: loop3: Failed to initialize $Extend. [ 465.381050][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 465.381067][ T28] audit: type=1326 audit(1782825113.308:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10381 comm="syz.0.1316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb09839ce59 code=0x0 [ 465.874324][T10388] fuse: Bad value for 'fd' [ 469.404764][ T5790] Bluetooth: hci0: ACL packet for unknown connection handle 1211 [ 472.544874][ T28] audit: type=1326 audit(1782825120.468:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10446 comm="syz.3.1324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2f9d9ce59 code=0x0 [ 474.941399][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 1211 [ 478.142238][ T28] audit: type=1326 audit(1782825126.078:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.4.1340" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f843c19ce59 code=0x0 [ 479.506645][ T5790] Bluetooth: Wrong link type (-22) [ 481.389788][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 483.521166][ T5790] Bluetooth: Wrong link type (-22) [ 485.324254][ T5790] Bluetooth: Wrong link type (-22) [ 488.117371][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 489.272934][T10636] overlayfs: failed to clone upperpath [ 490.101472][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1398'. [ 493.213793][T10676] overlayfs: failed to clone upperpath [ 494.306752][T10681] bridge_slave_0: mtu greater than device maximum [ 494.324517][T10681] syz.4.1402: attempt to access beyond end of device [ 494.324517][T10681] loop9: rw=0, sector=64, nr_sectors = 2 limit=0 [ 494.370863][T10681] isofs_fill_super: bread failed, dev=loop9, iso_blknum=16, block=32 [ 495.339701][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1404'. [ 497.251749][T10719] bridge_slave_0: mtu greater than device maximum [ 497.292089][T10719] syz.0.1416: attempt to access beyond end of device [ 497.292089][T10719] loop1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 497.313453][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 497.450307][T10719] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 497.670421][T10731] overlayfs: failed to clone upperpath [ 502.320333][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.348721][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.938157][T10764] netlink: 'syz.3.1424': attribute type 1 has an invalid length. [ 505.032404][T10764] 8021q: adding VLAN 0 to HW filter on device bond2 [ 505.226740][T10764] vlan2: entered allmulticast mode [ 505.232115][T10764] bridge0: entered allmulticast mode [ 505.238969][T10764] bond2: (slave vlan2): Opening slave failed [ 505.483244][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1426'. [ 506.101601][T10788] overlayfs: failed to resolve './file0': -2 [ 509.144444][T10817] IPv6: sit1: Disabled Multicast RS [ 510.251086][T10830] netlink: 'syz.1.1447': attribute type 1 has an invalid length. [ 510.360326][T10830] 8021q: adding VLAN 0 to HW filter on device bond2 [ 510.391985][T10832] vlan2: entered allmulticast mode [ 510.397155][T10832] bridge0: entered allmulticast mode [ 510.513709][T10832] bond2: (slave vlan2): making interface the new active one [ 510.817823][T10832] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 516.110347][T10874] bridge_slave_0: mtu greater than device maximum [ 516.121764][T10874] syz.0.1466: attempt to access beyond end of device [ 516.121764][T10874] loop1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 516.138811][T10874] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 517.636918][T10893] netlink: 'syz.0.1464': attribute type 1 has an invalid length. [ 517.744114][T10893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 518.504391][T10896] vlan2: entered allmulticast mode [ 518.509562][T10896] bridge0: entered allmulticast mode [ 518.568980][T10896] bond1: (slave vlan2): making interface the new active one [ 519.034414][T10896] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 519.329922][T10913] IPv6: sit1: Disabled Multicast RS [ 519.512671][T10921] syz.3.1472: attempt to access beyond end of device [ 519.512671][T10921] loop7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 519.535906][T10921] isofs_fill_super: bread failed, dev=loop7, iso_blknum=16, block=32 [ 524.032923][T10953] syz.3.1482: attempt to access beyond end of device [ 524.032923][T10953] loop7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 524.057769][T10953] isofs_fill_super: bread failed, dev=loop7, iso_blknum=16, block=32 [ 524.441816][T10958] netlink: 'syz.4.1483': attribute type 1 has an invalid length. [ 524.482334][T10958] 8021q: adding VLAN 0 to HW filter on device bond2 [ 524.539057][T10958] vlan2: entered allmulticast mode [ 524.544536][T10958] bridge0: entered allmulticast mode [ 524.554042][T10958] bond2: (slave vlan2): making interface the new active one [ 524.572208][T10958] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 524.594738][T10964] bridge_slave_0: mtu greater than device maximum [ 524.690187][T10964] syz.0.1492: attempt to access beyond end of device [ 524.690187][T10964] loop1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 524.703812][T10964] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 526.072870][T10980] IPv6: sit1: Disabled Multicast RS [ 534.150897][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1495'. [ 535.306555][T11018] syz.4.1502: attempt to access beyond end of device [ 535.306555][T11018] loop9: rw=0, sector=64, nr_sectors = 2 limit=0 [ 535.355245][T11018] isofs_fill_super: bread failed, dev=loop9, iso_blknum=16, block=32 [ 541.727292][T11056] overlayfs: failed to clone upperpath [ 541.836316][T11058] syz.3.1515: attempt to access beyond end of device [ 541.836316][T11058] loop7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 541.853781][T11058] isofs_fill_super: bread failed, dev=loop7, iso_blknum=16, block=32 [ 542.710240][T11068] netlink: 'syz.0.1518': attribute type 1 has an invalid length. [ 542.746095][T11068] 8021q: adding VLAN 0 to HW filter on device bond2 [ 544.660929][T11079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1521'. [ 547.077862][T11099] syz.1.1526: attempt to access beyond end of device [ 547.077862][T11099] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 547.095718][T11099] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 548.259069][T11104] netlink: 'syz.4.1527': attribute type 1 has an invalid length. [ 548.705138][T11104] 8021q: adding VLAN 0 to HW filter on device bond3 [ 553.475385][T11136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1534'. [ 554.747541][T11144] syz.3.1540: attempt to access beyond end of device [ 554.747541][T11144] loop7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 554.775498][T11144] isofs_fill_super: bread failed, dev=loop7, iso_blknum=16, block=32 [ 555.596444][T11157] netlink: 'syz.1.1544': attribute type 1 has an invalid length. [ 556.513656][T11157] 8021q: adding VLAN 0 to HW filter on device bond3 [ 559.394650][T11181] overlayfs: failed to clone upperpath [ 559.460401][T11185] syz.3.1553: attempt to access beyond end of device [ 559.460401][T11185] loop7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 559.530882][T11185] isofs_fill_super: bread failed, dev=loop7, iso_blknum=16, block=32 [ 560.864411][T11197] netlink: 'syz.3.1558': attribute type 1 has an invalid length. [ 560.935043][T11197] 8021q: adding VLAN 0 to HW filter on device bond3 [ 561.853185][T11213] syz.3.1565: attempt to access beyond end of device [ 561.853185][T11213] loop7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 561.866292][T11213] isofs_fill_super: bread failed, dev=loop7, iso_blknum=16, block=32 [ 561.912466][T11216] overlayfs: failed to clone upperpath [ 563.089001][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.095691][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.559026][T11233] netlink: 'syz.4.1569': attribute type 1 has an invalid length. [ 563.608649][T11233] 8021q: adding VLAN 0 to HW filter on device bond4 [ 563.760520][T11239] netlink: 'syz.1.1581': attribute type 1 has an invalid length. [ 563.796320][T11239] 8021q: adding VLAN 0 to HW filter on device bond4 [ 565.003977][T11254] syz.1.1575: attempt to access beyond end of device [ 565.003977][T11254] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 565.017154][T11254] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 572.121855][T11285] netlink: 'syz.4.1585': attribute type 1 has an invalid length. [ 572.190959][T11285] 8021q: adding VLAN 0 to HW filter on device bond5 [ 573.970226][T11306] syz.3.1590: attempt to access beyond end of device [ 573.970226][T11306] loop7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 574.009436][T11306] isofs_fill_super: bread failed, dev=loop7, iso_blknum=16, block=32 [ 575.607252][T11323] netlink: 'syz.3.1597': attribute type 1 has an invalid length. [ 575.657101][T11323] 8021q: adding VLAN 0 to HW filter on device bond4 [ 575.992068][T11323] vlan2: entered allmulticast mode [ 577.637784][T11342] netlink: 'syz.3.1608': attribute type 1 has an invalid length. [ 577.919951][T11342] 8021q: adding VLAN 0 to HW filter on device bond5 [ 577.932912][T11348] vlan2: entered allmulticast mode [ 579.051754][T11358] syz.4.1604: attempt to access beyond end of device [ 579.051754][T11358] loop9: rw=0, sector=64, nr_sectors = 2 limit=0 [ 579.085423][T11358] isofs_fill_super: bread failed, dev=loop9, iso_blknum=16, block=32 [ 581.301794][T11379] netlink: 'syz.4.1613': attribute type 1 has an invalid length. [ 581.397977][T11379] 8021q: adding VLAN 0 to HW filter on device bond6 [ 582.345511][T11396] netlink: 'syz.0.1623': attribute type 1 has an invalid length. [ 582.391133][T11396] 8021q: adding VLAN 0 to HW filter on device bond3 [ 586.901940][T11448] netlink: 'syz.1.1627': attribute type 1 has an invalid length. [ 586.951547][T11448] 8021q: adding VLAN 0 to HW filter on device bond5 [ 587.657238][ T5790] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 588.902051][T11478] netlink: 'syz.1.1641': attribute type 1 has an invalid length. [ 588.984379][T11478] 8021q: adding VLAN 0 to HW filter on device bond6 [ 590.510891][T11517] netlink: 'syz.1.1654': attribute type 1 has an invalid length. [ 590.616642][T11517] 8021q: adding VLAN 0 to HW filter on device bond7 [ 591.905697][T11550] tipc: Enabling of bearer rejected, failed to enable media [ 591.980333][T11552] netlink: 'syz.0.1669': attribute type 1 has an invalid length. [ 592.062026][T11552] 8021q: adding VLAN 0 to HW filter on device bond4 [ 593.239418][T11584] netlink: 'syz.3.1681': attribute type 1 has an invalid length. [ 593.273515][T11584] 8021q: adding VLAN 0 to HW filter on device bond6 [ 593.305647][T11584] vlan2: entered allmulticast mode [ 593.319548][T11584] bond6: (slave vlan2): Opening slave failed [ 594.687734][T11622] netlink: 'syz.4.1695': attribute type 1 has an invalid length. [ 594.764578][T11622] 8021q: adding VLAN 0 to HW filter on device bond7 [ 594.897873][ T5790] Bluetooth: Wrong link type (-22) [ 596.318114][T11650] netlink: 'syz.1.1704': attribute type 1 has an invalid length. [ 596.356280][ T5790] Bluetooth: Wrong link type (-22) [ 596.369832][ T5790] Bluetooth: hci2: link tx timeout [ 596.377515][ T5790] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 596.383093][T11650] 8021q: adding VLAN 0 to HW filter on device bond8 [ 598.088823][T11709] vlan2: entered allmulticast mode [ 598.485992][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 600.567189][T11660] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 600.655285][T11660] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 601.988135][T11660] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 602.093530][T11660] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 602.865695][T11660] Bluetooth: Wrong link type (-22) [ 603.462576][T11660] Bluetooth: Frame is too long (len 12, expected len 4) [ 603.630743][ T28] audit: type=1326 audit(1782825251.558:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.3.1778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f9d9ce59 code=0x7ffc0000 [ 603.685414][ T28] audit: type=1326 audit(1782825251.558:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.3.1778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f9d9ce59 code=0x7ffc0000 [ 603.749714][ T28] audit: type=1326 audit(1782825251.558:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.3.1778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f9d9ce59 code=0x7ffc0000 [ 603.795042][T11855] netlink: 'syz.0.1782': attribute type 1 has an invalid length. [ 603.803598][ T28] audit: type=1326 audit(1782825251.558:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.3.1778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc2f9d9ce59 code=0x7ffc0000 [ 603.836806][ T28] audit: type=1326 audit(1782825251.608:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.3.1778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc2f9d5d68e code=0x7ffc0000 [ 603.857667][T11855] 8021q: adding VLAN 0 to HW filter on device bond5 [ 603.942602][ T28] audit: type=1326 audit(1782825251.618:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.3.1778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc2f9d5d68e code=0x7ffc0000 [ 604.015067][ T28] audit: type=1326 audit(1782825251.618:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.3.1778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc2f9d5d68e code=0x7ffc0000 [ 604.049740][ T28] audit: type=1326 audit(1782825251.668:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.3.1778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc2f9d5d68e code=0x7ffc0000 [ 604.078188][ T28] audit: type=1326 audit(1782825251.668:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.3.1778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc2f9d5d68e code=0x7ffc0000 [ 604.175360][ T28] audit: type=1326 audit(1782825251.668:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11844 comm="syz.3.1778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc2f9d5d68e code=0x7ffc0000 [ 604.370558][T11660] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 605.388378][T11882] xt_hashlimit: size too large, truncated to 1048576 [ 605.569477][T11890] netlink: 'syz.1.1795': attribute type 1 has an invalid length. [ 605.642036][T11890] 8021q: adding VLAN 0 to HW filter on device bond9 [ 605.837455][T11660] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 607.769497][T11930] netlink: 'syz.4.1809': attribute type 1 has an invalid length. [ 607.870407][T11660] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 607.892213][T11930] 8021q: adding VLAN 0 to HW filter on device bond8 [ 610.800841][T11660] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 610.926820][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 610.926835][ T28] audit: type=1326 audit(1782825258.858:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.3.1821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2f9d9ce59 code=0x0 [ 611.998425][T11976] orangefs_mount: mount request failed with -4 [ 612.320218][T11660] Bluetooth: Wrong link type (-22) [ 613.795522][T12013] orangefs_mount: mount request failed with -4 [ 615.237937][T12055] netlink: 'syz.3.1859': attribute type 1 has an invalid length. [ 615.268839][T12055] 8021q: adding VLAN 0 to HW filter on device bond7 [ 615.298184][T12055] vlan2: entered allmulticast mode [ 615.304870][T12055] bond7: (slave vlan2): Opening slave failed [ 615.525034][T12051] orangefs_mount: mount request failed with -4 [ 616.470901][T12082] netlink: 'syz.3.1872': attribute type 1 has an invalid length. [ 616.516387][T12082] 8021q: adding VLAN 0 to HW filter on device bond8 [ 616.548684][T12082] vlan2: entered allmulticast mode [ 616.555572][T12082] bond8: (slave vlan2): Opening slave failed [ 617.197163][T11660] Bluetooth: hci3: unexpected subevent 0x19 length: 24 < 28 [ 617.247284][T12102] netlink: 'syz.0.1882': attribute type 1 has an invalid length. [ 617.289065][T12102] 8021q: adding VLAN 0 to HW filter on device bond6 [ 617.438770][T12109] netlink: 'syz.3.1883': attribute type 1 has an invalid length. [ 617.623004][T12109] bond9: entered promiscuous mode [ 617.649243][T12109] bond9: entered allmulticast mode [ 617.654868][T12109] 8021q: adding VLAN 0 to HW filter on device bond9 [ 617.677764][T12110] erspan1: entered allmulticast mode [ 617.706559][T12110] bond9: (slave erspan1): making interface the new active one [ 617.730688][T12110] erspan1: entered promiscuous mode [ 617.737362][T12110] bond9: (slave erspan1): Enslaving as an active interface with an up link [ 618.719964][T11660] Bluetooth: hci0: unexpected subevent 0x19 length: 24 < 28 [ 619.041328][T12137] netlink: 'syz.4.1893': attribute type 1 has an invalid length. [ 619.109715][T12137] 8021q: adding VLAN 0 to HW filter on device bond9 [ 619.643480][T12148] netlink: 'syz.1.1895': attribute type 1 has an invalid length. [ 619.778106][T12148] bond10: entered promiscuous mode [ 619.820859][T12148] bond10: entered allmulticast mode [ 619.831908][T12148] 8021q: adding VLAN 0 to HW filter on device bond10 [ 619.868761][T12150] erspan1: entered allmulticast mode [ 619.922496][T12150] bond10: (slave erspan1): making interface the new active one [ 619.930120][T12150] erspan1: entered promiscuous mode [ 619.968841][T12150] bond10: (slave erspan1): Enslaving as an active interface with an up link [ 619.992776][T11660] Bluetooth: hci3: unexpected subevent 0x19 length: 24 < 28 [ 620.321070][T12165] netlink: 'syz.0.1904': attribute type 1 has an invalid length. [ 620.459778][T12165] 8021q: adding VLAN 0 to HW filter on device bond7 [ 621.363709][T12193] netlink: 'syz.3.1915': attribute type 1 has an invalid length. [ 621.506833][T12193] 8021q: adding VLAN 0 to HW filter on device bond10 [ 621.600587][T12197] vlan2: entered allmulticast mode [ 622.032210][T12207] netlink: 'syz.0.1918': attribute type 1 has an invalid length. [ 622.186775][T12207] bond8: entered promiscuous mode [ 622.194367][T12207] bond8: entered allmulticast mode [ 622.200044][T12207] 8021q: adding VLAN 0 to HW filter on device bond8 [ 622.319889][T12219] IPVS: sh: FWM 3 0x00000003 - no destination available [ 622.373664][T12217] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 622.412074][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 622.462527][T12213] erspan1: entered allmulticast mode [ 622.565052][T12213] bond8: (slave erspan1): making interface the new active one [ 622.582708][T12213] erspan1: entered promiscuous mode [ 622.606138][T12213] bond8: (slave erspan1): Enslaving as an active interface with an up link [ 622.851732][T11660] Bluetooth: hci0: adv larger than maximum supported [ 623.523628][T12237] netlink: 'syz.4.1930': attribute type 1 has an invalid length. [ 623.617568][T12237] 8021q: adding VLAN 0 to HW filter on device bond10 [ 624.458795][T11660] Bluetooth: hci3: adv larger than maximum supported [ 624.525607][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.539609][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.181987][T12270] netlink: 'syz.1.1941': attribute type 1 has an invalid length. [ 625.243894][T12270] 8021q: adding VLAN 0 to HW filter on device bond11 [ 625.318182][T11660] Bluetooth: hci0: adv larger than maximum supported [ 626.487456][T12300] netlink: 'syz.3.1954': attribute type 1 has an invalid length. [ 626.513417][T11660] Bluetooth: hci2: adv larger than maximum supported [ 626.540258][T12300] 8021q: adding VLAN 0 to HW filter on device bond11 [ 626.869984][T12320] netlink: 'syz.0.1958': attribute type 1 has an invalid length. [ 627.139000][T12320] bond9: entered promiscuous mode [ 627.160270][T12320] bond9: entered allmulticast mode [ 627.182580][T12320] 8021q: adding VLAN 0 to HW filter on device bond9 [ 627.996778][T11660] Bluetooth: hci1: adv larger than maximum supported [ 631.670831][T11660] Bluetooth: hci3: adv larger than maximum supported [ 631.713431][T11660] Bluetooth: hci1: adv larger than maximum supported [ 634.816210][T11660] Bluetooth: hci2: adv larger than maximum supported [ 635.746355][T11660] Bluetooth: hci0: adv larger than maximum supported [ 636.564961][T11660] Bluetooth: hci3: adv larger than maximum supported [ 639.671082][T12679] 9pnet_virtio: no channels available for device syz [ 639.875221][T12684] bond1: entered allmulticast mode [ 645.408395][T12828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2173'. [ 645.923224][T11660] Bluetooth: hci2: unexpected event 0x17 length: 255 > 6 [ 646.106645][T12851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2184'. [ 646.353683][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2188'. [ 646.916408][T12882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2196'. [ 647.232434][ T5790] Bluetooth: hci2: hardware error 0x04 [ 647.421599][T12904] 9pnet_virtio: no channels available for device syz [ 647.605249][T12910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2207'. [ 647.801266][T12916] 9pnet_virtio: no channels available for device syz [ 648.144491][T12927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2214'. [ 648.176104][T12927] ipvlan0: entered allmulticast mode [ 648.193678][T12927] veth0_vlan: entered allmulticast mode [ 648.462127][T12932] overlayfs: failed to resolve './cgroup': -2 [ 648.493303][T12936] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 648.503604][T12936] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 648.513963][T12936] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 648.540519][T12936] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 648.548695][T12936] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 648.556195][T12936] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 648.791588][T12942] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2218'. [ 649.320909][ T5790] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 649.510885][T12933] chnl_net:caif_netlink_parms(): no params data found [ 649.793429][T12980] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2230'. [ 649.869377][T12933] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.921839][T12933] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.929083][T12933] bridge_slave_0: entered allmulticast mode [ 649.952782][T12933] bridge_slave_0: entered promiscuous mode [ 650.201859][T12933] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.209039][T12933] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.236577][T12933] bridge_slave_1: entered allmulticast mode [ 650.244069][T12933] bridge_slave_1: entered promiscuous mode [ 650.276177][T12933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.314258][T12933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.484065][T12933] team0: Port device team_slave_0 added [ 650.519900][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2234'. [ 650.550548][T12933] team0: Port device team_slave_1 added [ 650.653799][ T5790] Bluetooth: hci4: command tx timeout [ 650.687204][T12933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.732500][T12933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.758570][T12933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.783671][T12933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.802237][T12933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.859898][T12933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.989711][T12933] hsr_slave_0: entered promiscuous mode [ 651.018915][T12933] hsr_slave_1: entered promiscuous mode [ 651.027673][T12933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 651.050783][T12933] Cannot create hsr debugfs directory [ 651.107930][T13004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2239'. [ 651.387860][T12933] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.400805][T12933] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.613038][T12933] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.631164][T12933] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.837998][T12933] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.864162][T12933] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.222572][T12933] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.254115][T12933] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.583869][T12933] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 652.610361][T12933] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 652.630382][T12933] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 652.656801][T13028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2248'. [ 652.680896][ T5790] Bluetooth: hci4: command tx timeout [ 652.686607][T12933] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 652.879906][T12933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.914016][T12933] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.946163][ T9423] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.953348][ T9423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.014064][ T9423] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.021270][ T9423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.158904][T12933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 653.599882][T12933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.642561][T13053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2256'. [ 653.773732][T12933] veth0_vlan: entered promiscuous mode [ 653.795211][T12933] veth1_vlan: entered promiscuous mode [ 653.859644][T12933] veth0_macvtap: entered promiscuous mode [ 653.880171][T12933] veth1_macvtap: entered promiscuous mode [ 653.939020][T12933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.973011][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.995399][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.016578][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.041968][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.067476][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.087121][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.121525][T12933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.139596][T12933] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.157708][T12933] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.170741][T12933] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.190007][T12933] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.538128][ T9416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.609162][ T9416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.657859][ T9423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.685849][ T9423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.761955][ T5790] Bluetooth: hci4: command tx timeout [ 654.870126][T13067] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2260'. [ 654.911010][T13067] ------------[ cut here ]------------ [ 654.916519][T13067] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 654.971428][T13067] WARNING: CPU: 1 PID: 13067 at net/sched/cls_u32.c:855 u32_change+0x1ce8/0x2690 [ 654.981299][T13067] Modules linked in: [ 654.985241][T13067] CPU: 1 PID: 13067 Comm: syz.4.2260 Not tainted syzkaller #0 [ 654.993859][T13067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 655.004963][T13067] RIP: 0010:u32_change+0x1ce8/0x2690 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 655.010391][T13067] Code: f8 eb 59 e8 1a 49 da f8 c6 05 d3 ed c8 05 01 b9 10 00 00 00 48 c7 c7 00 8e c7 8b 4c 89 fe 48 c7 c2 80 8e c7 8b e8 18 22 a4 f8 <0f> 0b e9 1f f0 ff ff e8 ec 48 da f8 eb 24 e8 e5 48 da f8 c6 05 63 [ 655.030363][T13067] RSP: 0018:ffffc90003546d60 EFLAGS: 00010246 [ 655.036849][T13067] RAX: 2502150df8225f00 RBX: ffff88805e9d3800 RCX: 0000000000080000 [ 655.044931][T13067] RDX: ffffc90004de9000 RSI: 0000000000009829 RDI: 000000000000982a [ 655.053035][T13067] RBP: ffffc90003546ef8 R08: ffffc90003546a67 R09: 1ffff920006a8d4c [ 655.061105][T13067] R10: dffffc0000000000 R11: fffff520006a8d4d R12: 1ffff920006a8dbc [ 655.069106][T13067] R13: ffff88802bc380e8 R14: ffff888079091dc0 R15: 0000000000000020 [ 655.077175][T13067] FS: 00007f843cfb66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 655.086227][T13067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 655.092928][T13067] CR2: 00007f00479ec4b8 CR3: 0000000061e22000 CR4: 00000000003506e0 [ 655.101368][T13067] Call Trace: [ 655.104746][T13067] [ 655.107797][T13067] ? u32_get+0x370/0x370 [ 655.112304][T13067] tc_new_tfilter+0x1109/0x1820 [ 655.117296][T13067] ? tcf_proto_signal_destroying+0x240/0x240 [ 655.123383][T13067] ? rcu_read_unlock+0x8c/0xa0 [ 655.128269][T13067] ? tcf_proto_signal_destroying+0x240/0x240 [ 655.134454][T13067] ? tcf_proto_signal_destroying+0x240/0x240 [ 655.140473][T13067] rtnetlink_rcv_msg+0x892/0xf90 [ 655.145699][T13067] ? rtnetlink_rcv_msg+0x220/0xf90 [ 655.150940][T13067] ? rtnetlink_bind+0x80/0x80 [ 655.155663][T13067] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 655.162079][T13067] ? lock_chain_count+0x20/0x20 [ 655.166974][T13067] ? __local_bh_enable_ip+0x13a/0x1c0 [ 655.172578][T13067] ? lockdep_hardirqs_on+0x98/0x150 [ 655.177875][T13067] ? __local_bh_enable_ip+0x13a/0x1c0 [ 655.183379][T13067] ? _local_bh_enable+0xa0/0xa0 [ 655.188272][T13067] ? __dev_queue_xmit+0x275/0x3630 [ 655.193577][T13067] ? __dev_queue_xmit+0x1bc2/0x3630 [ 655.198819][T13067] ? __dev_queue_xmit+0x275/0x3630 [ 655.204558][T13067] ? ref_tracker_free+0x686/0x830 [ 655.209672][T13067] netlink_rcv_skb+0x235/0x4c0 [ 655.214664][T13067] ? rtnetlink_bind+0x80/0x80 [ 655.219376][T13067] ? netlink_ack+0x1160/0x1160 [ 655.224215][T13067] ? __lock_acquire+0x7d80/0x7d80 [ 655.229274][T13067] ? netlink_deliver_tap+0x2e/0x1b0 [ 655.234556][T13067] netlink_unicast+0x7b1/0x930 [ 655.239351][T13067] netlink_sendmsg+0x8d0/0xbf0 [ 655.245010][T13067] ? netlink_getsockopt+0x590/0x590 [ 655.250245][T13067] ? aa_sock_msg_perm+0x94/0x150 [ 655.255617][T13067] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 655.261021][T13067] ? security_socket_sendmsg+0x80/0xa0 [ 655.266508][T13067] ? netlink_getsockopt+0x590/0x590 [ 655.271788][T13067] ____sys_sendmsg+0x61b/0x980 [ 655.276665][T13067] ? __asan_memset+0x22/0x40 [ 655.281354][T13067] ? __sys_sendmsg_sock+0x30/0x30 [ 655.286417][T13067] ? __import_iovec+0x5f2/0x850 [ 655.291389][T13067] ? import_iovec+0x73/0xa0 [ 655.296022][T13067] ___sys_sendmsg+0x2a6/0x360 [ 655.300760][T13067] ? __sys_sendmsg+0x2b0/0x2b0 [ 655.305992][T13067] ? futex_setup_timer+0xc0/0xc0 [ 655.311117][T13067] __sys_sendmmsg+0x2ca/0x510 [ 655.315838][T13067] ? __ia32_sys_sendmsg+0x90/0x90 [ 655.321088][T13067] ? __ia32_sys_get_robust_list+0x110/0x110 [ 655.327024][T13067] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 655.333095][T13067] ? lock_chain_count+0x20/0x20 [ 655.337989][T13067] __x64_sys_sendmmsg+0xa0/0xb0 [ 655.342957][T13067] do_syscall_64+0x55/0xb0 [ 655.347404][T13067] ? clear_bhb_loop+0x40/0x90 [ 655.352313][T13067] ? clear_bhb_loop+0x40/0x90 [ 655.357029][T13067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 655.363089][T13067] RIP: 0033:0x7f843c19ce59 [ 655.367534][T13067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.387288][T13067] RSP: 002b:00007f843cfb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 655.395817][T13067] RAX: ffffffffffffffda RBX: 00007f843c415fa0 RCX: 00007f843c19ce59 [ 655.403929][T13067] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 655.412414][T13067] RBP: 00007f843c232e6f R08: 0000000000000000 R09: 0000000000000000 [ 655.420417][T13067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.428569][T13067] R13: 00007f843c416038 R14: 00007f843c415fa0 R15: 00007fffc2522688 [ 655.436637][T13067] [ 655.439692][T13067] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 655.446982][T13067] CPU: 1 PID: 13067 Comm: syz.4.2260 Not tainted syzkaller #0 [ 655.454456][T13067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 655.464529][T13067] Call Trace: [ 655.467822][T13067] [ 655.470766][T13067] dump_stack_lvl+0x18c/0x250 [ 655.475465][T13067] ? show_regs_print_info+0x20/0x20 [ 655.480668][T13067] ? load_image+0x420/0x420 [ 655.485225][T13067] panic+0x2ca/0x720 [ 655.489137][T13067] ? bpf_jit_dump+0xd0/0xd0 [ 655.493653][T13067] __warn+0x2e0/0x470 [ 655.497639][T13067] ? u32_change+0x1ce8/0x2690 [ 655.502331][T13067] ? u32_change+0x1ce8/0x2690 [ 655.507012][T13067] report_bug+0x2be/0x4f0 [ 655.511417][T13067] ? u32_change+0x1ce8/0x2690 [ 655.516101][T13067] ? u32_change+0x1ce8/0x2690 [ 655.520782][T13067] ? u32_change+0x1cea/0x2690 [ 655.525459][T13067] handle_bug+0xcf/0x120 [ 655.529702][T13067] exc_invalid_op+0x1a/0x50 [ 655.534203][T13067] asm_exc_invalid_op+0x1a/0x20 [ 655.539062][T13067] RIP: 0010:u32_change+0x1ce8/0x2690 [ 655.544347][T13067] Code: f8 eb 59 e8 1a 49 da f8 c6 05 d3 ed c8 05 01 b9 10 00 00 00 48 c7 c7 00 8e c7 8b 4c 89 fe 48 c7 c2 80 8e c7 8b e8 18 22 a4 f8 <0f> 0b e9 1f f0 ff ff e8 ec 48 da f8 eb 24 e8 e5 48 da f8 c6 05 63 [ 655.563958][T13067] RSP: 0018:ffffc90003546d60 EFLAGS: 00010246 [ 655.570114][T13067] RAX: 2502150df8225f00 RBX: ffff88805e9d3800 RCX: 0000000000080000 [ 655.578080][T13067] RDX: ffffc90004de9000 RSI: 0000000000009829 RDI: 000000000000982a [ 655.586047][T13067] RBP: ffffc90003546ef8 R08: ffffc90003546a67 R09: 1ffff920006a8d4c [ 655.594022][T13067] R10: dffffc0000000000 R11: fffff520006a8d4d R12: 1ffff920006a8dbc [ 655.601988][T13067] R13: ffff88802bc380e8 R14: ffff888079091dc0 R15: 0000000000000020 [ 655.609982][T13067] ? u32_get+0x370/0x370 [ 655.614247][T13067] tc_new_tfilter+0x1109/0x1820 [ 655.619113][T13067] ? tcf_proto_signal_destroying+0x240/0x240 [ 655.625102][T13067] ? rcu_read_unlock+0x8c/0xa0 [ 655.629875][T13067] ? tcf_proto_signal_destroying+0x240/0x240 [ 655.635862][T13067] ? tcf_proto_signal_destroying+0x240/0x240 [ 655.641841][T13067] rtnetlink_rcv_msg+0x892/0xf90 [ 655.646785][T13067] ? rtnetlink_rcv_msg+0x220/0xf90 [ 655.651913][T13067] ? rtnetlink_bind+0x80/0x80 [ 655.656594][T13067] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 655.662837][T13067] ? lock_chain_count+0x20/0x20 [ 655.667694][T13067] ? __local_bh_enable_ip+0x13a/0x1c0 [ 655.673074][T13067] ? lockdep_hardirqs_on+0x98/0x150 [ 655.678275][T13067] ? __local_bh_enable_ip+0x13a/0x1c0 [ 655.683644][T13067] ? _local_bh_enable+0xa0/0xa0 [ 655.688493][T13067] ? __dev_queue_xmit+0x275/0x3630 [ 655.693606][T13067] ? __dev_queue_xmit+0x1bc2/0x3630 [ 655.698810][T13067] ? __dev_queue_xmit+0x275/0x3630 [ 655.703941][T13067] ? ref_tracker_free+0x686/0x830 [ 655.708968][T13067] netlink_rcv_skb+0x235/0x4c0 [ 655.713744][T13067] ? rtnetlink_bind+0x80/0x80 [ 655.718445][T13067] ? netlink_ack+0x1160/0x1160 [ 655.723302][T13067] ? __lock_acquire+0x7d80/0x7d80 [ 655.728332][T13067] ? netlink_deliver_tap+0x2e/0x1b0 [ 655.733541][T13067] netlink_unicast+0x7b1/0x930 [ 655.738311][T13067] netlink_sendmsg+0x8d0/0xbf0 [ 655.743254][T13067] ? netlink_getsockopt+0x590/0x590 [ 655.748454][T13067] ? aa_sock_msg_perm+0x94/0x150 [ 655.753394][T13067] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 655.758677][T13067] ? security_socket_sendmsg+0x80/0xa0 [ 655.764132][T13067] ? netlink_getsockopt+0x590/0x590 [ 655.769328][T13067] ____sys_sendmsg+0x61b/0x980 [ 655.774100][T13067] ? __asan_memset+0x22/0x40 [ 655.778695][T13067] ? __sys_sendmsg_sock+0x30/0x30 [ 655.783716][T13067] ? __import_iovec+0x5f2/0x850 [ 655.788572][T13067] ? import_iovec+0x73/0xa0 [ 655.793073][T13067] ___sys_sendmsg+0x2a6/0x360 [ 655.797751][T13067] ? __sys_sendmsg+0x2b0/0x2b0 [ 655.802549][T13067] ? futex_setup_timer+0xc0/0xc0 [ 655.807535][T13067] __sys_sendmmsg+0x2ca/0x510 [ 655.812240][T13067] ? __ia32_sys_sendmsg+0x90/0x90 [ 655.817280][T13067] ? __ia32_sys_get_robust_list+0x110/0x110 [ 655.823183][T13067] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 655.829180][T13067] ? lock_chain_count+0x20/0x20 [ 655.834038][T13067] __x64_sys_sendmmsg+0xa0/0xb0 [ 655.838895][T13067] do_syscall_64+0x55/0xb0 [ 655.843311][T13067] ? clear_bhb_loop+0x40/0x90 [ 655.847991][T13067] ? clear_bhb_loop+0x40/0x90 [ 655.852664][T13067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 655.858557][T13067] RIP: 0033:0x7f843c19ce59 [ 655.862973][T13067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.882591][T13067] RSP: 002b:00007f843cfb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 655.891009][T13067] RAX: ffffffffffffffda RBX: 00007f843c415fa0 RCX: 00007f843c19ce59 [ 655.898984][T13067] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 655.906950][T13067] RBP: 00007f843c232e6f R08: 0000000000000000 R09: 0000000000000000 [ 655.914920][T13067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.922884][T13067] R13: 00007f843c416038 R14: 00007f843c415fa0 R15: 00007fffc2522688 [ 655.930863][T13067] [ 655.934120][T13067] Kernel Offset: disabled [ 655.938435][T13067] Rebooting in 86400 seconds..